last executing test programs: 16m27.546730697s ago: executing program 3 (id=2615): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000300)={0x14, &(0x7f0000000340)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000380)={0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="4031d50000008c3521c5ea67ea19ef525f25c7adcea4290a3c066cd570a8f067a56b3071af2e2af2a72c44b11af103def3212d126744feb7db1fb1898d0b9aa21bc6a06d45096cfee4ffc2d33158f4de78bcca70b2cee8b1cdd756344ceacf183866f7cb97a2695e8fd8297ecfe133ec35625e132cc3f37f9d002eb8ef4874868268d6ea3417f04af922f2f2068673b25407750f5075ce5c38c6130e2badbd2cd616a6d71c9b8daf48ea8979436e322e4da7daa665d88162e93f0db554171b5b018a0f544f7360c79e32d381d8c6d6bf8c4ee0d4c7bd182cbfa0725dbc48681b95e090fe468a4a813cb015d668b292785104ea59b5025ac59da5e14bcba4a20e517c87ceb38fbb48177a6e2e32101d8d6f9f6de6bdc1723424f85de0a11d644464b8607e73b451e5124d3b0d240fff65b14258dc26c4676cc6ddb4d72cbc95f5bdb86a5b39d6ce024d68ad1b34856f68d98a4664d656fa4fd4e4a77d0a3e52ad5c2477cc7684c95d51defde2a55cf37c07f4523f2a5beaa6d5d1390e0cc8c2bea6bfe2208a5c6512c200a026fd3910f9b60171816da531299692c75f67e09cebc1338dae62415ccf705a404ef04b1c39c74b8588a0631b116c20"], &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000640)={0x20, 0x9, 0xb1, "ab4fa2b329452345b1d3235f7bf710c1fe78e39d0c7db087acb7a69548b5c1638ce285e8724308636c1087cd081a819270626bf057e805f969de8d42fa112ae9627afb4c6280f718c7011cfb98a9159c45e3febff006bb783a344e997beefa520874b9ff0e6fcbe5bca26bbde57d6917677bf7001cbbf4e4d9814ed36dfadde96c6272504601dc3b3500adb249da5458b33abc7cad815b0a404e6076c95c5aa7e006cfba55846b990ec23b92edb430368e"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000740)={0x0, 0x8, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000780)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) read$FUSE(0xffffffffffffffff, 0x0, 0x0) connect$inet(r4, &(0x7f00000007c0)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f00000008c0)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x282, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)='pimreg0\x00', 0x9, 0x4, 0x78b}) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f00000009c0)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x1, 'none\x00', 0x2, 0x400, 0x7}, {@remote, 0x4e20, 0x0, 0x401, 0x8}}, 0x44) recvfrom(r4, &(0x7f0000000a40)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) recvmsg(r3, &(0x7f0000000ac0)={&(0x7f0000000b00)=@ax25={{0x3, @null}, [@bcast, @bcast, @netrom, @netrom, @bcast, @default, @rose, @bcast]}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/64, 0x40}], 0x1, &(0x7f0000000c00)=""/212, 0xd4}, 0x20) recvfrom(r0, &(0x7f0000000040)=""/219, 0xdb, 0x12043, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x80, @dev={0xfe, 0x80, '\x00', 0x25}, 0x4}}}, 0x80) socket$unix(0x1, 0x1, 0x0) 16m24.153293026s ago: executing program 3 (id=2628): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 16m22.906868768s ago: executing program 3 (id=2635): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xd, "00020000da6ee06cb8dd94"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0x12, '\x00'/16}, {0x5, 0x9, "04180226077710"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0x12, "0000004b98dd0f3295e1a50000000000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x2, 0x5, "c8f469"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 16m22.473834313s ago: executing program 3 (id=2638): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40844) r1 = syz_io_uring_setup(0x3cc7, &(0x7f0000000340)={0x0, 0x3f7, 0x1, 0xff7ffffe, 0x2e7}, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f0000000480)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x2, 0x1, {0x0, 0x0, r1}}, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xa}]}]}, 0x34}}, 0x4) (async) r3 = io_uring_setup(0x899, &(0x7f0000000540)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x3, &(0x7f0000000680)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0xffff719d}) chroot(&(0x7f0000000500)='./file0/../file0/../file0/../file0\x00') r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000700), 0x80000, 0x0) fanotify_mark(0xffffffffffffffff, 0x8, 0x8, r5, &(0x7f0000000740)='./file0/../file0/../file0/../file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 16m22.308968651s ago: executing program 3 (id=2640): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in6=@mcast2, 0x0, 0x1, 0x4e22, 0xe, 0xa}, {0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d6, 0x32}, 0xa, @in=@multicast1, 0x3504, 0x2, 0x3}}, 0xe4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000840)={{{@in=@multicast2, @in=@remote, 0x3, 0x7, 0x0, 0x2, 0xa}, {0x5, 0x0, 0x1000000000000, 0x0, 0x9, 0x8000000080000001}, {0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x1, 0xd, 0x80000, 0x7, 0x3}}, 0xe8) close(0xffffffffffffffff) 16m18.694299581s ago: executing program 3 (id=2662): add_key$user(0x0, 0x0, &(0x7f0000000080)="75e4cc2de874d1408034f0189cad12b4c1512cca78aa147fbdf96e7b30b303b07f28ca7bf32ba318a3e2ab8f0aae3fe7543be9e2dd236b784873116822db8b4bb86cdb6bae48336701bae0113297732ef91df79d5ae5f7405a3ee21d51e65184cd9e2f397edbd7b2083e9fdf8e0ffd659cb89c3c2bbe5894de997bcc1970f4d9282bac7dbf4d8b", 0x87, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2a020400) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 16m17.89589431s ago: executing program 32 (id=2662): add_key$user(0x0, 0x0, &(0x7f0000000080)="75e4cc2de874d1408034f0189cad12b4c1512cca78aa147fbdf96e7b30b303b07f28ca7bf32ba318a3e2ab8f0aae3fe7543be9e2dd236b784873116822db8b4bb86cdb6bae48336701bae0113297732ef91df79d5ae5f7405a3ee21d51e65184cd9e2f397edbd7b2083e9fdf8e0ffd659cb89c3c2bbe5894de997bcc1970f4d9282bac7dbf4d8b", 0x87, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x2a020400) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 1m21.392750124s ago: executing program 5 (id=6848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x26, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61"}}}}, 0x34) 1m20.065742916s ago: executing program 0 (id=6854): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') ioctl$TUNGETVNETHDRSZ(r0, 0x8004b709, 0x0) 1m19.893629549s ago: executing program 0 (id=6857): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) 1m19.802763023s ago: executing program 0 (id=6858): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000140)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x70, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "eb1b2890"}}}}}, 0x0) 1m19.664200499s ago: executing program 0 (id=6861): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x82, 0x0, &(0x7f0000000140)) 1m19.489406638s ago: executing program 0 (id=6863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000007c0)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x21) 1m18.42562152s ago: executing program 5 (id=6870): prlimit64(0x0, 0xe, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000001, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8004, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = open(0x0, 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x30000, 0x2) flock(r1, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x80000000000001b) munlock(&(0x7f00000cc000/0x1000)=nil, 0x1000) 1m18.160751821s ago: executing program 5 (id=6873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000140)=0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002380)={0x48, 0x0, &(0x7f0000000940)=[@register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001380)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x6, 0x0, &(0x7f0000000380)}) 1m18.049742069s ago: executing program 1 (id=6874): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000004c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000500)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m18.037890341s ago: executing program 5 (id=6875): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004e80)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004f80)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) 1m17.92730237s ago: executing program 1 (id=6876): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000500)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000580)={{@my=0x0}, 0x1, 0x0, 0x6}) 1m17.86188277s ago: executing program 5 (id=6877): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1m17.80615169s ago: executing program 1 (id=6878): futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x1) r0 = gettid() timer_create(0x0, &(0x7f00000004c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000500)=0x0) timer_settime(r1, 0x1, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_create_resource$futex(&(0x7f00000005c0)=0x1) r3 = syz_create_resource$futex(&(0x7f0000000600)=0x1) futex(r3, 0xb, 0x1, 0x0, r2, 0x403) futex(r3, 0xc, 0x1, 0x0, r2, 0x1) 1m17.644097778s ago: executing program 1 (id=6879): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x12, 0x0, 0x7}]}) 1m17.541398976s ago: executing program 1 (id=6880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x26, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x12, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61"}}}}, 0x34) 1m16.6278461s ago: executing program 0 (id=6881): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x7, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000002800)={{0x3, 0x200, 0x1ff, 0x10000, 0x9}, 0xfe, [0xa6, 0xfff, 0x8, 0x3, 0xee, 0x9, 0x4, 0x2, 0x1, 0x3a0beb21, 0xf9, 0x1, 0x38689e47, 0x1, 0x3, 0x1, 0xfff7fffa, 0x40, 0xffff0001, 0xffffffff, 0x7, 0xc432, 0x7fffffff, 0x4581, 0x1, 0x9e33, 0xfb3, 0x6, 0x4, 0x1, 0x1, 0x7, 0xcc, 0x8, 0x27c70f21, 0x0, 0x10000, 0x400, 0x5, 0x0, 0xfff, 0x5, 0x0, 0x1, 0x7fd, 0x7fffffff, 0xb, 0x87, 0x2, 0x8, 0x665, 0x7, 0x4, 0x1000, 0x4, 0x5, 0xfffffff3, 0x7, 0x990, 0x7, 0x800, 0x2, 0x8, 0xc041, 0x0, 0x9, 0x4, 0x7, 0x1, 0xffff, 0x0, 0x4, 0x9, 0x5, 0xfdd, 0xd, 0x8, 0x400, 0x10001, 0x192325e0, 0x2, 0xc, 0x4f30, 0x6f, 0x0, 0x5, 0x6a, 0x8, 0x7830, 0x9, 0x5, 0x5fdee9d8, 0x8, 0x702, 0xfffffffb, 0x80, 0x800, 0x401, 0x9, 0x3, 0x10000, 0x4, 0x6, 0x51, 0x2, 0x9, 0xb8, 0x1a01, 0x6, 0x8, 0x0, 0x8, 0x632, 0x1, 0xfc000, 0x486, 0x2, 0x45, 0x6, 0x379c, 0x2, 0x7, 0x2, 0xfffffffe, 0x1, 0x200000, 0xcc, 0xffff0000, 0x81, 0xc7, 0x800, 0xb0c, 0x3, 0x8001, 0x0, 0x5, 0x1000, 0x10000, 0xfffffffc, 0x6, 0xffffffff, 0x9, 0x6, 0x0, 0x9d, 0x98, 0x4, 0x4b99, 0xfffffff7, 0x2, 0x101, 0x0, 0x9, 0xffff, 0x10001, 0x3, 0x8, 0x91ce, 0x10000, 0x10000, 0x1, 0x1, 0x40, 0x9, 0x3, 0xc8, 0x2, 0xb82b, 0x21080000, 0x987d, 0x3, 0x3ff, 0xa, 0x80, 0x359b, 0x1000, 0x8, 0x401, 0x7, 0x1, 0x7, 0xfffffff8, 0x2, 0x9, 0xb190, 0x347bcc52, 0x80000001, 0x6, 0xa, 0x3, 0xffff7fff, 0x6, 0x1, 0x7, 0x7ba2, 0x8001, 0x800, 0x4, 0x439000, 0x7f, 0x80000001, 0x80000001, 0x0, 0xfffffff8, 0x7, 0x1c, 0x401, 0xfffffffb, 0x10000, 0x1, 0x400, 0x80000001, 0xa1, 0x1ff, 0x3e8, 0x9, 0x7fff, 0x1, 0xffffffff, 0x8, 0x3000000, 0x5, 0x5, 0x1ff, 0x2, 0x3, 0x2, 0x8001, 0x9, 0xfffffff9, 0xfffffff7, 0x0, 0xf, 0x10001, 0x4, 0x8, 0x100, 0x400, 0xfffffffe, 0x9, 0x1a09293a, 0x5, 0xfffffff7, 0x2, 0x2, 0x1, 0x0, 0x7, 0x10000, 0x2b, 0x21, 0xa08, 0xffffffff, 0x2, 0x1ff, 0x5, 0x9, 0x9, 0x5, 0x8, 0x40, 0xc0, 0x1, 0x6, 0x6, 0xc717, 0x7fff, 0x7, 0x0, 0x4, 0x7, 0x7, 0x7, 0x88, 0x9, 0x6, 0x2095, 0x8, 0x3, 0x154, 0x6, 0x120, 0x5, 0x80000000, 0x1ff, 0x1000, 0x7, 0xe9, 0x8, 0x6, 0x100, 0x1000, 0x9, 0x10000, 0xfffffc00, 0x40, 0x4, 0x2, 0x3, 0x36, 0x800, 0x13cf, 0x7, 0x90, 0x8000, 0x9, 0x6, 0x4, 0x100, 0x3, 0x4d4d, 0x1, 0xffffff01, 0x3, 0x1, 0x5, 0xfffffff7, 0xc3e5, 0x4, 0x5, 0x2, 0x3, 0x7, 0x5, 0x8001, 0x0, 0x2, 0x6, 0xc, 0x0, 0x1, 0x6, 0x1, 0x100, 0x480, 0x80000000, 0x101, 0xcf, 0x2, 0x9019eb7, 0x3, 0x0, 0xbf, 0x8001, 0xcd, 0x511be0d1, 0x3, 0x200000, 0x2, 0x9, 0x6, 0x200, 0x9, 0x2, 0x3, 0x6d70, 0xe, 0xbd08, 0x1, 0x9, 0x3, 0x8, 0x4, 0x7, 0x3, 0xa, 0xf, 0x3, 0xfffffffa, 0x6, 0x6, 0x10001, 0x2, 0x2, 0x10000, 0x3, 0x2, 0xac, 0x7, 0x7fffffff, 0xfffffbff, 0xd, 0x63e, 0xb, 0x617838c7, 0xb, 0x3, 0x7, 0x80, 0x2, 0x7fff, 0x5, 0x401, 0x1, 0x7, 0x9, 0xfffffffc, 0x1000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x1, 0x7ff, 0xdb3, 0x5, 0x401, 0x6, 0x4, 0x6, 0x8a, 0x2, 0x1, 0x2, 0x8001, 0xd, 0x800, 0x6, 0x9, 0x7, 0x6, 0x10001, 0x9, 0x6, 0x0, 0x2, 0x2, 0x0, 0x7, 0x7, 0x7, 0xfffff800, 0x1000, 0xffffffc0, 0x5, 0x4, 0x8, 0x9, 0x4, 0x1, 0x7, 0xe, 0x1, 0xffffffff, 0x9, 0x100, 0x7f, 0x6fb, 0x3, 0x0, 0x8, 0x3, 0x3, 0x8, 0x6, 0x4, 0xff, 0x3, 0x0, 0x447, 0x0, 0x81, 0x6, 0x9, 0x3, 0x0, 0x6, 0x7fffffff, 0x8, 0x81, 0x85, 0x33, 0xea6, 0x0, 0x4, 0x8356, 0x10, 0x7ff, 0xf21d, 0x5, 0x1, 0x7, 0x7ff, 0x0, 0xfffffff8, 0x7fff, 0x3, 0x200, 0xffff8000, 0x1, 0x8b3, 0x3, 0x6, 0x3, 0x7, 0x1, 0x6, 0x6, 0x6425, 0x3, 0x61d, 0x10001, 0xfa3, 0x0, 0xe8d, 0x8000, 0x6, 0x800, 0xfffffffd, 0x1, 0xdd0, 0x5, 0x0, 0xf6, 0x2a7, 0xfffffffb, 0x2, 0xe, 0x8, 0x8, 0x1, 0x6, 0xfffff71a, 0x3, 0x2, 0x8, 0x1ff, 0x7, 0x4bc9, 0x1, 0x4, 0xd5d2, 0x8, 0x4, 0x3, 0xfff, 0x4, 0x81fb, 0x5, 0x65cb, 0x8, 0x6, 0x2, 0x5d4, 0x8, 0x8, 0x6, 0x8001, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x6, 0x3, 0x7, 0x6, 0xf4, 0x6, 0x7, 0x1a2, 0x0, 0x2, 0x1, 0x6, 0x1, 0x9, 0xfe1, 0x3, 0x1, 0x6, 0x4, 0x8ecd, 0x7, 0x5, 0x5, 0x7, 0x3, 0x10001, 0xf5, 0xfffffffd, 0x8980, 0x9, 0x3, 0x2cf, 0x835, 0x8, 0x3, 0x9, 0x7, 0x639983f7, 0x800, 0x0, 0x800, 0x9, 0xc, 0x3, 0x6, 0x1, 0x3e85, 0x8, 0x1, 0xc, 0x1, 0x2, 0xac5, 0x7, 0x4, 0x6, 0x200, 0x7ff, 0x49, 0x0, 0x0, 0x3ff, 0x4, 0x7, 0x8, 0x0, 0x0, 0x7, 0xfffffffb, 0x4, 0xce93, 0x4, 0x7fff, 0x7fffffff, 0x1, 0x7fff, 0x5, 0x73a7cf04, 0x8, 0x10000, 0x52643467, 0x8000, 0xfff, 0x83e4, 0x82e, 0x7, 0xd, 0x1, 0x7, 0x7, 0xfbe, 0x4, 0xf92, 0x7, 0x4, 0x1, 0x6, 0x2, 0xf9, 0xb, 0x4, 0x6, 0x6, 0x9, 0x2, 0xfffff001, 0x100, 0x3, 0x9, 0x5, 0x185, 0xdd08000, 0x0, 0x7fffffff, 0x9, 0x9, 0xf2, 0xb3, 0x80, 0x1df, 0x0, 0x0, 0x43, 0x8, 0x2, 0x100, 0x1, 0x0, 0x0, 0x37, 0x5f6, 0x5, 0xfffffffb, 0x7ff, 0x3, 0xff, 0x10000, 0x2, 0xffffffff, 0x0, 0xff, 0x5, 0xa, 0x5d8, 0x8, 0xd8b9, 0x35a, 0x9, 0x7, 0x80000001, 0x5, 0x5, 0xc, 0x81, 0x200, 0x100, 0x8, 0x20000, 0x44fd, 0x1ff, 0xe, 0x5, 0x10, 0x10001, 0x6, 0xffffff81, 0xd, 0x89, 0x7, 0x5, 0x2, 0x8, 0x5, 0x10001, 0xfffffffc, 0x50f2, 0x8, 0x100, 0x0, 0x401, 0xfffffff7, 0x3, 0x3, 0x3, 0x2, 0xa, 0x72b5, 0x80000000, 0x1, 0x8, 0xc, 0x2, 0x80, 0x7f, 0x7, 0x6, 0xf, 0x5, 0x80000000, 0x2, 0x3ff, 0x7, 0x470, 0x1ff, 0x9, 0x6, 0x7, 0x0, 0x1, 0x3, 0x7ff, 0x4, 0x1ea, 0x4, 0x7, 0x800, 0x2, 0x8001, 0x2, 0x4, 0x1000, 0x10, 0x3, 0x6, 0xfffffff7, 0xfffffff8, 0x1000, 0x2, 0x9, 0x8, 0x1000, 0x8, 0x1f21, 0xd, 0x2, 0x80000001, 0xffff739b, 0x1000, 0x8, 0x34, 0x0, 0x1, 0x9, 0x9bb3, 0xfffffffc, 0x8, 0x1, 0x7, 0x6, 0x1, 0x7, 0x8, 0x2, 0x6, 0x9, 0x6, 0x7, 0x80000001, 0xffffff6e, 0x1, 0x4a8f, 0x9, 0x7fffffff, 0x1, 0x5, 0x40d, 0x7fffffff, 0x8, 0xc88, 0x7, 0x9, 0xe43, 0x3, 0x2, 0x2, 0x8, 0x1, 0x0, 0x10000, 0x5, 0x3, 0x8, 0x2, 0x1, 0xfffffff7, 0x2, 0x0, 0x3, 0x3, 0xff, 0x0, 0x10001, 0x2, 0x9, 0x818, 0x6, 0x2, 0xb, 0x80000000, 0x3, 0x52d, 0x7f, 0x4, 0x3, 0x7, 0x7, 0x7, 0x7, 0x4, 0x401, 0xfffffffc, 0x1c6, 0x2, 0x4, 0x6, 0x0, 0x4, 0x7fff, 0x4, 0x1, 0x7ff, 0x80000000, 0x8, 0xc, 0x0, 0x0, 0x1, 0x3, 0x2c3, 0xffff, 0x5, 0xfffffffb, 0xc0, 0x0, 0x1, 0xfff, 0x4, 0x400, 0xffffffff, 0x3, 0x1000, 0x80000000, 0x400, 0x10, 0x6, 0x1, 0x401, 0x4, 0x592, 0x22440, 0x3, 0x7f, 0xb60e, 0x0, 0x8f1d, 0x1, 0xfffffc00, 0x101, 0x8, 0x7, 0x80, 0xf, 0x0, 0x3, 0x7, 0x9, 0x9, 0x3ff, 0x7, 0x0, 0x7cffe6b4, 0x3ff, 0x9, 0x9, 0xfffffffe, 0x128, 0xffffffff, 0x2, 0x7ff, 0x200, 0xffffffff, 0x100, 0x2, 0x3, 0x800, 0x1, 0x5, 0xe7b, 0xf, 0x9, 0x2, 0x7ff, 0x3, 0x2, 0x555, 0x0, 0x8, 0x9, 0x8, 0x80, 0x80, 0x7, 0xd93, 0x5, 0x9, 0x9, 0xd, 0xb659, 0x8, 0x80, 0x8, 0x2, 0x4, 0x0, 0xed7, 0x3c7c20a7, 0x10001, 0x10000, 0xf, 0x8, 0x7, 0xc, 0x4, 0x8, 0x1, 0x835, 0x7f, 0x8e2c, 0x4, 0x80000000, 0x8, 0x88, 0x5, 0x1, 0x0, 0x3, 0x4, 0x3, 0x200, 0x911, 0x101, 0x1000, 0x6, 0xffff, 0x0, 0x7, 0x3d, 0x9, 0x5, 0x9, 0xe14, 0x9, 0x24, 0x3, 0x4, 0x14cf, 0x6, 0xfffffff8, 0xd, 0x3, 0xfffff266, 0x2, 0x200, 0xffffff2d, 0x7f, 0x5, 0xe, 0x10001, 0xfffffffd, 0x3]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000003840)) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000280)) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000002300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) writev(r1, &(0x7f0000000180), 0x100000000000022d) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000026c0)=@newtfilter={0x104, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0xfc}, {0x1004}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2431f344"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xa35, 0x2, 0xbd0}, {0x9, 0x8, 0x0, "4002a2709690bf19"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8000, 0x1, 0x3}, {0x850, 0x4, 0xc0, 0x0, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x1}, {0xce0, 0xc1c, 0xe00, 0x4, 0x8, 0x2}}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x40}, "a6e2be5626d3110751ff35f05d3541bb772cea9e23984e5f6d0584ebee3e74b7615bfc24b6a193ca8174a36a6873bd6f7444761e446645ec193e94b0c75e8c1f8fcad5"}}]}]}]}}]}, 0x104}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002640), 0x42000, 0x0) 1m16.616136341s ago: executing program 2 (id=6882): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000100)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000140)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x4002, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x72, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x0, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x2}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "eb1b2890"}}}}}, 0x0) 1m16.604088593s ago: executing program 4 (id=6883): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x6c, 0x0, &(0x7f0000000240)=[@request_death, @clear_death, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 1m16.326309643s ago: executing program 4 (id=6884): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000740)=""/4098, 0x1002}], 0x2}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x0, 0x0) 1m16.140853099s ago: executing program 2 (id=6885): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x17c, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x11c, 0x2, [@TCA_BPF_ACT={0x118, 