last executing test programs: 20.59837543s ago: executing program 3 (id=2923): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x0, 0x0, @dev, @local, {[@routing={0x0, 0x0, 0x0, 0x5}]}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x8007, 0x0, "5f730000a9003f00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) memfd_secret(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x20, r3, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x20}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x0, 0xffffffff}, {0x64}, {0x6}]}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x401, 0x200}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x1a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000100)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f00000000c0)='acl\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x0, @private0}, @in6={0xa, 0x0, 0x0, @private1}, @in6={0xa, 0x0, 0xe83, @private1}], 0x70) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 19.543232988s ago: executing program 3 (id=2927): getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400", 0x34324948}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000101010500000000000000000a0000000c"], 0x50}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000580)={{0xf}, 'port1\x00', 0x50, 0x21000, 0x0, 0x2, 0x4, 0x8, 0x5, 0x0, 0x6}) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) read$FUSE(r2, &(0x7f0000001600)={0x2020}, 0x2020) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, &(0x7f0000000100)='4', 0x1, 0xebec93e830f96115}) io_uring_enter(0xffffffffffffffff, 0x7f5f, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000380)={@multicast1=0xe000bb00, @dev, @local}, 0xc) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000002240)=""/65, 0x41}], 0x1, 0x9, 0x0) 18.567036915s ago: executing program 3 (id=2929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001500)={0x90, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/137, 0x89, 0x0, 0x30}, @fda={0x66646185, 0x9, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/51, 0x33, 0x2, 0x3c}}, &(0x7f0000000340)={0x0, 0x28, 0x48}}}], 0xdfc, 0x0, &(0x7f0000000500)="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"}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(r0, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/96, 0x60}], 0x1, 0x7ff, 0xffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x67, &(0x7f0000001d80)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090255000101000000090400000002060000052406000005240000000d240f01000000000000000000052413001f1524120000a317a88b045e4f01a607c0ffcb7e392a09058202000000000009018000000000000003dfa3be519b57e33832b3e250b389145f7a1b4d41ab2aa11247359af93c22c19435f0ace9cad7eb7f9cde5f7a877c0724e1bd2bd2661ad5a0a63c91158ca22862b507427bbada5e399ca74722aa21b169046322c85f8cd6755e26babdccbae5ed367ff4e62e1886ba41bb69ecea77109c0267a2a2238861d0cd7d1c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x97}, [@call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.725962775s ago: executing program 3 (id=2938): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000640)={[], 0xe0ffffff7f0000}, 0x0) execveat$binfmt(r0, r6, &(0x7f0000000400)={[&(0x7f00000001c0)='rootmode', &(0x7f0000000200)='*[\\*\x00', &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', &(0x7f0000000380)='#! ', &(0x7f00000003c0)='/dev/hwrng\x00']}, &(0x7f0000000500)={[&(0x7f0000000440)='taprio\x00', &(0x7f0000000480)='\x00']}, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000340)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x5) mount$fuse(0x0, &(0x7f0000001040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') setsockopt$inet6_tcp_int(r10, 0x6, 0x7, &(0x7f0000000100)=0xffff, 0x4) 13.888381026s ago: executing program 3 (id=2943): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mlockall(0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', r5, 0x7, 0x80, 0x0, 0x3f, {{0x1b, 0x4, 0x1, 0x8, 0x6c, 0x68, 0x0, 0x81, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp={0x44, 0x8, 0x69, 0x0, 0x4, [0x0]}, @lsrr={0x83, 0x17, 0x9d, [@private=0xa010102, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, @local]}, @generic={0x1c, 0x3, "d8"}, @timestamp_addr={0x44, 0xc, 0x20, 0x1, 0x3, [{@multicast1, 0x5}]}, @rr={0x7, 0x27, 0x5c, [@loopback, @remote, @multicast2, @remote, @local, @empty, @empty, @private=0xa010101, @rand_addr=0x64010101]}]}}}}}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_io_uring_setup(0x336d, &(0x7f0000000000)={0x0, 0x0, 0x40}, 0x0, 0x0) r8 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x13, 0x20000000, r9) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0x10000, 0x3000, 0x1, 0x3f, 0x7f}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900020000000500090000000000050001"], 0x98}}, 0x0) r11 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r11, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f00000001c0), 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ftruncate(0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r12, 0x0, 0x0, 0x4}, 0x20) sendto$inet6(r11, &(0x7f0000000180)='\x00', 0x1, 0x40008d0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x15c}}, 0x4080) 13.268456434s ago: executing program 2 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000b716ccb9b7acc540f2f562d4201649351bc4eb95c912484da844036b5f0df93e5743485a5adcf5c95b2faee22926b1ed274f43f73eb2fbbde35e13b37ca94827d98fe78996cb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="140035007465616d5f736c6176655f3100000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/sockcreate\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_io_uring_setup(0x5c7e, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000200)={0x48, 0xb, r5}) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x80045b10, 0x0) 13.070140118s ago: executing program 0 (id=2947): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000100)=0x8f19, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r5, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) 13.020987516s ago: executing program 3 (id=2948): listen(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @loopback, @loopback, @local, @local, @loopback, @remote]}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300290a000000000000602007000000", @ANYRES32=r2, @ANYBLOB="00000000020000001c001a80080002802d002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0xf) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCL_SCROLLCONSOLE(r7, 0x541c, &(0x7f00000000c0)={0xd, 0xe1d}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a"], 0x7c}}, 0x0) 12.654604507s ago: executing program 0 (id=2950): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r4}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf2503000000cee60000000000050400028008000400011000000c0001800600010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4085) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/35, @ANYRES32], 0xb8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/41], 0xb8}}, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0x40d, 0x0, {0x0, 0x0, 0x0, {0x0, 0xaf4}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 11.430431096s ago: executing program 0 (id=2952): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000009c0)={0x48, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void}}]}, 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x9, 0x0, &(0x7f0000000500)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x2e34, &(0x7f0000000180)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000000201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r7, 0x0) r8 = dup(r6) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(0x0, 0x8000, 0x4e) 10.952932382s ago: executing program 2 (id=2953): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) ptrace(0x11, 0x0) connect$tipc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4351}, {r0, 0x2001}, {r2, 0x5202}, {r0, 0x8141}, {r3, 0x80}], 0x5, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_emit_vhci(0x0, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './control/file0', [{}]}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.429619449s ago: executing program 1 (id=2954): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000000c0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) gettid() io_uring_setup(0x437f, &(0x7f0000000540)={0x0, 0x4995, 0x8, 0x3, 0x2e1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x800000, &(0x7f0000ffc000/0x4000)=nil, 0x4) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000ffffffff000000000000000000000000e000200200000000000000000000000000000000000000000000000000002000", @ANYRES32=0x0, @ANYRES32=0x0], 0x170}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r5, @ANYBLOB="0000120000"], 0x144}}, 0x40002) syz_open_dev$usbfs(0x0, 0x76, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 7.222243304s ago: executing program 1 (id=2959): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000000c0), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000600), 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.602562064s ago: executing program 0 (id=2962): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0xbef7, 0x0, 0x0, 0x0, "0102eaffffe4000000004000"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x10}, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f0000003a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x280080d0) setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x401, 0x0, 0x0, {{{@in=@dev, @in6=@mcast1}, {@in=@broadcast, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x3502}}}, 0xf8}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r7, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) r8 = dup(r0) write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) 5.908898336s ago: executing program 4 (id=2963): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r0, 0x8000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) r3 = memfd_create(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x0, 0x0, 0x25dfdbfc, {0x11, 0x0, 0x0, r4, 0x3, 0x2, 0xc2, 0x7, 0x0, 0x10001}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x11}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x1068) socket(0x0, 0x6, 0x8) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000040)={0x98f908}) 5.880364341s ago: executing program 0 (id=2964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x8100, 0x0) r3 = syz_io_uring_setup(0x24f8, &(0x7f0000000080)={0x0, 0xd705, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x100, 0xffffffff}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x4, 0x65, 0x0, 0x0, 0x12}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x20) io_uring_enter(r3, 0x50a1, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]}) tkill(0x0, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) r13 = dup2(r12, r11) close_range(r13, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) fchdir(r1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5.601608129s ago: executing program 0 (id=2965): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0), 0x4) vmsplice(r1, 0x0, 0x0, 0x0) mmap(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x1000000, 0x4008032, 0xffffffffffffffff, 0x4d4fe000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000002700)={0x1, 'virt_wifi0\x00'}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000009c0)={0x1b4, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6020c0, 0x0) ioctl$TUNSETTXFILTER(r9, 0x400454d1, 0x0) 5.60085492s ago: executing program 2 (id=2966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 5.3162458s ago: executing program 2 (id=2968): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) ptrace(0x11, 