0x1, [@m_simple={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x65, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede471"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040), 0x0, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m16.008494461s ago: executing program 2 (id=6886): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000004c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)='.', 0x1a000}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m15.861329205s ago: executing program 2 (id=6887): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5d4, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_ACT={0x138, 0x1, [@m_simple={0x134, 0x1, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x10000006, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x3, 0x8, 0x9, 0xe34}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x45c, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x718, 0x6, 0x6, 0x1, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x234, 0x2, [@m_csum={0x180, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400003, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7ff, 0x0, 0x3, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe1, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0xb0, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0x82, 0x6, "19a3153d78f1563aa910b5ab1c345795a9c5fdb59e62e379667c969fec3a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49fd463ca5e2ee142b1b380dd4e27c637e5eed7dc23e893606a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x5d4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x4, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}}, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000", 0x11, 0x4040080, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m15.704031703s ago: executing program 2 (id=6888): syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000100000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.229635836s ago: executing program 4 (id=6889): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000000200)=""/1, &(0x7f0000000240)=0xf002) 1m14.823336302s ago: executing program 4 (id=6890): pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = memfd_create(&(0x7f0000000400)='\x103q}2\x9a\xce\xaf\x03\x86\xe7\xc0\x14\x8f^\xd5\xfd\xa9\r\xac7A\x94\xeb\xcd\t\x00\x90k\xd6\x05\r\x84\x87\x1c\b\x8c`\xea\x13A\x90m\xb6&\xd0\x9daA\xc5\xb8_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2_\xdb\xc0\x8b\x19\x17\xb7Rvd\xcb:\b\xeeC0\xa3\xa6\xcf\x00\x00\xac\xc5h&+\t\x98\'\xfd|\x11\x99\xa2*6{\xd2C>2\x0e\"\xbc\xda\xee\xb0\xd8\xbf\xaf)\xf58c\x189K\x82\xd1(\xceY*\xcb\x9b\xbdn\x8e\x98m\x10L\xec\xfdWF\x7fj\x19\xb8<\xd2\x9d\xf0\xe9Qy\xe32\xed\x16f\xfe&\x1a\xdb\xeb\xad\xaaE\b\xa9\xf8\xa9s\xc4d\xd4\x03\xf1\xb7xO\x99\x804m[Ai\x13\x02\xf0\x84c2s\xd5P\t`\x9b\x12&\x8cx\x8eg\x9d\xe6g', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}, @NFT_MSG_NEWRULE={0xe0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xcc, 0x7, 0x1, 0x0, "b2ee57dcbbc724b00f84f3e4e576bba1e41978fe6167c6a0cc9125c7e53f67f07a219ec65bec465f08aafbf84562ad4f93a1fba3c2728b794e7a098d00bc743fa48aa0eb205df2bcd6b943cf663685f9d3acef882e69917b37d5ba4402286c7029c0ba0512ff9f5190d6e6eb4b0efeff0a9e7b07fc2c0eed861be4700eb4d1700877c2a47d88e12a0270743173bdf3ac29356c8db37c0ad7e305ad0a699e052aa1a53117fe39fc38c424c38be55b76291047e81144629536aa6c13495c84e064649d7d83b9d3e1eb"}]}, @NFT_MSG_NEWSETELEM={0x28a4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20c, 0x3, 0x0, 0x1, [{0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "b180cb9a99d64730da53c59a580483bac15c2363f571404f3528d56b19995f69e71aaf199ac240b81b2505cf715384960d6193578572cdf19a3dd73d6bde561271103893c972f5cf25f7b5019c48cb2e6fe9221f6acea49eb7621ce6f5c6d343e9e0ce47142ce9ba67dc659eef69c03bf6df3f4314f96b3f3ae54d20ecc3866c957778fab1f43868949d5646fc3934416835afa81314fea2ea2537a9b919fb5c1f207974b7bc720d0c9d291ef5413d4be927cabc37b1f383f3d8be80217a5c261415088c"}]}, @NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "3fcb6ab9ab129700e6665b6cbc3a4ce137d650a8aeff7c85e25d03b734986f21a2ddb5629a8d2b921e1cffe86b4031958bcbf32797a6f5a14b34d321ad0c73333d6b30ba7f96"}, @NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "18a5fc570bdbcf34cc4cbc4fe7e3152e5393472af9e763d3897eb691d3eab2763004e9c951171c8b4052580f70eb052504070ef4eb38e3c93b38d2ef0475e3631c46dd6e2aa5682ef8542f59d7e56340889bdb846f4e92bc9ff1e8b0de17ecea91d34e36f697c358bc135ad206dbb2df45b3a8c5d485f29998784f25aff4a60141f47e96efb8c951a3b6d6702d6374b1b24619b8d15fc50315a2dcd000c873e362c4a774d0e2fa76acbfe05d156f10933b657d8492853fc9479dd3babb5adb552732a44ec96ac3498e9efd127549f3d81ebdf0eca8c0b025c220036b3e2db9a50c"}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13ac, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x10c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x6a, 0x1, "2f4d78c8e9d5f326faab2a3316fe6077727e91ccadc749fa6f13e5ee9ea4e206b559f5dd01676aaee7d501d391f46f860cc0d6754901af98eebc4c8256a578f4a3ddfa68b52a4bd63bd760a84ec4e04c5771ed69dc0a25770f734d6444b026f42ada2896f4c2"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x2a, 0x1, "9507efe56ab761597cdada9113d33d99d438777b7e6380a7c68bb049485856900032a74bda8a"}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_ELEM_USERDATA={0xf2, 0x6, 0x1, 0x0, "2f1520bf1105d31795e307aedd234a47c6e19c434e05cf5c16efeab858935739d390e8ce4d199a5d44f6dc1e459aef6c440fc46d7863b6f4b87565399175b816cacbc6479de150791ffc395319cfa577b2fb6b3960a9ac508bba2b82543737231a57ff77c433bdebf2203cbd078d736e71dcce35c1781f75e87007133b2f89ba5e238db900e3b3c5b2df3b183caa2e01509e4a3fd24700ab6b39f34b82bcce3f939d166456453c622ea12e4ab7051ccf809e643c851e6d9b76fdcd13b9a0cb098bcbf65f38512182da32c19a0c014c84e615cc57b5b2849ac75747ec6e5819b50349830e5447a3a6c5df819a7859"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x43e}, @NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xff}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CT_KEY={0x8}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "1ca309f1897c93b0170d6cba7a643cb92fae7a2f762f6eb4dd4245206b81b3adaaf7e372408cf5e10b2d90bbd1b91e61e44652144877"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1290, 0x3, 0x0, 0x1, [{0x170, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "180bb209bcc5db5b9b21003f3b391bf65ede9e9749c5a82d8a7f6402b4910c4da093497a19434ff0b8a65ea81ee5b7b560ede9bf1ac7d9545f00c77d174341e3ad64a0cba787be2cc7aecc79e7af5141c9a3247350c2cfd98dc085abbfe72bfbfb2667787e2466a5b8183f58ae2af5e8cd9602bed0ffde91691acdec6a66fa3e2e76b44c608c6a576d6881f7f88d87431514831c6c5584f57f5172b102add8850914f89be5"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "146c8bc29e01efeb46"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x111c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x101c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000000}, @NFTA_SET_ELEM_KEY_END={0x50, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "086d6a39fb0a3b3fcaf58ea461"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8}]}}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x29ec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/consoles\x00', 0x0, 0x0) splice(r6, &(0x7f00000005c0)=0x10, r5, 0x0, 0x807, 0x0) ftruncate(r2, 0x7fff) splice(r2, 0x0, r1, 0x0, 0x100002, 0x9) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r7, 0x6f82, 0xb) 1m14.174159605s ago: executing program 4 (id=6891): syz_emit_ethernet(0xd2, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xc4, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010105, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000005af3"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @rr={0x7, 0x1f, 0x63, [@remote, @broadcast, @private=0xa010100, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}, @local]}, @cipso={0x86, 0x41, 0xfffffffffffffffd, [{0x5, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x8]}]}}}}}}}, 0x0) 1m14.104648864s ago: executing program 5 (id=6892): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f00002ba000/0x3000)=nil) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000400), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101003, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101005, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000680)={@multicast1=0x1c101005, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1m14.089816262s ago: executing program 1 (id=6893): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f00002ba000/0x3000)=nil) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000400), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x1, 0x0, @rand_addr=0x1c101002, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) 1m14.036433553s ago: executing program 2 (id=6894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8, 0x1b, 0xfffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m13.781510816s ago: executing program 4 (id=6895): syz_open_dev$ptys(0xc, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 33 (id=6881): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x10001, 0x7, 0xeeee0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000002800)={{0x3, 0x200, 0x1ff, 0x10000, 0x9}, 0xfe, [0xa6, 0xfff, 0x8, 0x3, 0xee, 0x9, 0x4, 0x2, 0x1, 0x3a0beb21, 0xf9, 0x1, 0x38689e47, 0x1, 0x3, 0x1, 0xfff7fffa, 0x40, 0xffff0001, 0xffffffff, 0x7, 0xc432, 0x7fffffff, 0x4581, 0x1, 0x9e33, 0xfb3, 0x6, 0x4, 0x1, 0x1, 0x7, 0xcc, 0x8, 0x27c70f21, 0x0, 0x10000, 0x400, 0x5, 0x0, 0xfff, 0x5, 0x0, 0x1, 0x7fd, 0x7fffffff, 0xb, 0x87, 0x2, 0x8, 0x665, 0x7, 0x4, 0x1000, 0x4, 0x5, 0xfffffff3, 0x7, 0x990, 0x7, 0x800, 0x2, 0x8, 0xc041, 0x0, 0x9, 0x4, 0x7, 0x1, 0xffff, 0x0, 0x4, 0x9, 0x5, 0xfdd, 0xd, 0x8, 0x400, 0x10001, 0x192325e0, 0x2, 0xc, 0x4f30, 0x6f, 0x0, 0x5, 0x6a, 0x8, 0x7830, 0x9, 0x5, 0x5fdee9d8, 0x8, 0x702, 0xfffffffb, 0x80, 0x800, 0x401, 0x9, 0x3, 0x10000, 0x4, 0x6, 0x51, 0x2, 0x9, 0xb8, 0x1a01, 0x6, 0x8, 0x0, 0x8, 0x632, 0x1, 0xfc000, 0x486, 0x2, 0x45, 0x6, 0x379c, 0x2, 0x7, 0x2, 0xfffffffe, 0x1, 0x200000, 0xcc, 0xffff0000, 0x81, 0xc7, 0x800, 0xb0c, 0x3, 0x8001, 0x0, 0x5, 0x1000, 0x10000, 0xfffffffc, 0x6, 0xffffffff, 0x9, 0x6, 0x0, 0x9d, 0x98, 0x4, 0x4b99, 0xfffffff7, 0x2, 0x101, 0x0, 0x9, 0xffff, 0x10001, 0x3, 0x8, 0x91ce, 0x10000, 0x10000, 0x1, 0x1, 0x40, 0x9, 0x3, 0xc8, 0x2, 0xb82b, 0x21080000, 0x987d, 0x3, 0x3ff, 0xa, 0x80, 0x359b, 0x1000, 0x8, 0x401, 0x7, 0x1, 0x7, 0xfffffff8, 0x2, 0x9, 0xb190, 0x347bcc52, 0x80000001, 0x6, 0xa, 0x3, 0xffff7fff, 0x6, 0x1, 0x7, 0x7ba2, 0x8001, 0x800, 0x4, 0x439000, 0x7f, 0x80000001, 0x80000001, 0x0, 0xfffffff8, 0x7, 0x1c, 0x401, 0xfffffffb, 0x10000, 0x1, 0x400, 0x80000001, 0xa1, 0x1ff, 0x3e8, 0x9, 0x7fff, 0x1, 0xffffffff, 0x8, 0x3000000, 0x5, 0x5, 0x1ff, 0x2, 0x3, 0x2, 0x8001, 0x9, 0xfffffff9, 0xfffffff7, 0x0, 0xf, 0x10001, 0x4, 0x8, 0x100, 0x400, 0xfffffffe, 0x9, 0x1a09293a, 0x5, 0xfffffff7, 0x2, 0x2, 0x1, 0x0, 0x7, 0x10000, 0x2b, 0x21, 0xa08, 0xffffffff, 0x2, 0x1ff, 0x5, 0x9, 0x9, 0x5, 0x8, 0x40, 0xc0, 0x1, 0x6, 0x6, 0xc717, 0x7fff, 0x7, 0x0, 0x4, 0x7, 0x7, 0x7, 0x88, 0x9, 0x6, 0x2095, 0x8, 0x3, 0x154, 0x6, 0x120, 0x5, 0x80000000, 0x1ff, 0x1000, 0x7, 0xe9, 0x8, 0x6, 0x100, 0x1000, 0x9, 0x10000, 0xfffffc00, 0x40, 0x4, 0x2, 0x3, 0x36, 0x800, 0x13cf, 0x7, 0x90, 0x8000, 0x9, 0x6, 0x4, 0x100, 0x3, 0x4d4d, 0x1, 0xffffff01, 0x3, 0x1, 0x5, 0xfffffff7, 0xc3e5, 0x4, 0x5, 0x2, 0x3, 0x7, 0x5, 0x8001, 0x0, 0x2, 0x6, 0xc, 0x0, 0x1, 0x6, 0x1, 0x100, 0x480, 0x80000000, 0x101, 0xcf, 0x2, 0x9019eb7, 0x3, 0x0, 0xbf, 0x8001, 0xcd, 0x511be0d1, 0x3, 0x200000, 0x2, 0x9, 0x6, 0x200, 0x9, 0x2, 0x3, 0x6d70, 0xe, 0xbd08, 0x1, 0x9, 0x3, 0x8, 0x4, 0x7, 0x3, 0xa, 0xf, 0x3, 0xfffffffa, 0x6, 0x6, 0x10001, 0x2, 0x2, 0x10000, 0x3, 0x2, 0xac, 0x7, 0x7fffffff, 0xfffffbff, 0xd, 0x63e, 0xb, 0x617838c7, 0xb, 0x3, 0x7, 0x80, 0x2, 0x7fff, 0x5, 0x401, 0x1, 0x7, 0x9, 0xfffffffc, 0x1000, 0x4, 0x0, 0x2, 0x6, 0x5, 0x1, 0x7ff, 0xdb3, 0x5, 0x401, 0x6, 0x4, 0x6, 0x8a, 0x2, 0x1, 0x2, 0x8001, 0xd, 0x800, 0x6, 0x9, 0x7, 0x6, 0x10001, 0x9, 0x6, 0x0, 0x2, 0x2, 0x0, 0x7, 0x7, 0x7, 0xfffff800, 0x1000, 0xffffffc0, 0x5, 0x4, 0x8, 0x9, 0x4, 0x1, 0x7, 0xe, 0x1, 0xffffffff, 0x9, 0x100, 0x7f, 0x6fb, 0x3, 0x0, 0x8, 0x3, 0x3, 0x8, 0x6, 0x4, 0xff, 0x3, 0x0, 0x447, 0x0, 0x81, 0x6, 0x9, 0x3, 0x0, 0x6, 0x7fffffff, 0x8, 0x81, 0x85, 0x33, 0xea6, 0x0, 0x4, 0x8356, 0x10, 0x7ff, 0xf21d, 0x5, 0x1, 0x7, 0x7ff, 0x0, 0xfffffff8, 0x7fff, 0x3, 0x200, 0xffff8000, 0x1, 0x8b3, 0x3, 0x6, 0x3, 0x7, 0x1, 0x6, 0x6, 0x6425, 0x3, 0x61d, 0x10001, 0xfa3, 0x0, 0xe8d, 0x8000, 0x6, 0x800, 0xfffffffd, 0x1, 0xdd0, 0x5, 0x0, 0xf6, 0x2a7, 0xfffffffb, 0x2, 0xe, 0x8, 0x8, 0x1, 0x6, 0xfffff71a, 0x3, 0x2, 0x8, 0x1ff, 0x7, 0x4bc9, 0x1, 0x4, 0xd5d2, 0x8, 0x4, 0x3, 0xfff, 0x4, 0x81fb, 0x5, 0x65cb, 0x8, 0x6, 0x2, 0x5d4, 0x8, 0x8, 0x6, 0x8001, 0x0, 0x0, 0xfff, 0x7, 0x5, 0x6, 0x3, 0x7, 0x6, 0xf4, 0x6, 0x7, 0x1a2, 0x0, 0x2, 0x1, 0x6, 0x1, 0x9, 0xfe1, 0x3, 0x1, 0x6, 0x4, 0x8ecd, 0x7, 0x5, 0x5, 0x7, 0x3, 0x10001, 0xf5, 0xfffffffd, 0x8980, 0x9, 0x3, 0x2cf, 0x835, 0x8, 0x3, 0x9, 0x7, 0x639983f7, 0x800, 0x0, 0x800, 0x9, 0xc, 0x3, 0x6, 0x1, 0x3e85, 0x8, 0x1, 0xc, 0x1, 0x2, 0xac5, 0x7, 0x4, 0x6, 0x200, 0x7ff, 0x49, 0x0, 0x0, 0x3ff, 0x4, 0x7, 0x8, 0x0, 0x0, 0x7, 0xfffffffb, 0x4, 0xce93, 0x4, 0x7fff, 0x7fffffff, 0x1, 0x7fff, 0x5, 0x73a7cf04, 0x8, 0x10000, 0x52643467, 0x8000, 0xfff, 0x83e4, 0x82e, 0x7, 0xd, 0x1, 0x7, 0x7, 0xfbe, 0x4, 0xf92, 0x7, 0x4, 0x1, 0x6, 0x2, 0xf9, 0xb, 0x4, 0x6, 0x6, 0x9, 0x2, 0xfffff001, 0x100, 0x3, 0x9, 0x5, 0x185, 0xdd08000, 0x0, 0x7fffffff, 0x9, 0x9, 0xf2, 0xb3, 0x80, 0x1df, 0x0, 0x0, 0x43, 0x8, 0x2, 0x100, 0x1, 0x0, 0x0, 0x37, 0x5f6, 0x5, 0xfffffffb, 0x7ff, 0x3, 0xff, 0x10000, 0x2, 0xffffffff, 0x0, 0xff, 0x5, 0xa, 0x5d8, 0x8, 0xd8b9, 0x35a, 0x9, 0x7, 0x80000001, 0x5, 0x5, 0xc, 0x81, 0x200, 0x100, 0x8, 0x20000, 0x44fd, 0x1ff, 0xe, 0x5, 0x10, 0x10001, 0x6, 0xffffff81, 0xd, 0x89, 0x7, 0x5, 0x2, 0x8, 0x5, 0x10001, 0xfffffffc, 0x50f2, 0x8, 0x100, 0x0, 0x401, 0xfffffff7, 0x3, 0x3, 0x3, 0x2, 0xa, 0x72b5, 0x80000000, 0x1, 0x8, 0xc, 0x2, 0x80, 0x7f, 0x7, 0x6, 0xf, 0x5, 0x80000000, 0x2, 0x3ff, 0x7, 0x470, 0x1ff, 0x9, 0x6, 0x7, 0x0, 0x1, 0x3, 0x7ff, 0x4, 0x1ea, 0x4, 0x7, 0x800, 0x2, 0x8001, 0x2, 0x4, 0x1000, 0x10, 0x3, 0x6, 0xfffffff7, 0xfffffff8, 0x1000, 0x2, 0x9, 0x8, 0x1000, 0x8, 0x1f21, 0xd, 0x2, 0x80000001, 0xffff739b, 0x1000, 0x8, 0x34, 0x0, 0x1, 0x9, 0x9bb3, 0xfffffffc, 0x8, 0x1, 0x7, 0x6, 0x1, 0x7, 0x8, 0x2, 0x6, 0x9, 0x6, 0x7, 0x80000001, 0xffffff6e, 0x1, 0x4a8f, 0x9, 0x7fffffff, 0x1, 0x5, 0x40d, 0x7fffffff, 0x8, 0xc88, 0x7, 0x9, 0xe43, 0x3, 0x2, 0x2, 0x8, 0x1, 0x0, 0x10000, 0x5, 0x3, 0x8, 0x2, 0x1, 0xfffffff7, 0x2, 0x0, 0x3, 0x3, 0xff, 0x0, 0x10001, 0x2, 0x9, 0x818, 0x6, 0x2, 0xb, 0x80000000, 0x3, 0x52d, 0x7f, 0x4, 0x3, 0x7, 0x7, 0x7, 0x7, 0x4, 0x401, 0xfffffffc, 0x1c6, 0x2, 0x4, 0x6, 0x0, 0x4, 0x7fff, 0x4, 0x1, 0x7ff, 0x80000000, 0x8, 0xc, 0x0, 0x0, 0x1, 0x3, 0x2c3, 0xffff, 0x5, 0xfffffffb, 0xc0, 0x0, 0x1, 0xfff, 0x4, 0x400, 0xffffffff, 0x3, 0x1000, 0x80000000, 0x400, 0x10, 0x6, 0x1, 0x401, 0x4, 0x592, 0x22440, 0x3, 0x7f, 0xb60e, 0x0, 0x8f1d, 0x1, 0xfffffc00, 0x101, 0x8, 0x7, 0x80, 0xf, 0x0, 0x3, 0x7, 0x9, 0x9, 0x3ff, 0x7, 0x0, 0x7cffe6b4, 0x3ff, 0x9, 0x9, 0xfffffffe, 0x128, 0xffffffff, 0x2, 0x7ff, 0x200, 0xffffffff, 0x100, 0x2, 0x3, 0x800, 0x1, 0x5, 0xe7b, 0xf, 0x9, 0x2, 0x7ff, 0x3, 0x2, 0x555, 0x0, 0x8, 0x9, 0x8, 0x80, 0x80, 0x7, 0xd93, 0x5, 0x9, 0x9, 0xd, 0xb659, 0x8, 0x80, 0x8, 0x2, 0x4, 0x0, 0xed7, 0x3c7c20a7, 0x10001, 0x10000, 0xf, 0x8, 0x7, 0xc, 0x4, 0x8, 0x1, 0x835, 0x7f, 0x8e2c, 0x4, 0x80000000, 0x8, 0x88, 0x5, 0x1, 0x0, 0x3, 0x4, 0x3, 0x200, 0x911, 0x101, 0x1000, 0x6, 0xffff, 0x0, 0x7, 0x3d, 0x9, 0x5, 0x9, 0xe14, 0x9, 0x24, 0x3, 0x4, 0x14cf, 0x6, 0xfffffff8, 0xd, 0x3, 0xfffff266, 0x2, 0x200, 0xffffff2d, 0x7f, 0x5, 0xe, 0x10001, 0xfffffffd, 0x3]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000003840)) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000280)) read$FUSE(r2, &(0x7f00000002c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000002300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) writev(r1, &(0x7f0000000180), 0x100000000000022d) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002500)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000026c0)=@newtfilter={0x104, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_EMATCHES={0xd0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0xfc}, {0x1004}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2431f344"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x9c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xa35, 0x2, 0xbd0}, {0x9, 0x8, 0x0, "4002a2709690bf19"}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8000, 0x1, 0x3}, {0x850, 0x4, 0xc0, 0x0, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x1}, {0xce0, 0xc1c, 0xe00, 0x4, 0x8, 0x2}}}, @TCF_EM_CONTAINER={0x50, 0x2, 0x0, 0x0, {{0x1ff, 0x0, 0x40}, "a6e2be5626d3110751ff35f05d3541bb772cea9e23984e5f6d0584ebee3e74b7615bfc24b6a193ca8174a36a6873bd6f7444761e446645ec193e94b0c75e8c1f8fcad5"}}]}]}]}}]}, 0x104}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000002640), 0x42000, 0x0) kernel console output (not intermixed with test programs): __fget_files+0x3a2/0x420 [ 1332.446794][T23403] __x64_sys_sendmsg+0x1b1/0x290 [ 1332.446818][T23403] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1332.446861][T23403] do_syscall_64+0x166/0x520 [ 1332.446884][T23403] ? trace_irq_disable+0x3b/0x140 [ 1332.446905][T23403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.446926][T23403] ? clear_bhb_loop+0x70/0xc0 [ 1332.446951][T23403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.446970][T23403] RIP: 0033:0x7f6d0e59e559 [ 1332.446990][T23403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.447008][T23403] RSP: 002b:00007f6d0f3e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.447031][T23403] RAX: ffffffffffffffda RBX: 00007f6d0e825fa0 RCX: 00007f6d0e59e559 [ 1332.447046][T23403] RDX: 0000000000000000 RSI: 0000200000001700 RDI: 0000000000000003 [ 1332.447059][T23403] RBP: 00007f6d0f3e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.447082][T23403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.447094][T23403] R13: 00007f6d0e826038 R14: 00007f6d0e825fa0 R15: 00007f6d0e94fa48 [ 1332.447126][T23403] [ 