0x0) connect$tipc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4351}, {r0, 0x2001}, {r2, 0x5202}, {r3, 0x80}], 0x4, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_emit_vhci(0x0, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './control/file0', [{}]}, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.83991057s ago: executing program 4 (id=2969): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x14, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) unshare(0x2a020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000000"], 0x10}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) set_mempolicy(0x4003, &(0x7f0000000040)=0x10000000005, 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8) fsetxattr$security_capability(r5, &(0x7f00000000c0), &(0x7f0000000100)=@v2, 0x14, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfe, 0x4e00e018e3401e1c}, 0xc) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000300000000"], 0x8) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 3.607176489s ago: executing program 4 (id=2970): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000200)=0x2, 0x4) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_int(r3, 0x0, 0x4, &(0x7f0000000080), 0x4) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000400)=[{}], 0x1, 0xec5d, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000280)={0xc000001d}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000003c0)={r4, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x3, 0x6, @remote}, 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000340)={&(0x7f00000002c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.79167828s ago: executing program 1 (id=2971): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x7540, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, 0x0) r5 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x0, &(0x7f0000001480)) syz_io_uring_submit(r6, r3, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) io_uring_enter(r2, 0x2003, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) recvmmsg(r8, &(0x7f00000009c0)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000480)=""/240, 0xf0}], 0x1}, 0x7fffffff}, {{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/84, 0x54}], 0x1, &(0x7f00000006c0)=""/169, 0xa9}, 0x10000}, {{&(0x7f0000000780)=@qipcrtr, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/169, 0xa9}, {&(0x7f00000008c0)=""/85, 0x55}], 0x2, &(0x7f0000000980)=""/32, 0x20}, 0x5}], 0x3, 0x2, &(0x7f0000000a80)) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xbcb07b29f486204c, 0x10012, r8, 0x0) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f00000001c0)={0x42, 0x0, &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000ac0)={&(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40), 0x3, r9, 0xdededede}) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r10, r10, &(0x7f0000000000)=0x7, 0x4) 2.463148121s ago: executing program 4 (id=2972): syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902860002010000000904000001020d0000052406000105240000912c0e373a81702fd44825000d240f0100000000000000000006241a0000001524120000a317a88b"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000480)={0xffffffffffffffff}) pipe(&(0x7f0000000600)={0xffffffffffffffff}) tee(r0, r1, 0x6, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000001600)={'\x00', 0x5, 0x3, 0xb0fc, 0xbd, 0x0, r2}) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0xfe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) open$dir(0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="80010000100013070000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000002080000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480001006469676573745f6e756c6c00"/312], 0x180}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980901}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0, 0x73}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@private}}, 0xe8) sendmmsg$inet6(r8, &(0x7f00000090c0)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 2.279880755s ago: executing program 2 (id=2973): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="ecf5163231c8a2f6901a19404ad0d874f0", 0x11}, {&(0x7f00000002c0)="d72c2e5ca64b187b778b533241b9d4f2dd09938d94fdb6514db57fe009a84a888ab83852a419671555b88af1dbb47b63750500dc9460831c9b7c16a58126fb85f41dcf7ecc432342ae92c6d7f4a9f26af2948cce7a6029794b13faddf0c11f147f51b0b0ddb685d9b755c0531492328f2a6d5393bc0249cb1c620cdc96cbd94bde0a730974074a5afd754be0b9ead2f3c9e56b6507739ce03f4f0146974c8f0fc2e8e3da304448791ff1e3912eb07e49c55c78b2dcae4b085932d577389867d8ab3a", 0xc2}], 0x2, 0x0, 0x0, 0x20040004}, 0x4008044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_test={0xf}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) 2.068983758s ago: executing program 1 (id=2974): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x40600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000780)={0x14}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = userfaultfd(0x801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 1.157200314s ago: executing program 1 (id=2975): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x3, 0x40000, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0xf7, r4}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES16=r3, @ANYBLOB="02002bbd7000fcdbdf2503000000cee60000000000050400028008000400011000000c0001800600010002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4085) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/35, @ANYRES32], 0xb8}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/41], 0xb8}}, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000001c0)={0x40d, 0x0, {0x0, 0x0, 0x0, {0x0, 0xaf4}, {}, @rumble}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) 777.497419ms ago: executing program 4 (id=2976): pipe(&(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000002500)='ns/time_for_children\x00') splice(r0, &(0x7f00000024c0)=0x8, r2, 