1332.745895][T14067] lwtunnel_output(): recursion limit reached on datapath [ 1333.383434][T14067] lwtunnel_output(): recursion limit reached on datapath [ 1335.306213][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1335.952124][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1335.961367][T14074] lwtunnel_output(): recursion limit reached on datapath [ 1336.650272][T23405] tipc: Enabling of bearer rejected, failed to enable media [ 1336.763682][T23413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.781239][T23413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.796657][T23413] xt_hashlimit: size too large, truncated to 1048576 [ 1336.865807][T23417] lwtunnel_output(): recursion limit reached on datapath [ 1337.132007][T14971] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1337.295056][T14971] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1337.297784][T14971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.297846][T14971] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.297944][T14971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.325067][T14971] usb 5-1: config 0 descriptor?? [ 1337.372683][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5544'. [ 1337.441274][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5545'. [ 1337.552332][T23437] ªªªªªª: renamed from vlan0 (while UP) [ 1337.810065][T14971] cm6533_jd 0003:0D8C:0022.0066: unknown main item tag 0x0 [ 1337.818989][T14971] cm6533_jd 0003:0D8C:0022.0066: unknown main item tag 0x0 [ 1337.832198][T14971] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0066/input/input93 [ 1337.901087][T14971] cm6533_jd 0003:0D8C:0022.0066: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 1337.902107][T14963] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1338.074790][T14963] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1338.075816][T14963] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.075871][T14963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.132760][T23447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.193336][T23447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.201491][T14963] usb 2-1: config 0 descriptor?? [ 1338.229878][T14963] pwc: Askey VC010 type 2 USB webcam detected. [ 1338.279740][T14971] usb 5-1: USB disconnect, device number 42 [ 1338.311632][T23451] FAULT_INJECTION: forcing a failure. [ 1338.311632][T23451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1338.311672][T23451] CPU: 1 UID: 0 PID: 23451 Comm: syz.2.5550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1338.311702][T23451] Tainted: [L]=SOFTLOCKUP [ 1338.311712][T23451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1338.311726][T23451] Call Trace: [ 1338.311736][T23451] [ 1338.311747][T23451] dump_stack_lvl+0xe8/0x150 [ 1338.311786][T23451] should_fail_ex+0x410/0x560 [ 1338.311824][T23451] _copy_from_user+0x2d/0xb0 [ 1338.311864][T23451] sk_setsockopt+0x2b5/0x2f20 [ 1338.311908][T23451] ? __pfx_sk_setsockopt+0x10/0x10 [ 1338.311975][T23451] ? aa_sock_opt_perm+0xe1/0x1e0 [ 1338.312016][T23451] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1338.312055][T23451] do_sock_setsockopt+0x11b/0x1b0 [ 1338.312084][T23451] __x64_sys_setsockopt+0x13d/0x1b0 [ 1338.312114][T23451] do_syscall_64+0x166/0x520 [ 1338.312143][T23451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.312166][T23451] ? clear_bhb_loop+0x70/0xc0 [ 1338.312194][T23451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.312217][T23451] RIP: 0033:0x7fe64bb9e559 [ 1338.312238][T23451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.312258][T23451] RSP: 002b:00007fe64cab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1338.312284][T23451] RAX: ffffffffffffffda RBX: 00007fe64be26090 RCX: 00007fe64bb9e559 [ 1338.312301][T23451] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 1338.312315][T23451] RBP: 00007fe64cab9090 R08: 0000000000000010 R09: 0000000000000000 [ 1338.312330][T23451] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1338.312344][T23451] R13: 00007fe64be26128 R14: 00007fe64be26090 R15: 00007fe64bf4fa48 [ 1338.312379][T23451] [ 1338.517381][T14065] lwtunnel_output(): recursion limit reached on datapath [ 1338.528744][T23442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.529466][T23442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.537334][T23453] ip_tables: iptables: counters copy to user failed while replacing table [ 1339.105468][T14963] pwc: recv_control_msg error -71 req 02 val 2700 [ 1339.105967][T14963] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1339.106428][T14963] pwc: recv_control_msg error -71 req 04 val 1000 [ 1339.106865][T14963] pwc: recv_control_msg error -71 req 04 val 1300 [ 1339.107321][T14963] pwc: recv_control_msg error -71 req 04 val 1400 [ 1339.107792][T14963] pwc: recv_control_msg error -71 req 02 val 2000 [ 1339.108233][T14963] pwc: recv_control_msg error -71 req 02 val 2100 [ 1339.121214][T14963] pwc: recv_control_msg error -71 req 04 val 1500 [ 1339.135371][T14963] pwc: recv_control_msg error -71 req 02 val 2500 [ 1339.175525][T14963] pwc: recv_control_msg error -71 req 02 val 2400 [ 1339.182423][T14963] pwc: recv_control_msg error -71 req 02 val 2600 [ 1339.186043][T14963] pwc: recv_control_msg error -71 req 02 val 2900 [ 1339.186461][T14963] pwc: recv_control_msg error -71 req 02 val 2800 [ 1339.187021][T14963] pwc: recv_control_msg error -71 req 04 val 1100 [ 1339.215470][T14065] lwtunnel_output(): recursion limit reached on datapath [ 1339.225959][T14963] pwc: recv_control_msg error -71 req 04 val 1200 [ 1339.255550][T14963] pwc: Registered as video103. [ 1339.258150][T14963] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input94 [ 1339.329623][T14963] usb 2-1: USB disconnect, device number 27 [ 1339.534733][T23471] bond0: (slave bond_slave_1): Releasing backup interface [ 1340.447695][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1340.552435][T23484] socket: no more sockets [ 1341.217511][T23489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1341.542995][ T5713] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1341.577249][T23495] FAULT_INJECTION: forcing a failure. [ 1341.577249][T23495] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.577289][T23495] CPU: 0 UID: 0 PID: 23495 Comm: syz.2.5562 Tainted: G L syzkaller #0 PREEMPT(full) [ 1341.577321][T23495] Tainted: [L]=SOFTLOCKUP [ 1341.577330][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1341.577352][T23495] Call Trace: [ 1341.577361][T23495] [ 1341.577372][T23495] dump_stack_lvl+0xe8/0x150 [ 1341.577411][T23495] should_fail_ex+0x410/0x560 [ 1341.577451][T23495] should_failslab+0xa8/0x100 [ 1341.577486][T23495] __kmalloc_cache_noprof+0xa3/0x600 [ 1341.577516][T23495] ? binder_ioctl_write_read+0x129e/0xa940 [ 1341.577547][T23495] ? binder_ioctl_write_read+0x129e/0xa940 [ 1341.577586][T23495] binder_ioctl_write_read+0x129e/0xa940 [ 1341.577649][T23495] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1341.577692][T23495] ? stack_trace_save+0xa9/0x100 [ 1341.577718][T23495] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1341.577747][T23495] ? kasan_save_track+0x4f/0x80 [ 1341.577780][T23495] ? stack_depot_save_flags+0x33/0x7f0 [ 1341.577813][T23495] ? __lock_acquire+0x747/0x2de0 [ 1341.577846][T23495] ? __lock_acquire+0x747/0x2de0 [ 1341.577887][T23495] ? binder_debug+0x155/0x1d0 [ 1341.577920][T23495] ? __pfx_binder_debug+0x10/0x10 [ 1341.577945][T23495] ? do_raw_spin_lock+0x12b/0x2f0 [ 1341.577994][T23495] ? _raw_spin_unlock+0x28/0x50 [ 1341.578013][T23495] ? binder_get_thread+0x176/0x6d0 [ 1341.578040][T23495] ? binder_ioctl+0x186/0x1b00 [ 1341.578072][T23495] binder_ioctl+0x41d/0x1b00 [ 1341.578129][T23495] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1341.578164][T23495] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1341.578197][T23495] ? do_vfs_ioctl+0x116f/0x1530 [ 1341.578223][T23495] ? __pfx_binder_ioctl+0x10/0x10 [ 1341.578251][T23495] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1341.578291][T23495] ? hook_file_ioctl+0x1f2/0x600 [ 1341.578340][T23495] ? __fget_files+0x2a/0x420 [ 1341.578364][T23495] ? __fget_files+0x2a/0x420 [ 1341.578384][T23495] ? __fget_files+0x3a2/0x420 [ 1341.578401][T23495] ? __fget_files+0x2a/0x420 [ 1341.578425][T23495] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1341.578446][T23495] ? __pfx_binder_ioctl+0x10/0x10 [ 1341.578474][T23495] __se_sys_ioctl+0xfc/0x170 [ 1341.578503][T23495] do_syscall_64+0x166/0x520 [ 1341.578529][T23495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.578553][T23495] ? clear_bhb_loop+0x70/0xc0 [ 1341.578579][T23495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.578600][T23495] RIP: 0033:0x7fe64bb9e559 [ 1341.578621][T23495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1341.578648][T23495] RSP: 002b:00007fe64cada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.578672][T23495] RAX: ffffffffffffffda RBX: 00007fe64be25fa0 RCX: 00007fe64bb9e559 [ 1341.578690][T23495] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 1341.578703][T23495] RBP: 00007fe64cada090 R08: 0000000000000000 R09: 0000000000000000 [ 1341.578719][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1341.578731][T23495] R13: 00007fe64be26038 R14: 00007fe64be25fa0 R15: 00007fe64bf4fa48 [ 1341.578766][T23495] [ 1341.612322][T23495] binder: 23494:23495 ioctl c0306201 200000000480 returned -14 [ 1341.718036][T14074] lwtunnel_output(): recursion limit reached on datapath [ 1341.807290][ T5713] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1341.846667][ T5713] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 1341.846704][ T5713] usb 5-1: config 2 has an invalid descriptor of length 1, skipping remainder of the config [ 1341.846734][ T5713] usb 5-1: config 2 has no interface number 0 [ 1341.846834][ T5713] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1341.846901][ T5713] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 257 [ 1341.847024][ T5713] usb 5-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.985679][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.985749][ T5713] usb 5-1: Product: syz [ 1341.985806][ T5713] usb 5-1: Manufacturer: syz [ 1341.985818][ T5713] usb 5-1: SerialNumber: syz [ 1342.107819][T23489] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1342.330798][ T5713] usb 5-1: probing VID:PID(0424:012C) [ 1342.347690][ T5713] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 1342.347752][ T5713] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1342.368611][ T5713] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 1342.374673][ T5713] usb 5-1: USB disconnect, device number 43 [ 1342.502611][T14963] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1342.658209][T14963] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1342.659423][T14963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.659455][T14963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.659497][T14963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.705008][T14963] usb 3-1: config 0 descriptor?? [ 1343.139315][T14963] cm6533_jd 0003:0D8C:0022.0067: unknown main item tag 0x0 [ 1343.139442][T14963] cm6533_jd 0003:0D8C:0022.0067: unknown main item tag 0x0 [ 1343.206130][T14963] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0067/input/input95 [ 1343.282151][T14963] cm6533_jd 0003:0D8C:0022.0067: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 1343.288187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1343.376396][T23499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.393529][T23499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.446869][T14963] usb 3-1: USB disconnect, device number 96 [ 1343.532147][T14962] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1343.590385][T23516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.590853][T23516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.614859][T23512] fido_id[23512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1343.692235][T14962] usb 6-1: Using ep0 maxpacket: 8 [ 1343.696178][T14962] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1343.697452][T14962] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1343.697481][T14962] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1343.697539][T14962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.822168][T14978] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1343.973575][T14978] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1343.980449][T14978] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1343.980496][T14978] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1343.980538][T14978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.022756][T23517] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1344.055937][T14978] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1344.263956][T14074] lwtunnel_output(): recursion limit reached on datapath [ 1344.342526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1344.387468][T23517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5572'. [ 1344.442474][T23530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.446503][T23530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.764317][T14971] usb 5-1: USB disconnect, device number 44 [ 1344.916320][T14074] lwtunnel_output(): recursion limit reached on datapath [ 1345.040954][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 1345.307446][T23544] FAULT_INJECTION: forcing a failure. [ 1345.307446][T23544] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.307511][T23544] CPU: 1 UID: 0 PID: 23544 Comm: syz.0.5578 Tainted: G L syzkaller #0 PREEMPT(full) [ 1345.307544][T23544] Tainted: [L]=SOFTLOCKUP [ 1345.307552][T23544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1345.307564][T23544] Call Trace: [ 1345.307573][T23544] [ 1345.307582][T23544] dump_stack_lvl+0xe8/0x150 [ 1345.307617][T23544] should_fail_ex+0x410/0x560 [ 1345.307655][T23544] should_failslab+0xa8/0x100 [ 1345.307682][T23544] ? skb_clone+0x212/0x3a0 [ 1345.307706][T23544] kmem_cache_alloc_noprof+0xa1/0x600 [ 1345.307730][T23544] ? skb_clone+0x212/0x3a0 [ 1345.307760][T23544] skb_clone+0x212/0x3a0 [ 1345.307799][T23544] __netlink_deliver_tap+0x413/0x860 [ 1345.307841][T23544] ? netlink_deliver_tap+0x2e/0x1b0 [ 1345.307872][T23544] netlink_deliver_tap+0x19c/0x1b0 [ 1345.307901][T23544] netlink_unicast+0x8c1/0xa80 [ 1345.307944][T23544] netlink_sendmsg+0x813/0xb40 [ 1345.307984][T23544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.308022][T23544] ? apparmor_socket_sendmsg+0x98/0x360 [ 1345.308056][T23544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1345.308100][T23544] sock_sendmsg_nosec+0x13a/0x180 [ 1345.308127][T23544] ____sys_sendmsg+0x54e/0x850 [ 1345.308149][T23544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1345.308173][T23544] ? import_iovec+0x73/0xa0 [ 1345.308202][T23544] ___sys_sendmsg+0x2a5/0x360 [ 1345.308219][T23544] ? __lock_acquire+0x747/0x2de0 [ 1345.308240][T23544] ? __pfx____sys_sendmsg+0x10/0x10 [ 1345.308286][T23544] ? __fget_files+0x2a/0x420 [ 1345.308301][T23544] ? __fget_files+0x3a2/0x420 [ 1345.308323][T23544] __x64_sys_sendmsg+0x1b1/0x290 [ 1345.308343][T23544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1345.308376][T23544] do_syscall_64+0x166/0x520 [ 1345.308395][T23544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.308411][T23544] ? clear_bhb_loop+0x70/0xc0 [ 1345.308431][T23544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.308447][T23544] RIP: 0033:0x7f4137f9e559 [ 1345.308463][T23544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1345.308477][T23544] RSP: 002b:00007f4138e56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1345.308494][T23544] RAX: ffffffffffffffda RBX: 00007f4138225fa0 RCX: 00007f4137f9e559 [ 1345.308506][T23544] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000003 [ 1345.308517][T23544] RBP: 00007f4138e56090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.308527][T23544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.308537][T23544] R13: 00007f4138226038 R14: 00007f4138225fa0 R15: 00007f413834fa48 [ 1345.308562][T23544] [ 1345.383405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1346.184533][T14070] lwtunnel_output(): recursion limit reached on datapath [ 1346.207211][T14963] usb 6-1: USB disconnect, device number 13 [ 1346.370696][T23561] loop3: detected capacity change from 0 to 7 [ 1346.400912][T23561] Dev loop3: unable to read RDB block 7 [ 1346.400943][T23561] loop3: AHDI p4 [ 1346.400968][T23561] loop3: partition table partially beyond EOD, truncated [ 1346.772491][T14963] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1346.939550][T14963] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1346.940988][T14963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.941031][T14963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.941074][T14963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.005013][T14963] usb 2-1: config 0 descriptor?? [ 1347.042173][T14978] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1347.146792][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5592'. [ 1347.203497][T14978] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1347.209605][T14978] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.242282][T14978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.242341][T14978] usb 6-1: Product: syz [ 1347.242360][T14978] usb 6-1: Manufacturer: syz [ 1347.242377][T14978] usb 6-1: SerialNumber: syz [ 1347.275266][T14978] usb 6-1: config 0 descriptor?? [ 1347.457862][T14963] cm6533_jd 0003:0D8C:0022.0068: unknown main item tag 0x0 [ 1347.458644][T14963] cm6533_jd 0003:0D8C:0022.0068: unknown main item tag 0x0 [ 1347.467971][T14070] lwtunnel_output(): recursion limit reached on datapath [ 1347.514715][T14963] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0068/input/input96 [ 1347.551051][T14963] cm6533_jd 0003:0D8C:0022.0068: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 1347.742785][T23566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.744550][T23566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1347.879282][T14971] usb 2-1: USB disconnect, device number 28 [ 1348.068224][T23583] fido_id[23583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1348.305303][T14963] usb 6-1: USB disconnect, device number 14 [ 1349.303986][T14074] lwtunnel_output(): recursion limit reached on datapath [ 1349.398472][T23604] netlink: 'syz.0.5598': attribute type 16 has an invalid length. [ 1349.398498][T23604] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5598'. [ 1349.511280][T23600] socket: no more sockets [ 1349.622466][T21596] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1349.791202][T23607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1349.846962][T21596] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1349.847033][T21596] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1349.850337][T21596] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1349.850371][T21596] usb 2-1: config 0 has no interfaces? [ 1349.961293][T23607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.965112][T23607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.987344][T21596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.987409][T21596] usb 2-1: Product: syz [ 1349.987446][T21596] usb 2-1: Manufacturer: syz [ 1349.987480][T21596] usb 2-1: SerialNumber: syz [ 1349.999923][T21596] usb 2-1: config 0 descriptor?? [ 1350.442399][T21596] usb 2-1: USB disconnect, device number 29 [ 1350.553032][T23613] loop3: detected capacity change from 0 to 7 [ 1350.556482][T23613] Dev loop3: unable to read RDB block 7 [ 1350.556512][T23613] loop3: AHDI p4 [ 1350.556535][T23613] loop3: partition table partially beyond EOD, truncated [ 1350.675006][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1351.250288][T14070] lwtunnel_output(): recursion limit reached on datapath [ 1352.619732][T23664] ip_tables: iptables: counters copy to user failed while replacing table [ 1353.113899][T23678] binder: 23676:23678 ioctl c0306201 0 returned -14 [ 1353.114949][T23678] binder: 23676:23678 ioctl c0046209 0 returned -22 [ 1353.233998][T23681] xt_NFQUEUE: number of total queues is 0 [ 1354.188191][T23706] fuse: root generation should be zero [ 1354.503519][T14066] lwtunnel_output(): recursion limit reached on datapath [ 1355.144853][T14066] lwtunnel_output(): recursion limit reached on datapath [ 1355.973271][T23771] ip_tables: iptables: counters copy to user failed while replacing table [ 1356.215319][T23777] tipc: Resetting bearer [ 1356.423966][T14076] lwtunnel_output(): recursion limit reached on datapath [ 1358.083507][T23815] netlink: 'syz.4.5676': attribute type 21 has an invalid length. [ 1358.218885][T23820] binder: 23819:23820 ioctl c0306201 200000000480 returned -14 [ 1358.219870][T23807] 8021q: VLANs not supported on vcan0 [ 1358.580786][T23834] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1359.022345][T23846] ip_tables: iptables: counters copy to user failed while replacing table [ 1360.263934][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1360.903426][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1361.544281][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.544418][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.558108][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1361.686704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1361.782812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1362.028980][T23888] tipc: Resetting bearer [ 1362.182951][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1362.311600][T23888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.315060][T23888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.248572][T23888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1363.283239][T23888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.850431][T23938] binder: 23937:23938 unknown command 2 [ 1363.850458][T23938] binder: 23937:23938 ioctl c0306201 2000000001c0 returned -22 [ 1364.754046][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1365.072630][T23743] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.214245][T23921] syzkaller0: entered promiscuous mode [ 1365.214274][T23921] syzkaller0: entered allmulticast mode [ 1365.943967][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1366.024004][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1367.739834][T23971] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1367.754395][T23971] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1367.770618][T23971] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1367.776969][T23971] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1367.777635][T23971] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1367.950624][T23743] lwtunnel_output(): recursion limit reached on datapath [ 1369.873888][T16788] Bluetooth: hci3: command tx timeout [ 1370.147762][T17254] bridge0: port 3(syz_tun) entered disabled state [ 1370.181320][T17254] syz_tun (unregistering): left allmulticast mode [ 1370.181348][T17254] syz_tun (unregistering): left promiscuous mode [ 1370.181441][T17254] bridge0: port 3(syz_tun) entered disabled state [ 1370.494278][ T62] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.494335][ T62] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.494377][ T62] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.505227][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1370.705135][T14076] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1370.705185][T14076] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.098171][T14076] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.098238][T14076] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.142642][T14066] lwtunnel_output(): recursion limit reached on datapath [ 1371.282104][T24004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5742'. [ 1371.334732][T14076] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.334772][T14076] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.679174][T24010] ip_tables: iptables: counters copy to user failed while replacing table [ 1371.788845][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1371.941707][T16788] Bluetooth: hci3: command tx timeout [ 1372.105958][T23972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.106089][T23972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.106235][T23972] bridge_slave_0: entered allmulticast mode [ 1372.108252][T23972] bridge_slave_0: entered promiscuous mode [ 1372.147136][T23972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.147248][T23972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.147412][T23972] bridge_slave_1: entered allmulticast mode [ 1372.176884][T23972] bridge_slave_1: entered promiscuous mode [ 1372.253078][T23972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1372.339378][T23972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1372.390033][T24026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5750'. [ 1372.568061][T23972] team0: Port device team_slave_0 added [ 1372.605972][T24031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5751'. [ 1372.606078][T24031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5751'. [ 1372.716703][T23972] team0: Port device team_slave_1 added [ 1372.944267][T14076] team0: left allmulticast mode [ 1372.944294][T14076] team_slave_0: left allmulticast mode [ 1372.944313][T14076] team_slave_1: left allmulticast mode [ 1372.946020][T14076] team0: left promiscuous mode [ 1372.946039][T14076] team_slave_0: left promiscuous mode [ 1372.946264][T14076] team_slave_1: left promiscuous mode [ 1372.946942][T14076] bridge0: port 5(team0) entered disabled state [ 1373.010337][T14076] bond0: left allmulticast mode [ 1373.010400][T14076] bond_slave_0: left allmulticast mode [ 1373.010441][T14076] bond_slave_1: left allmulticast mode [ 1373.049076][T14076] bond0: left promiscuous mode [ 1373.049098][T14076] bond_slave_0: left promiscuous mode [ 1373.049325][T14076] bond_slave_1: left promiscuous mode [ 1373.049758][T14076] bridge0: port 4(bond0) entered disabled state [ 1373.060764][T14076] bridge_slave_1: left allmulticast mode [ 1373.060836][T14076] bridge_slave_1: left promiscuous mode [ 1373.061353][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.071919][T14066] lwtunnel_output(): recursion limit reached on datapath [ 1373.115414][T14076] bridge_slave_0: left allmulticast mode [ 1373.115440][T14076] bridge_slave_0: left promiscuous mode [ 1373.115637][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.159147][T14076] lo: left allmulticast mode [ 1373.987608][T14076] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1374.023134][T16788] Bluetooth: hci3: command tx timeout [ 1374.075204][T14076] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1374.372518][T14076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.375315][T14076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.377425][T14076] bond0 (unregistering): Released all slaves [ 1374.418622][T14076] bond1 (unregistering): Released all slaves [ 1374.443944][T14076] bond2 (unregistering): Released all slaves [ 1374.511458][T14076] bond3 (unregistering): Released all slaves [ 1374.684744][T14076] bond4 (unregistering): Released all slaves [ 1374.817692][T14076] bond5 (unregistering): Released all slaves [ 1374.953627][T23972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.953647][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.953673][T23972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.047526][T23972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.047547][T23972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1375.047579][T23972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.105141][T14076] tipc: Disabling bearer [ 1375.105295][T14076] tipc: Left network mode [ 1375.242304][T23972] hsr_slave_0: entered promiscuous mode [ 1375.245009][T23972] hsr_slave_1: entered promiscuous mode [ 1376.107610][T16788] Bluetooth: hci3: command tx timeout [ 1376.198712][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1376.269476][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1376.713620][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.713650][T14076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1376.717268][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.717294][T14076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.835766][T14076] veth1_macvtap: left promiscuous mode [ 1376.835811][T14076] veth0_macvtap: left promiscuous mode [ 1376.836072][T14076] veth1_vlan: left promiscuous mode [ 1376.836152][T14076] veth0_vlan: left promiscuous mode [ 1377.555596][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1377.578783][T24087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1377.581218][T24087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.358017][T14076] team0 (unregistering): Port device team_slave_1 removed [ 1378.401467][T14076] team0 (unregistering): Port device team_slave_0 removed [ 1378.445889][T23912] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1378.601913][T23912] usb 5-1: Using ep0 maxpacket: 8 [ 1378.604248][T23912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1378.604301][T23912] usb 5-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 1378.608208][T23912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.608237][T23912] usb 5-1: Product: syz [ 1378.608254][T23912] usb 5-1: Manufacturer: syz [ 1378.608273][T23912] usb 5-1: SerialNumber: syz [ 1378.836737][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1379.038210][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1379.060562][T24098] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.422617][T23912] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1379.440953][T23912] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1379.650490][T23912] usb 5-1: USB disconnect, device number 45 [ 1379.719582][T24107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5778'. [ 1379.979680][T23414] udevd[23414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1380.040195][T24113] ip_tables: iptables: counters copy to user failed while replacing table [ 1380.384199][T24118] xt_hashlimit: size too large, truncated to 1048576 [ 1380.427118][T14076] IPVS: stop unused estimator thread 0... [ 1380.904580][ T31] kauditd_printk_skb: 71 callbacks suppressed [ 1380.904603][ T31] audit: type=1326 audit(1792154697.064:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24129 comm="syz.0.5783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1380.904655][ T31] audit: type=1326 audit(1792154697.064:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24129 comm="syz.0.5783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1380.904709][ T31] audit: type=1326 audit(1792154697.064:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24129 comm="syz.0.5783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1380.904757][ T31] audit: type=1326 audit(1792154697.064:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24129 comm="syz.0.5783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.224410][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1381.238065][ T31] audit: type=1326 audit(1792154697.404:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.5784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.238349][ T31] audit: type=1326 audit(1792154697.404:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.5784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.241216][ T31] audit: type=1326 audit(1792154697.404:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.5784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.241440][ T31] audit: type=1326 audit(1792154697.404:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.5784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.242309][ T31] audit: type=1326 audit(1792154697.414:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24131 comm="syz.0.5784" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4137f9e559 code=0x7ffc0000 [ 1381.309450][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1381.454802][T24136] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1381.811709][T23972] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1381.825466][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1381.826298][T23972] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1381.852908][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1381.853977][T23972] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1381.886943][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1381.893908][T23972] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1381.926269][T23972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1382.375448][T23972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.499071][T23972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.569513][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.569637][T13570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.619427][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.619547][T13570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.861479][T24167] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 1382.956155][T24176] lwtunnel_output(): recursion limit reached on datapath [ 1383.036590][T23972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.245136][T23972] veth0_vlan: entered promiscuous mode [ 1383.276662][T23972] veth1_vlan: entered promiscuous mode [ 1383.305332][T13570] lwtunnel_output(): recursion limit reached on datapath [ 1383.408134][T23972] veth0_macvtap: entered promiscuous mode [ 1383.457319][T23972] veth1_macvtap: entered promiscuous mode [ 1383.538572][T23972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1383.574390][T23972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.666719][T13569] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.712620][T23740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.713046][T23740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.713523][T23740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.900753][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.900778][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.958024][T23740] lwtunnel_output(): recursion limit reached on datapath [ 1384.049233][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.049292][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.442243][T24213] ip_tables: iptables: counters copy to user failed while replacing table [ 1385.333810][T23971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1385.368409][T23971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1385.380043][T23971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1385.393877][T23971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1385.398334][T23971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1386.364906][T23743] lwtunnel_output(): recursion limit reached on datapath [ 1386.505686][T23740] lwtunnel_output(): recursion limit reached on datapath [ 1387.121200][T24257] ip6gre1: entered promiscuous mode [ 1387.121226][T24257] ip6gre1: entered allmulticast mode [ 1387.472173][T23971] Bluetooth: hci4: command tx timeout [ 1388.225298][T14066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.794481][T14066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.038181][T24305] IPv6: NLM_F_CREATE should be specified when creating new route [ 1389.038478][T24305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1389.038511][T24305] IPv6: NLM_F_CREATE should be set when creating new route [ 1389.069097][T13569] lwtunnel_output(): recursion limit reached on datapath [ 1389.228264][T14066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.265535][T24307] kvm: pic: non byte write [ 1389.543976][T23971] Bluetooth: hci4: command tx timeout [ 1389.704154][ T62] lwtunnel_output(): recursion limit reached on datapath [ 1389.775972][T14066] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1389.794254][T14066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.854081][T24231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.854197][T24231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.854377][T24231] bridge_slave_0: entered allmulticast mode [ 1389.856272][T24231] bridge_slave_0: entered promiscuous mode [ 1389.905083][T24231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.905312][T24231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.905481][T24231] bridge_slave_1: entered allmulticast mode [ 1389.937085][T24231] bridge_slave_1: entered promiscuous mode [ 1390.050373][T24231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.126070][T24231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.290111][T24231] team0: Port device team_slave_0 added [ 1390.310925][T24231] team0: Port device team_slave_1 added [ 1390.460242][T24231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.460264][T24231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.460298][T24231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.466855][T24231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.466876][T24231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1390.466909][T24231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.583984][T14066] bridge_slave_1: left allmulticast mode [ 1390.584012][T14066] bridge_slave_1: left promiscuous mode [ 1390.584263][T14066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.618068][T14066] bridge_slave_0: left allmulticast mode [ 1390.618101][T14066] bridge_slave_0: left promiscuous mode [ 1390.618367][T14066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.846746][T24353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5851'. [ 1391.303775][T24367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1391.303829][T24367] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1391.446173][T14066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.506521][T14066] bond0 (unregistering): Released all slaves [ 1391.556862][T14066] bond1 (unregistering): Released all slaves [ 1391.622693][T23971] Bluetooth: hci4: command tx timeout [ 1391.737801][T24353] vlan2: entered promiscuous mode [ 1391.737826][T24353] erspan0: entered promiscuous mode [ 1391.804272][T24376] ip_tables: iptables: counters copy to user failed while replacing table [ 1391.852411][T14066] : left promiscuous mode [ 1392.151989][T24231] hsr_slave_0: entered promiscuous mode [ 1392.155458][T24231] hsr_slave_1: entered promiscuous mode [ 1392.157978][T24231] debugfs: 'hsr0' already exists in 'hsr' [ 1392.160300][T24231] Cannot create hsr debugfs directory [ 1392.278589][T14066] tipc: Disabling bearer [ 1392.278724][T14066] tipc: Left network mode [ 1393.254724][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1393.474798][T24402] syzkaller0: entered promiscuous mode [ 1393.474825][T24402] syzkaller0: entered allmulticast mode [ 1393.702950][T16788] Bluetooth: hci4: command tx timeout [ 1393.894416][T14066] hsr_slave_0: left promiscuous mode [ 1393.917906][T14066] hsr_slave_1: left promiscuous mode [ 1393.924058][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1393.924121][T14066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1393.990984][T14066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1393.991010][T14066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.040721][T14066] veth0_to_team: left promiscuous mode [ 1394.040789][T14066] veth1_macvtap: left promiscuous mode [ 1394.040819][T14066] veth0_macvtap: left promiscuous mode [ 1394.276165][T24425] ip_tables: iptables: counters copy to user failed while replacing table [ 1395.166253][T14066] team0 (unregistering): Port device team_slave_1 removed [ 1395.217177][T14066] team0 (unregistering): Port device team_slave_0 removed [ 1395.334697][T24439] ip_tables: iptables: counters copy to user failed while replacing table [ 1395.781009][T24452] ip_tables: iptables: counters copy to user failed while replacing table [ 1397.154298][ T9] ip6_tunnel: M xmit: Local address not yet configured! [ 1397.302688][T23912] ip6_tunnel: M xmit: Local address not yet configured! [ 1397.603591][T24231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1397.639099][T24231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1397.639996][T24231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1397.681748][T24231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1397.684116][T24231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1397.719565][T24231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1397.734017][T24231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1397.765896][T24231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1398.285193][T24231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1398.383137][T24231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1398.419981][T24517] ip_tables: iptables: counters copy to user failed while replacing table [ 1398.425397][T14066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1398.425514][T14066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1398.480361][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.480474][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.884816][T24231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.103203][T24537] ip_tables: iptables: counters copy to user failed while replacing table [ 1399.106030][T24231] veth0_vlan: entered promiscuous mode [ 1399.217868][T24231] veth1_vlan: entered promiscuous mode [ 1399.484055][T24231] veth0_macvtap: entered promiscuous mode [ 1399.528845][T24231] veth1_macvtap: entered promiscuous mode [ 1399.629492][T24231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.685739][T24231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.854637][T14076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.854692][T14076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.854732][T14076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.854771][T14076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.347165][T23743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.347217][T23743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.378832][T24563] ip_tables: iptables: counters copy to user failed while replacing table [ 1400.635811][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.635837][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.953770][T23971] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1401.960238][T23971] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1401.961487][T23971] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1401.996660][T23971] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1401.997359][T23971] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1402.321859][T24599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1402.512983][T24603] netlink: 'syz.1.5923': attribute type 1 has an invalid length. [ 1402.513044][T24603] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5923'. [ 1403.031817][T21161] tipc: Disabling bearer [ 1403.780065][T24632] ip_tables: iptables: counters copy to user failed while replacing table [ 1404.108640][T23971] Bluetooth: hci0: command tx timeout [ 1404.646210][T24600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1404.646411][T24600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.646568][T24600] bridge_slave_0: entered allmulticast mode [ 1404.648515][T24600] bridge_slave_0: entered promiscuous mode [ 1404.680833][T24600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.681013][T24600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.681179][T24600] bridge_slave_1: entered allmulticast mode [ 1404.705031][T24600] bridge_slave_1: entered promiscuous mode [ 1404.752947][T24600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1404.760415][T24600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1404.839555][T24600] team0: Port device team_slave_0 added [ 1404.842801][T24674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1404.842827][T24674] IPv6: NLM_F_CREATE should be set when creating new route [ 1404.864901][T24600] team0: Port device team_slave_1 added [ 1404.903795][T24600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.903816][T24600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.903845][T24600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.905988][T24600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.906004][T24600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.906050][T24600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.049552][T24676] ip_tables: iptables: counters copy to user failed while replacing table [ 1405.134410][T24600] hsr_slave_0: entered promiscuous mode [ 1405.135484][T24600] hsr_slave_1: entered promiscuous mode [ 1405.136255][T24600] debugfs: 'hsr0' already exists in 'hsr' [ 1405.136285][T24600] Cannot create hsr debugfs directory [ 1406.187480][T23971] Bluetooth: hci0: command tx timeout [ 1407.512347][T24600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1407.562754][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1407.563673][T24600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1407.589975][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1407.592367][T24600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1407.675412][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1407.676332][T24600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1407.704854][T24600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1407.719253][T24728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5965'. [ 1407.901919][T24600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.975192][T24600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.008107][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.008224][T13570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.036221][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.036335][T13570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.267665][T23971] Bluetooth: hci0: command tx timeout [ 1408.396566][T24600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1408.489262][T24600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1408.560543][T24600] veth0_vlan: entered promiscuous mode [ 1408.574190][T24600] veth1_vlan: entered promiscuous mode [ 1408.630519][T24741] ip_tables: iptables: counters copy to user failed while replacing table [ 1408.694584][T24600] veth0_macvtap: entered promiscuous mode [ 1408.713672][T24600] veth1_macvtap: entered promiscuous mode [ 1409.015620][T24600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1409.053968][T24600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.086404][T13570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.086732][T13570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.086913][T13570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.087084][T13570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.471180][T14076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.471204][T14076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.606674][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5975'. [ 1409.606960][T13570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.606979][T13570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.765330][T24766] ip_tables: iptables: counters copy to user failed while replacing table [ 1410.288252][T24779] team0: Port device macvlan1 added [ 1410.342045][T23971] Bluetooth: hci0: command tx timeout [ 1410.483724][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1410.485600][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5987'. [ 1410.585461][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1410.830468][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.098164][T16788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1411.117413][T16788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1411.121246][T16788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1411.185835][T16788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1411.199672][T16788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1411.622677][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.102016][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.593344][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1412.616304][T24822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1412.671630][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.784768][T23906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1412.887368][T24824] kvm: MWAIT instruction emulated as NOP! [ 1413.089633][ T31] audit: type=1326 audit(1792154729.254:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.104505][ T31] audit: type=1326 audit(1792154729.264:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.109851][ T31] audit: type=1326 audit(1792154729.264:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.110518][ T31] audit: type=1326 audit(1792154729.264:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.111065][ T31] audit: type=1326 audit(1792154729.264:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.111688][ T31] audit: type=1326 audit(1792154729.264:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.112944][ T31] audit: type=1326 audit(1792154729.264:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.113534][ T31] audit: type=1326 audit(1792154729.264:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.114157][ T31] audit: type=1326 audit(1792154729.264:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24834 comm="syz.0.6002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa8a199e559 code=0x7ffc0000 [ 1413.318781][T16788] Bluetooth: hci1: command tx timeout [ 1413.412505][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.419588][T24840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.657199][T24804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.658431][T24804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.658888][T24804] bridge_slave_0: entered allmulticast mode [ 1413.697049][T24804] bridge_slave_0: entered promiscuous mode [ 1413.722752][T22216] net_ratelimit: 1 callbacks suppressed [ 1413.722774][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1413.764880][T24804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.764994][T24804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.765429][T24804] bridge_slave_1: entered allmulticast mode [ 1413.767780][T24804] bridge_slave_1: entered promiscuous mode [ 1413.867399][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.017701][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6009'. [ 1414.022670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.048022][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.079287][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6009'. [ 1414.108305][T24804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.120987][T24804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.208885][T24804] team0: Port device team_slave_0 added [ 1414.217791][T24804] team0: Port device team_slave_1 added [ 1414.264694][T24804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1414.264714][T24804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.264743][T24804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1414.266724][T24804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1414.266740][T24804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1414.266770][T24804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1414.414182][T24804] hsr_slave_0: entered promiscuous mode [ 1414.415395][T24804] hsr_slave_1: entered promiscuous mode [ 1414.416193][T24804] debugfs: 'hsr0' already exists in 'hsr' [ 1414.416215][T24804] Cannot create hsr debugfs directory [ 1414.742437][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.910186][T24866] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6016'. [ 1414.954192][T24870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.973560][T24804] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.018982][T24866] gre0: Master is either lo or non-ether device [ 1415.082538][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6020'. [ 1415.084392][T24875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6020'. [ 1415.256983][T24877] netlink: 'syz.0.6021': attribute type 10 has an invalid length. [ 1415.257012][T24877] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1415.381832][T16788] Bluetooth: hci1: command tx timeout [ 1415.408303][T24804] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode [ 1415.410522][T24804] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.591014][T24884] netlink: 'syz.5.6024': attribute type 10 has an invalid length. [ 1415.614619][T24804] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.783824][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1415.889000][T24884] syz_tun: entered promiscuous mode [ 1415.968582][T24884] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1416.076099][T24896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6029'. [ 1416.166445][T24804] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.187173][T24898] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6027'. [ 1416.796939][T24804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1416.821928][T24804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1416.822219][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1416.823614][T24804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1416.830172][T24804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1416.871459][T24804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1416.888571][T24804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1416.889685][T24804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1416.893281][T24804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1417.065624][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.133333][T24804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1417.161020][T24925] ip_tables: iptables: counters copy to user failed while replacing table [ 1417.175599][T24804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.258280][T23740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.258498][T23740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.346970][T14074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.347200][T14074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.462137][T16788] Bluetooth: hci1: command tx timeout [ 1417.605603][T24930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6040'. [ 1417.813161][T24804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.041747][T24804] veth0_vlan: entered promiscuous mode [ 1418.080683][T24804] veth1_vlan: entered promiscuous mode [ 1418.203227][T24804] veth0_macvtap: entered promiscuous mode [ 1418.207728][T24804] veth1_macvtap: entered promiscuous mode [ 1418.426152][T24804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1418.459031][T24804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1418.615633][T13569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.616046][T13569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.616088][T13569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.616125][T13569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.864476][T23740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.864500][T23740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.902321][T22216] net_ratelimit: 6 callbacks suppressed [ 1418.902342][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.971835][T23740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.971860][T23740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.068531][T24957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1419.547576][T16788] Bluetooth: hci1: command tx timeout [ 1419.745410][T24981] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1419.940175][T24987] ip_tables: iptables: counters copy to user failed while replacing table [ 1419.945618][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.113282][T23906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.256374][T25001] sch_tbf: peakrate 6 is lower than or equals to rate 3604916063403629709 ! [ 1420.618537][T25015] netlink: Setting conntrack mark requires 'commit' flag. [ 1420.618575][T25015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1420.982558][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.987731][T25029] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6087'. [ 1421.025514][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1421.027072][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6085'. [ 1421.490848][T25049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.491036][T25049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1421.491321][T25049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.989179][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.989310][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.103973][T14962] net_ratelimit: 10 callbacks suppressed [ 1424.103997][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1424.349685][T25137] ip_tables: iptables: counters copy to user failed while replacing table [ 1424.905927][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.151448][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.928779][T25182] ip_tables: iptables: counters copy to user failed while replacing table [ 1426.183348][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.788968][T25210] ip6gre1: entered promiscuous mode [ 1426.788994][T25210] ip6gre1: entered allmulticast mode [ 1426.822083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.176537][T25221] ip_tables: iptables: counters copy to user failed while replacing table [ 1427.223656][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.954592][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.493453][T25245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6176'. [ 1428.524653][T22216] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1428.673196][T22216] usb 2-1: Using ep0 maxpacket: 32 [ 1428.673955][T22216] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1428.675232][T22216] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1428.675260][T22216] usb 2-1: config 0 has no interface number 0 [ 1428.675303][T22216] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1428.675546][T22216] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1428.675572][T22216] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1428.675599][T22216] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1428.764331][T22216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.764362][T22216] usb 2-1: Product: syz [ 1428.764379][T22216] usb 2-1: Manufacturer: syz [ 1428.764396][T22216] usb 2-1: SerialNumber: syz [ 1428.796726][T22216] usb 2-1: config 0 descriptor?? [ 1428.797729][T25240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1429.204560][T25255] net_ratelimit: 1 callbacks suppressed [ 1429.204584][T25255] ip_tables: iptables: counters copy to user failed while replacing table [ 1429.248553][T22216] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 1429.248810][T22216] ipheth 2-1:0.196: probe with driver ipheth failed with error -22 [ 1429.298231][T25255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.298437][T25255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.298656][T25255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.302221][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.303235][T25252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.303468][T25252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.451399][T22216] usb 2-1: USB disconnect, device number 30 [ 1430.343952][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.670747][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1430.997096][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1431.474847][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6201'. [ 1431.657905][T25311] xt_hashlimit: size too large, truncated to 1048576 [ 1432.475526][T23971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1432.496053][T23971] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1432.519929][T23971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1432.539786][T23971] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1432.540454][T23971] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1433.648493][T25329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.648608][T25329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.648793][T25329] bridge_slave_0: entered allmulticast mode [ 1433.673275][T25329] bridge_slave_0: entered promiscuous mode [ 1433.739147][T25329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.739261][T25329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.739434][T25329] bridge_slave_1: entered allmulticast mode [ 1433.750435][T25329] bridge_slave_1: entered promiscuous mode [ 1434.065693][T25329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.099996][T25329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.242037][T25351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6217'. [ 1434.476075][T25352] net_ratelimit: 6 callbacks suppressed [ 1434.476953][T25352] Dead loop on virtual device ip6_vti0 (net 1352), fix it urgently! [ 1434.528827][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1434.662268][T23971] Bluetooth: hci5: command tx timeout [ 1435.090774][T25329] team0: Port device team_slave_0 added [ 1435.109846][T25329] team0: Port device team_slave_1 added [ 1435.142975][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.191530][T25329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.191713][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.191780][T25329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.201388][T25329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.201427][T25329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1435.201481][T25329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.546100][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.827985][T23743] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.045977][T25329] hsr_slave_0: entered promiscuous mode [ 1436.047245][T25329] hsr_slave_1: entered promiscuous mode [ 1436.051466][T25329] debugfs: 'hsr0' already exists in 'hsr' [ 1436.051490][T25329] Cannot create hsr debugfs directory [ 1436.328072][T23743] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.572728][T23743] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1436.578684][T23743] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.592825][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1436.742255][T23971] Bluetooth: hci5: command tx timeout [ 1436.852826][T23743] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.624575][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1437.644094][T23743] bridge_slave_1: left allmulticast mode [ 1437.644123][T23743] bridge_slave_1: left promiscuous mode [ 1437.644353][T23743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.685806][T23743] bridge_slave_0: left allmulticast mode [ 1437.685836][T23743] bridge_slave_0: left promiscuous mode [ 1437.689239][T23743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.183801][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.684419][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.822301][T23971] Bluetooth: hci5: command tx timeout [ 1438.843028][T25385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6228'. [ 1439.285708][T23743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1439.312729][T23743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1439.327912][T23743] bond0 (unregistering): Released all slaves [ 1439.378821][T23743] bond1 (unregistering): Released all slaves [ 1439.711469][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.011560][T23743] tipc: Disabling bearer [ 1440.012263][T23743] tipc: Left network mode [ 1440.496879][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1440.745055][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1440.903476][T23971] Bluetooth: hci5: command tx timeout [ 1441.232282][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.415435][T23743] hsr_slave_0: left promiscuous mode [ 1441.416389][T23743] hsr_slave_1: left promiscuous mode [ 1441.418422][T23743] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.418446][T23743] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.421082][T23743] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.421116][T23743] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1441.509588][T23743] veth1_macvtap: left promiscuous mode [ 1441.509654][T23743] veth0_macvtap: left promiscuous mode [ 1441.521504][T23743] veth1_vlan: left promiscuous mode [ 1441.522086][T23743] veth0_vlan: left promiscuous mode [ 1441.549409][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1441.784858][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1442.291404][T23743] team0 (unregistering): Port device macvlan1 removed [ 1442.529398][T23743] team0 (unregistering): Port device team_slave_1 removed [ 1442.557732][T23743] team0 (unregistering): Port device team_slave_0 removed [ 1442.850083][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1443.826861][T23743] IPVS: stop unused estimator thread 0... [ 1443.865571][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.170716][T25329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1444.210865][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1444.223421][T25329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1444.262238][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.301561][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1444.304676][T25329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1444.353599][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.369560][T25329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1444.414696][T25329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.905054][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1444.923851][T25329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.969448][T25329] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.014023][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.014132][T13570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.097309][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.097428][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.347342][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.347472][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.369185][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.369351][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.369507][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.400511][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.400675][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.400824][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.400954][T25524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1445.587063][T25329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.672554][T25526] binder: 25525:25526 ioctl c0306201 2000000001c0 returned -22 [ 1445.695439][T25329] veth0_vlan: entered promiscuous mode [ 1445.715756][T25329] veth1_vlan: entered promiscuous mode [ 1445.767375][T25329] veth0_macvtap: entered promiscuous mode [ 1445.782972][T25329] veth1_macvtap: entered promiscuous mode [ 1445.812020][T25329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.850759][T25329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1446.003060][T14066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.003403][T14074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.003752][T14074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.055051][T14074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.212073][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1446.220863][T25532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6264'. [ 1446.257490][T13569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.257514][T13569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.485081][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6268'. [ 1446.488382][T13569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.488405][T13569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.076465][T25565] bridge: RTM_NEWNEIGH with invalid ether address [ 1447.706920][T14978] hid-generic 0000:0000:0000.0069: unknown main item tag 0x0 [ 1447.710064][T14978] hid-generic 0000:0000:0000.0069: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1447.928848][T25599] bridge: RTM_NEWNEIGH with invalid ether address [ 1447.990866][T25596] fido_id[25596]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1448.247472][T25610] bridge_slave_0: left allmulticast mode [ 1448.247509][T25610] bridge_slave_0: left promiscuous mode [ 1448.247771][T25610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.347624][T25613] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1448.699661][T25617] syzkaller0: entered promiscuous mode [ 1448.699689][T25617] syzkaller0: entered allmulticast mode [ 1450.107317][T14978] net_ratelimit: 32 callbacks suppressed [ 1450.107387][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.344655][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1450.631382][T25640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6308'. [ 1451.146100][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1451.150714][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.187974][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1452.966049][T25631] bridge: RTM_NEWNEIGH with invalid ether address [ 1453.065109][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.139914][T25659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.140102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.222310][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1453.491724][T25681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6325'. [ 1453.678745][T25689] xt_hashlimit: size too large, truncated to 1048576 [ 1453.881315][T25696] kvm: pic: non byte write [ 1454.157045][T25711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1454.442844][T25716] raw_sendmsg: syz.0.6337 forgot to set AF_INET. Fix it! [ 1454.662239][T14978] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1454.813606][T14978] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1454.818627][T14978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.818726][T14978] usb 5-1: Product: syz [ 1454.818745][T14978] usb 5-1: Manufacturer: syz [ 1454.818763][T14978] usb 5-1: SerialNumber: syz [ 1454.868718][T14978] ums-karma 5-1:1.0: USB Mass Storage device detected [ 1454.882677][T14978] ums-karma 5-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 1454.882677][T14978] Please send a copy of this message to and [ 1455.188203][T25736] kvm: pic: non byte write [ 1455.338029][ T9] net_ratelimit: 9 callbacks suppressed [ 1455.338053][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.369663][T14978] ums-karma 5-1:1.0: probe with driver ums-karma failed with error -5 [ 1455.390476][T14978] usb 5-1: USB disconnect, device number 46 [ 1455.456159][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1455.457153][T25744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1456.028581][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.028728][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.028925][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.029660][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.029788][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.079297][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.079461][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.099284][T25773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.099864][T25771] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1456.112162][T25767] kvm: pic: non byte write [ 1457.035681][T25813] kvm: pic: non byte write [ 1457.281101][T25821] fuse: Bad value for 'group_id' [ 1457.281126][T25821] fuse: Bad value for 'group_id' [ 1457.433164][T14978] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1457.586228][T14978] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1457.587432][T14978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1457.587510][T14978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1457.587551][T14978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.592783][T14978] usb 