0x0, 0x10, 0xa) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1a08000000000000000000000000040000000000000095000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047256477018d00080002"], 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x9, 0x7ac4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r8, r7, 0x0, 0x0) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='ns/time_for_children\x00', r8) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9}) 316.035434ms ago: executing program 2 (id=2977): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0xfffffffffffffca3}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "84fed93e"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f00000003c0)={r3}) sendmsg$kcm(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x200000c1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000700001000000000000000000070000", @ANYBLOB="0c0001800800010003000100100001800c00048008000200"], 0x44}}, 0x0) 48.442246ms ago: executing program 1 (id=2978): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/d\xd1\x9d\xb7\xe2\xf6\xe0\xe2?\xb2_\xf3\x88\xdbnd\xad\f\xc2\xf8ev/vide'}, {0x20, '\x19\x1bm\x9a.'}, {0x20, '%\xdc'}, {0x20, '\x00'}, {0x20, '$,{\xf1]'}]}, 0x39) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') getdents64(r2, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0xffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r1, 0x0, 0x40000) r4 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) fallocate(r4, 0x43, 0xde3, 0x8) ioctl$EVIOCGMASK(r4, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 4 (id=2979): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x54}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r5, @ANYRESOCT], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r5, 0x22a0b}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) accept$alg(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}}, 0x0) r9 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 73][T20668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1169.953658][T20668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1170.062081][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.081516][T20671] misc userio: No port type given on /dev/userio [ 1170.154287][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.161465][T14582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.220201][ T7960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.227353][ T7960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1170.413767][T20676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2722'. [ 1170.486253][T20676] sch_tbf: burst 88 is lower than device syz_tun mtu (1514) ! [ 1170.568501][ T5316] usb 3-1: USB disconnect, device number 114 [ 1170.616364][ T29] audit: type=1326 audit(1728499736.025:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20675 comm="syz.1.2722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3617dff9 code=0x0 [ 1170.682626][T20456] veth0_vlan: entered promiscuous mode [ 1170.905229][T20456] veth1_vlan: entered promiscuous mode [ 1170.982556][ T62] bridge_slave_1: left allmulticast mode [ 1171.004044][ T62] bridge_slave_1: left promiscuous mode [ 1171.017163][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.043308][ T62] bridge_slave_0: left allmulticast mode [ 1171.054041][ T62] bridge_slave_0: left promiscuous mode [ 1171.072202][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.242676][T20696] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1171.875252][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.889796][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.901629][ T62] bond0 (unregistering): Released all slaves [ 1171.912011][T20673] chnl_net:caif_netlink_parms(): no params data found [ 1172.017837][ T4623] Bluetooth: hci1: command tx timeout [ 1172.113463][T20456] veth0_macvtap: entered promiscuous mode [ 1172.252666][T20456] veth1_macvtap: entered promiscuous mode [ 1172.334687][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.345406][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.355364][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.365883][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.375783][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.386445][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.396975][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.408018][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.418306][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.428864][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.440372][T20456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1172.791502][T20526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.803007][T20673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1172.812041][T20673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.848099][T20673] bridge_slave_0: entered allmulticast mode [ 1172.878502][T20673] bridge_slave_0: entered promiscuous mode [ 1172.912519][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.934961][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.963454][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1172.988993][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.008326][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.029181][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.056805][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.096976][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.120531][T20456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.162381][T20456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.213029][T20456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.239573][T20456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.275898][T20456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.295901][T20456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.319080][T20456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.468475][ T62] hsr_slave_0: left promiscuous mode [ 1173.494520][ T62] hsr_slave_1: left promiscuous mode [ 1173.516152][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1173.523681][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.529137][T20741] misc userio: No port type given on /dev/userio [ 1173.551009][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1173.559114][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1173.568117][ T5277] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1173.599794][ T62] veth1_macvtap: left promiscuous mode [ 1173.605602][ T62] veth0_macvtap: left promiscuous mode [ 1173.611479][ T62] veth1_vlan: left promiscuous mode [ 1173.625938][ T62] veth0_vlan: left promiscuous mode [ 1173.725976][ T5277] usb 2-1: Using ep0 maxpacket: 32 [ 1173.735412][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.756114][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.773635][ T5277] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1173.789168][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.802399][ T5277] usb 2-1: config 0 descriptor?? [ 1173.831037][ T5277] hub 2-1:0.0: USB hub found [ 1174.097220][ T4623] Bluetooth: hci1: command tx timeout [ 1174.535488][ T5277] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 1174.985577][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1175.072423][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1176.176051][ T4623] Bluetooth: hci1: command tx timeout [ 1176.209521][T20673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.217131][T20673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.224559][T20673] bridge_slave_1: entered allmulticast mode [ 1176.236079][T20673] bridge_slave_1: entered promiscuous mode [ 1176.328027][T20763] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1176.336899][T20763] macsec1: entered promiscuous mode [ 1176.367129][T20763] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1176.510375][T20673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.570329][T20673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.725515][T20526] veth0_vlan: entered promiscuous mode [ 1176.820878][ T5277] usbhid 2-1:0.0: can't add hid device: -71 [ 1176.852155][T20526] veth1_vlan: entered promiscuous mode [ 1176.861008][ T5277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1176.936569][ T5277] usb 2-1: USB disconnect, device number 118 [ 1176.946968][T20673] team0: Port device team_slave_0 added [ 1176.991926][T20673] team0: Port device team_slave_1 added [ 1177.122288][T20673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.138584][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.241944][T20673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.328620][T19653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.346638][T19653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.428855][T20673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.436811][ T5277] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1177.469049][T20673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.546454][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.552837][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.585988][T20673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.615866][ T5277] usb 2-1: Using ep0 maxpacket: 8 [ 1177.633192][ T5277] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1177.664574][T20526] veth0_macvtap: entered promiscuous mode [ 1177.695929][ T5277] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1177.713560][ T7956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1177.721687][ T7956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1177.784574][ T5277] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1177.804475][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.820018][ T5277] usb 2-1: Product: syz [ 1177.824266][ T5277] usb 2-1: Manufacturer: syz [ 1177.838797][T20526] veth1_macvtap: entered promiscuous mode [ 1177.853563][ T5277] usb 2-1: SerialNumber: syz [ 1177.903719][ T5277] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1177.956846][T20673] hsr_slave_0: entered promiscuous mode [ 1177.966549][ T5277] dvb-usb: bulk message failed: -22 (3/0) [ 1178.027806][T20673] hsr_slave_1: entered promiscuous mode [ 1178.057032][T20673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.059544][ T5277] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1178.066842][T20673] Cannot create hsr debugfs directory [ 1178.074740][ T5277] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1178.091610][ T5277] usb 2-1: media controller created [ 1178.106154][ T5277] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1178.134502][ T5277] dvb-usb: bulk message failed: -22 (6/0) [ 1178.142229][ T5277] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1178.168882][ T5277] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input69 [ 1178.197618][ T5277] dvb-usb: schedule remote query interval to 150 msecs. [ 1178.215822][ T5277] dvb-usb: bulk message failed: -22 (3/0) [ 1178.255995][ T4623] Bluetooth: hci1: command tx timeout [ 1178.261505][ T5277] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1178.266061][ T5316] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1178.341289][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.372871][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.386574][ T5277] dvb-usb: bulk message failed: -22 (1/0) [ 1178.403019][ T5277] dvb-usb: error while querying for an remote control event. [ 1178.412734][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.439307][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.465939][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.488319][ T5316] usb 3-1: config 0 has no interfaces? [ 1178.494005][ T5316] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1178.515984][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.546827][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.576917][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.577152][ T5277] dvb-usb: bulk message failed: -22 (1/0) [ 1178.592038][ T5316] usb 3-1: config 0 descriptor?? [ 1178.616032][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.628515][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1178.640566][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.664127][ T5277] dvb-usb: error while querying for an remote control event. [ 1178.700706][T20526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1178.815390][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.837118][T19507] dvb-usb: bulk message failed: -22 (1/0) [ 1178.850910][T19507] dvb-usb: error while querying for an remote control event. [ 1178.865989][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.891398][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1178.916491][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1178.947208][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.009143][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.017243][ T5316] usb 3-1: string descriptor 0 read error: -71 [ 1179.028857][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.039525][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.041083][ T5316] usb 3-1: USB disconnect, device number 115 [ 1179.069200][T20526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1179.082367][ T5277] dvb-usb: bulk message failed: -22 (1/0) [ 1179.095803][ T5277] dvb-usb: error while querying for an remote control event. [ 1179.105119][T20526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.117334][T20526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.139939][T20526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.159970][T20526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.169299][T20526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.178611][T20526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.268976][ T52] dvb-usb: bulk message failed: -22 (1/0) [ 1179.274824][ T52] dvb-usb: error while querying for an remote control event. [ 1179.378565][T16694] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1179.436042][T15591] dvb-usb: bulk message failed: -22 (1/0) [ 1179.441921][T15591] dvb-usb: error while querying for an remote control event. [ 1179.497617][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.505464][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.587142][T16694] usb 4-1: Using ep0 maxpacket: 16 [ 1179.597926][ T7956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.606951][ T7956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.615869][ T937] dvb-usb: bulk message failed: -22 (1/0) [ 1179.622605][ T937] dvb-usb: error while querying for an remote control event. [ 1179.659073][T16694] usb 4-1: config 5 has no interfaces? [ 1179.692375][T16694] usb 4-1: New USB device found, idVendor=12d1, idProduct=c71e, bcdDevice=b3.13 [ 1179.709431][T16694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.735840][T16694] usb 4-1: Product: syz [ 1179.754603][T16694] usb 4-1: Manufacturer: syz [ 1179.796092][T16694] usb 4-1: SerialNumber: syz [ 1179.796703][ T937] dvb-usb: bulk message failed: -22 (1/0) [ 1179.834013][ T937] dvb-usb: error while querying for an remote control event. [ 1180.051704][T20673] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1180.058698][ T5277] dvb-usb: bulk message failed: -22 (1/0) [ 1180.064434][ T5277] dvb-usb: error while querying for an remote control event. [ 1180.154860][T16694] usb 2-1: USB disconnect, device number 119 [ 1180.187948][T20673] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1180.188188][T20829] fuse: Bad value for 'fd' [ 1180.225903][ T5278] usb 4-1: USB disconnect, device number 124 [ 1180.284986][T20673] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1180.292966][T20829] fuse: Unknown parameter 'group_id00000000000000000000' [ 1180.298593][T16694] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1180.378168][T20673] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1180.443062][T20835] netlink: 'syz.2.2735': attribute type 3 has an invalid length. [ 1180.465816][T20835] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2735'. [ 1180.576272][T20673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.593693][T20673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1180.620733][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.627994][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1180.685619][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.692797][ T7956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1180.802518][T20673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1180.833157][T20673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1180.864524][T20673] veth0_vlan: entered promiscuous mode [ 1180.877396][T20673] veth1_vlan: entered promiscuous mode [ 1180.898501][T20673] veth0_macvtap: entered promiscuous mode [ 1180.907423][T20673] veth1_macvtap: entered promiscuous mode [ 1180.921493][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.932405][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.942379][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.953234][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.963177][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.973795][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.983850][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.995893][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.005901][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.016388][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.026441][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.037935