6-1: config 0 descriptor?? [ 1457.890598][T25836] xt_hashlimit: size too large, truncated to 1048576 [ 1457.987729][T25839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1458.030669][T14978] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1458.030710][T14978] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1458.030739][T14978] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1458.030768][T14978] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1458.030796][T14978] playstation 0003:054C:0DF2.006A: unknown main item tag 0x0 [ 1458.081435][T14978] playstation 0003:054C:0DF2.006A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 1458.228277][T14978] playstation 0003:054C:0DF2.006A: Invalid byte count transferred, expected 20 got 0 [ 1458.228310][T14978] playstation 0003:054C:0DF2.006A: Failed to retrieve DualSense pairing info: -22 [ 1458.228365][T14978] playstation 0003:054C:0DF2.006A: Failed to get MAC address from DualSense [ 1458.228383][T14978] playstation 0003:054C:0DF2.006A: Failed to create dualsense. [ 1458.273851][T14978] playstation 0003:054C:0DF2.006A: probe with driver playstation failed with error -22 [ 1458.462359][T21596] usb 6-1: USB disconnect, device number 15 [ 1458.480096][T25849] kvm: pic: non byte write [ 1458.543182][T25852] fuse: Bad value for 'group_id' [ 1458.543205][T25852] fuse: Bad value for 'group_id' [ 1458.587608][T25854] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1458.587645][T25854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1459.272362][T25881] hub 8-0:1.0: USB hub found [ 1459.274763][T25881] hub 8-0:1.0: 1 port detected [ 1459.394912][T25883] kvm: pic: non byte write [ 1459.665137][T25886] fuse: Bad value for 'group_id' [ 1459.665160][T25886] fuse: Bad value for 'group_id' [ 1459.784743][T25888] ip6gre1: entered promiscuous mode [ 1459.784768][T25888] ip6gre1: entered allmulticast mode [ 1459.955817][T14978] hid-generic 0000:0000:0000.006B: unknown main item tag 0x0 [ 1459.973080][T14978] hid-generic 0000:0000:0000.006B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1460.267986][T25900] fido_id[25900]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1460.270014][T25902] xt_hashlimit: size too large, truncated to 1048576 [ 1460.502367][T14978] net_ratelimit: 8 callbacks suppressed [ 1460.502389][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.752694][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1460.794024][T25915] vlan2: entered allmulticast mode [ 1460.794049][T25915] veth0_vlan: entered allmulticast mode [ 1461.542885][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.191858][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.583392][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1462.791079][T25947] ip6gre1: entered promiscuous mode [ 1462.791107][T25947] ip6gre1: entered allmulticast mode [ 1463.303143][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1463.622217][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.011842][T22216] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1464.166656][T22216] usb 2-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 1464.170628][T22216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.207835][T22216] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1464.610978][T22216] scsi host1: usb-storage 2-1:1.0 [ 1464.670622][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1464.816579][T22216] usb 2-1: USB disconnect, device number 31 [ 1465.702737][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.343655][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.405225][T26007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1466.409210][T26007] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6450'. [ 1466.502395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1466.779556][T22216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.142989][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.687156][T26051] binder: 26049:26051 ioctl c0306201 200000000340 returned -22 [ 1467.703800][T26047] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1467.703938][T26047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1467.747689][T26047] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1467.793871][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.794689][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.798416][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1467.856953][T26047] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1467.857282][T26047] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1467.908075][T26047] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1467.969224][T26047] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1467.969314][T26047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1467.992066][T26047] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1467.995994][T26047] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1467.996118][T26047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1467.998207][T26047] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1468.027826][T26060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.028480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1468.038476][T26060] netlink: 'syz.0.6471': attribute type 10 has an invalid length. [ 1468.038534][T26060] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6471'. [ 1468.069118][T26047] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1468.069225][T26047] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1468.090402][T26047] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1468.697719][T26080] binder: 26078:26080 ioctl c0306201 200000000380 returned -22 [ 1468.712429][T26081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6480'. [ 1468.888641][T26088] fuse: Unknown parameter 'grou00000000000000000000' [ 1468.937274][T26092] hub 8-0:1.0: USB hub found [ 1468.939007][T26092] hub 8-0:1.0: 1 port detected [ 1469.038010][T26096] netlink: 'syz.4.6487': attribute type 4 has an invalid length. [ 1469.320235][T26110] binder: 26109:26110 ioctl c0306201 200000000240 returned -22 [ 1469.407884][T26113] fuse: Unknown parameter 'grou00000000000000000000' [ 1469.782176][T23971] Bluetooth: hci3: command 0x0c1a tx timeout [ 1469.861962][T23971] Bluetooth: hci4: command 0x0c1a tx timeout [ 1469.865739][T26130] ip6gre1: entered promiscuous mode [ 1469.866542][T26130] ip6gre1: entered allmulticast mode [ 1469.986033][T26142] fuse: Unknown parameter 'group_i00000000000000000000' [ 1470.013561][T13402] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1470.031726][T23971] Bluetooth: hci1: command 0x0c1a tx timeout [ 1470.031737][T16788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1470.101979][T16788] Bluetooth: hci5: command 0x0c1a tx timeout [ 1470.162947][T13402] usb 3-1: Using ep0 maxpacket: 16 [ 1470.163805][T13402] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1470.165194][T13402] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1470.165302][T13402] usb 3-1: config 0 has no interface number 0 [ 1470.165347][T13402] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.165376][T13402] usb 3-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.165400][T13402] usb 3-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1470.165428][T13402] usb 3-1: config 0 interface 1 has no altsetting 0 [ 1470.165463][T13402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.170853][T13402] usb 3-1: config 0 descriptor?? [ 1470.212165][T13402] usbhid 3-1:0.1: fixing wrong optional hid class descriptors count [ 1470.458472][T26161] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6515'. [ 1470.620699][T13402] elan 0003:04F3:074D.006C: failed to start in urb: -90 [ 1470.822145][T23906] net_ratelimit: 10 callbacks suppressed [ 1470.822169][T23906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1470.903136][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.000572][T13570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.001333][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.010629][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.028506][T13402] elan 0003:04F3:074D.006C: Get report error for parm 6: 0 [ 1471.149140][T26177] fuse: Unknown parameter 'group_i00000000000000000000' [ 1471.431128][T13402] elan 0003:04F3:074D.006C: Get report error for parm 7: 0 [ 1471.840379][T13402] elan 0003:04F3:074D.006C: Get report error for parm 8: -71 [ 1471.859089][T13402] elan 0003:04F3:074D.006C: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.2-1/input1 [ 1471.859131][T13402] elan 0003:04F3:074D.006C: Input device is not registered [ 1471.866674][T13402] elan 0003:04F3:074D.006C: probe with driver elan failed with error -119 [ 1471.866719][T16788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1471.935601][T13402] usb 3-1: USB disconnect, device number 97 [ 1471.942422][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.942542][T16788] Bluetooth: hci4: command 0x0c1a tx timeout [ 1471.987485][T26203] fido_id[26203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1472.101747][T16788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1472.103531][T16788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1472.137119][T26205] fuse: Unknown parameter 'group_i00000000000000000000' [ 1472.248924][T16788] Bluetooth: hci5: command 0x0c1a tx timeout [ 1472.422717][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1472.918101][T26236] fuse: Unknown parameter 'group_id00000000000000000000' [ 1472.989553][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.029451][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6549'. [ 1473.480536][T26259] netlink: 'syz.2.6554': attribute type 4 has an invalid length. [ 1473.535681][T26261] fuse: Unknown parameter 'group_id00000000000000000000' [ 1473.800922][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1473.955728][T16788] Bluetooth: hci3: command 0x0c1a tx timeout [ 1474.021866][T16788] Bluetooth: hci4: command 0x0c1a tx timeout [ 1474.032159][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1474.205582][T16788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1474.207026][T16788] Bluetooth: hci0: command 0x0c1a tx timeout [ 1474.281134][ T5624] Bluetooth: hci5: command 0x0c1a tx timeout [ 1474.374311][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1474.379049][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6568'. [ 1474.557893][T26287] fuse: Unknown parameter 'group_id00000000000000000000' [ 1474.654591][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6572'. [ 1474.986135][T26303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6579'. [ 1474.988283][T26303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6579'. [ 1475.131705][T14963] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1475.282736][T14963] usb 6-1: Using ep0 maxpacket: 16 [ 1475.290906][T14963] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1475.299074][T14963] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.299209][T14963] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.299288][T14963] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1475.299348][T14963] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1475.299418][T14963] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1475.299511][T14963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.361404][T14963] usb 6-1: config 0 descriptor?? [ 1475.508099][T26314] fuse: Bad value for 'user_id' [ 1475.508147][T26314] fuse: Bad value for 'user_id' [ 1475.896837][T14963] logitech-djreceiver 0003:046D:C53A.006D: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 1475.947770][T23944] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1476.093560][T23944] usb 3-1: Using ep0 maxpacket: 32 [ 1476.094952][T23944] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1476.097085][T23944] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1476.097111][T23944] usb 3-1: config 0 has no interface number 0 [ 1476.097179][T23944] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1476.097203][T23944] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1476.097232][T23944] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1476.097261][T23944] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1476.103528][ T9] net_ratelimit: 2 callbacks suppressed [ 1476.103547][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.157496][T23944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.157575][T23944] usb 3-1: Product: syz [ 1476.157618][T23944] usb 3-1: Manufacturer: syz [ 1476.157660][T23944] usb 3-1: SerialNumber: syz [ 1476.256865][T23944] usb 3-1: config 0 descriptor?? [ 1476.262410][T23971] Bluetooth: hci1: command 0x0c1a tx timeout [ 1476.353535][T23944] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input101 [ 1476.439758][ C0] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 1476.578861][ C0] bcm5974 3-1:0.119: trackpad urb failed: -1 [ 1476.594625][T23899] usb 3-1: USB disconnect, device number 98 [ 1476.746833][T23743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.748828][T13402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1476.751399][T23906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.145704][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1477.258963][T26337] binder: 26335:26337 ioctl c0306201 200000000500 returned -14 [ 1477.286927][T26224] Set syz0 is full, maxelem 65536 reached [ 1477.391460][T26344] fuse: Bad value for 'user_id' [ 1477.391484][T26344] fuse: Bad value for 'user_id' [ 1477.564329][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1477.712663][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1477.713501][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1477.714806][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 1477.714844][ T9] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.714871][ T9] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.714894][ T9] usb 2-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1477.714920][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1477.714952][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.787932][T23944] usb 6-1: USB disconnect, device number 16 [ 1477.792395][ T9] usb 2-1: config 0 descriptor?? [ 1478.183275][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.231799][ T9] wacom 0003:056A:0000.006E: ignoring exceeding usage max [ 1478.235793][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235831][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235861][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235890][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235918][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235946][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.235973][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.236000][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.236028][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.236063][ T9] wacom 0003:056A:0000.006E: unknown main item tag 0x0 [ 1478.239684][ T9] wacom 0003:056A:0000.006E: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1478.333342][ T9] wacom 0003:056A:0000.006E: hidraw0: USB HID v0.81 Device [HID 056a:0000] on usb-dummy_hcd.1-1/input0 [ 1478.340958][T26372] fuse: Bad value for 'user_id' [ 1478.340974][T26372] fuse: Bad value for 'user_id' [ 1478.341844][T16788] Bluetooth: hci1: command 0x0c1a tx timeout [ 1478.371442][ T9] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0000.006E/input/input102 [ 1478.450664][ T9] usb 2-1: USB disconnect, device number 32 [ 1478.512175][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1478.645718][T26381] input: syz0 as /devices/virtual/input/input105 [ 1478.731253][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1478.745646][T26383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6611'. [ 1478.787453][T26376] fido_id[26376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1479.222573][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1479.320997][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1479.334018][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1479.503351][T26419] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1479.991133][ T31] audit: type=1326 audit(1792154796.154:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26437 comm="syz.1.6638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18c99e559 code=0x7fc00000 [ 1480.262320][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1480.281980][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1480.354827][T13402] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1480.433653][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1480.435355][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.435465][ T9] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1480.435495][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1480.435529][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.496681][ T9] usb 3-1: config 0 descriptor?? [ 1480.511758][T13402] usb 5-1: Using ep0 maxpacket: 8 [ 1480.514038][T13402] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1480.515206][T13402] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1480.515254][T13402] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1480.515278][T13402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1480.515313][T13402] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1480.515338][T13402] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1480.515383][T13402] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.706547][ T31] audit: type=1326 audit(1792154796.874:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26437 comm="syz.1.6638" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe18c99e559 code=0x7fc00000 [ 1480.831724][T13402] usb 5-1: usb_control_msg returned -32 [ 1480.831785][T13402] usbtmc 5-1:16.0: can't read capabilities [ 1480.954251][ T9] hid_mf 0003:0079:1801.006F: unbalanced collection at end of report description [ 1480.955259][ T9] hid_mf 0003:0079:1801.006F: HID parse failed. [ 1480.955437][ T9] hid_mf 0003:0079:1801.006F: probe with driver hid_mf failed with error -22 [ 1481.071742][T14963] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1481.151272][T13402] usb 3-1: USB disconnect, device number 99 [ 1481.192152][T26484] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 1481.223225][T14963] usb 2-1: Using ep0 maxpacket: 16 [ 1481.229607][T14963] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1481.231254][T14963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1481.263771][T14963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.263799][T14963] usb 2-1: Product: syz [ 1481.263815][T14963] usb 2-1: Manufacturer: syz [ 1481.263830][T14963] usb 2-1: SerialNumber: syz [ 1481.270419][T14963] usb 2-1: config 0 descriptor?? [ 1481.306148][T14963] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1481.306185][T14963] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1481.306578][ T9] net_ratelimit: 14 callbacks suppressed [ 1481.306595][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.398064][T23944] usb 5-1: USB disconnect, device number 47 [ 1481.525201][T26494] netlink: 'syz.5.6662': attribute type 4 has an invalid length. [ 1481.597446][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.724005][T26498] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1481.813732][T26504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6666'. [ 1481.861918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1481.897387][T14963] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1482.297406][T26524] syzkaller0: entered promiscuous mode [ 1482.297433][T26524] syzkaller0: entered allmulticast mode [ 1482.352608][T14963] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1482.353398][T14963] em28xx 2-1:0.0: board has no eeprom [ 1482.355613][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1482.554241][T26532] syzkaller0: entered allmulticast mode [ 1482.555091][T26531] syzkaller0: left allmulticast mode [ 1483.418480][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1483.467483][T26471] em28xx 2-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 1483.522070][T14963] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1483.522214][T14963] em28xx 2-1:0.0: dvb set to bulk mode. [ 1483.523820][T23944] em28xx 2-1:0.0: Binding DVB extension [ 1483.568507][T14963] usb 2-1: USB disconnect, device number 33 [ 1483.570379][T14963] em28xx 2-1:0.0: Disconnecting em28xx [ 1483.683641][T23944] em28xx 2-1:0.0: Registering input extension [ 1483.687590][T14963] em28xx 2-1:0.0: Closing input extension [ 1483.775202][T14963] em28xx: Freeing device [ 1483.904199][T26557] fuse: Bad value for 'fd' [ 1484.423886][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.423949][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.428647][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.596538][T26591] fuse: Bad value for 'fd' [ 1484.665159][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1484.975260][T26614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1485.220705][T26624] fuse: Bad value for 'fd' [ 1485.464042][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1485.582471][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6719'. [ 1485.896121][T26652] fuse: Invalid rootmode [ 1486.155490][T26662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1486.353061][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.503418][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1486.574512][T26676] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.574531][T26676] binder: 26675:26676 ioctl 4018620d 2000000009c0 returned -16 [ 1486.810162][T26691] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1486.827029][T26693] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1487.542589][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.636164][T26721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6754'. [ 1487.664131][T26723] ip_tables: iptables: counters copy to user failed while replacing table [ 1487.702382][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1487.857934][T26730] Dead loop on virtual device ip6_vti0 (net 1334), fix it urgently! [ 1488.015149][T26739] binder_alloc: 26738: binder_alloc_buf, no vma [ 1488.082965][ T31] audit: type=1326 audit(1792154804.254:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26741 comm="syz.4.6764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f824859e559 code=0x0 [ 1488.247166][T26755] binder: 26754:26755 ioctl c0306201 2000000001c0 returned -22 [ 1488.375985][T26763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.376233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.518780][T26761] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 1488.518826][T26761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 1488.582129][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1488.763301][T26777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1488.989869][T26785] netlink: zone id is out of range [ 1489.101483][T26789] fuse: Bad value for 'rootmode' [ 1489.307502][T26800] syz_tun: entered allmulticast mode [ 1489.561344][T26814] ALSA: mixer_oss: invalid OSS volume '' [ 1490.444023][ T124] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1490.539868][T26844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1490.603878][ T124] usb 2-1: Using ep0 maxpacket: 32 [ 1490.604775][ T124] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1490.607403][ T124] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1490.607431][ T124] usb 2-1: config 0 has no interface number 0 [ 1490.607473][ T124] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1490.607498][ T124] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1490.607526][ T124] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1490.607556][ T124] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1490.697755][ T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.697785][ T124] usb 2-1: Product: syz [ 1490.697803][ T124] usb 2-1: Manufacturer: syz [ 1490.697819][ T124] usb 2-1: SerialNumber: syz [ 1490.738444][ T124] usb 2-1: config 0 descriptor?? [ 1490.774258][ T124] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input107 [ 1491.111177][ T124] usb 2-1: USB disconnect, device number 34 [ 1491.239014][T26848] tipc: Started in network mode [ 1491.239038][T26848] tipc: Node identity 3, cluster identity 4711 [ 1491.239053][T26848] tipc: Node number set to 3 [ 1491.267286][T26849] tipc: Enabled bearer , priority 10 [ 1491.295527][T26852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6813'. [ 1491.297497][T26852] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6813'. [ 1491.677627][T26858] binder: 26857:26858 ioctl c0306201 200000000180 returned -14 [ 1491.986078][T14963] net_ratelimit: 14 callbacks suppressed [ 1491.986102][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.058956][T26868] ip_tables: iptables: counters copy to user failed while replacing table [ 1492.060201][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.060351][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.060549][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.111097][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.111251][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.111397][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.128305][T26868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.171733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1492.233783][T26870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1492.260583][T26873] netlink: 'syz.4.6823': attribute type 4 has an invalid length. [ 1492.437566][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1492.437594][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1492.487848][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1492.487877][T26877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1493.456685][T26896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.517915][T26896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.537320][T26896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1493.591507][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1493.602580][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1493.628841][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1493.628870][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6837'. [ 1496.929620][T26960] binder: 26959:26960 ioctl c0306201 200000000640 returned -22 [ 1497.044897][ T124] net_ratelimit: 7 callbacks suppressed [ 1497.044920][ T124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1497.103567][T26964] syzkaller0: entered promiscuous mode [ 1497.103594][T26964] syzkaller0: entered allmulticast mode [ 1497.965909][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1498.501902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.174077][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1499.816295][T26999] binder: 26997:26999 ioctl c0306201 2000000003c0 returned -14 [ 1499.863804][T23743] bridge_slave_1: left allmulticast mode [ 1499.863835][T23743] bridge_slave_1: left promiscuous mode [ 1499.864077][T23743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.901341][T23743] bridge_slave_0: left allmulticast mode [ 1499.901370][T23743] bridge_slave_0: left promiscuous mode [ 1499.917598][T23743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.111953][T23906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1500.951685][T23899] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1501.068777][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1501.121653][T23899] usb 3-1: Using ep0 maxpacket: 32 [ 1501.126125][T23899] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1501.130050][T23899] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1501.130082][T23899] usb 3-1: config 0 has no interface number 0 [ 1501.130125][T23899] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1501.130149][T23899] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1501.130177][T23899] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1501.130202][T23899] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1501.213701][T23899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.213731][T23899] usb 3-1: Product: syz [ 1501.213748][T23899] usb 3-1: Manufacturer: syz [ 1501.213765][T23899] usb 3-1: SerialNumber: syz [ 1501.253556][T23899] usb 3-1: config 0 descriptor?? [ 1501.307280][T23899] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input108 [ 1501.576590][T23899] usb 3-1: USB disconnect, device number 100 [ 1502.160245][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.432881][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.601284][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1503.901589][ C0] sched: DL replenish lagged too much [ 1506.785328][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1507.962901][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.351182][T14963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1509.702894][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1515.154956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1530.506252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.053015][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1534.105270][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.123467][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.194565][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1535.626056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1540.577091][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.475825][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.906360][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.281128][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.295347][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.435428][T26566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.082834][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.352964][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.652087][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.708860][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.763629][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.873487][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.927580][T14973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.899394][T14962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.595827][ C0] ip6_tunnel: M xmit: Local address not yet configured! [ 1577.920580][T23898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1577.963397][T23898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.482293][T23899] net_ratelimit: 3 callbacks suppressed [ 1579.482317][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.455471][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.552857][T14971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1587.990097][T26563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1589.684292][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.081955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.457854][T14978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1603.659919][T23944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1607.806163][T23905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.195922][T21596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.336163][T14076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.105967][T23905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.148353][T23905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1609.550750][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1609.564175][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.862449][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1616.855942][T26565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1617.090730][T13569] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1618.927569][T26560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.037900][T23899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1624.231871][T23905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1626.067460][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.027767][T23907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1627.782098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1632.649445][T26563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1637.584483][T14065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.432844][T24301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.491971][T24301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1640.552971][T24301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1642.959816][T24317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.425589][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1643.471018][T24314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1655.797709][T24301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1659.258834][T23904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1660.439464][ T33] INFO: task kworker/1:2:124 blocked for more than 140 seconds. [ 1660.439497][ T33] Tainted: G L syzkaller #0 [ 1660.439511][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1660.439523][ T33] task:kworker/1:2 state:D stack:19496 pid:124 tgid:124 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1660.439584][ T33] Workqueue: events switchdev_deferred_process_work [ 1660.439620][ T33] Call Trace: [ 1660.439629][ T33] [ 1660.439645][ T33] __schedule+0x17db/0x58f0 [ 1660.439693][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1660.439737][ T33] ? __pfx___schedule+0x10/0x10 [ 1660.439772][ T33] ? schedule+0x90/0x2b0 [ 1660.439800][ T33] schedule+0x164/0x2b0 [ 1660.439827][ T33] schedule_preempt_disabled+0x13/0x30 [ 1660.439852][ T33] __mutex_lock+0x7c1/0x1550 [ 1660.439885][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1660.439917][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 1660.439949][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1660.439978][ T33] ? lock_acquire+0x115/0x350 [ 1660.440022][ T33] ? rcu_is_watching+0x16/0xb0 [ 1660.440055][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1660.440089][ T33] switchdev_deferred_process_work+0xe/0x20 [ 1660.440117][ T33] process_scheduled_works+0xc3d/0x1630 [ 1660.440183][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1660.460158][ T33] ? assign_work+0x3cf/0x5d0 [ 1660.460216][ T33] worker_thread+0xa47/0xfb0 [ 1660.480421][ T33] kthread+0x38b/0x480 [ 1660.480460][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1660.480492][ T33] ? __pfx_kthread+0x10/0x10 [ 1660.480519][ T33] ret_from_fork+0x514/0xb70 [ 1660.480546][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1660.480571][ T33] ? __switch_to+0xc89/0x1420 [ 1660.480607][ T33] ? __pfx_kthread+0x10/0x10 [ 1660.480634][ T33] ret_from_fork_asm+0x1a/0x30 [ 1660.480675][ T33] [ 1660.480787][ T33] INFO: task kworker/1:4:13402 blocked for more than 140 seconds. [ 1660.480809][ T33] Tainted: G L syzkaller #0 [ 1660.480823][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1660.480834][ T33] task:kworker/1:4 state:D stack:20640 pid:13402 tgid:13402 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1660.480895][ T33] Workqueue: events netdev_work_proc [ 1660.480926][ T33] Call Trace: [ 1660.480935][ T33] [ 1660.480949][ T33] __schedule+0x17db/0x58f0 [ 1660.481003][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1660.481046][ T33] ? __pfx___schedule+0x10/0x10 [ 1660.481080][ T33] ? schedule+0x90/0x2b0 [ 1660.481108][ T33] schedule+0x164/0x2b0 [ 1660.481134][ T33] schedule_preempt_disabled+0x13/0x30 [ 1660.481160][ T33] __mutex_lock+0x7c1/0x1550 [ 1660.481193][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1660.481225][ T33] ? netdev_work_proc+0x6f/0x770 [ 1662.785533][T23746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1668.758941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.369517][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.382941][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.984635][T26563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog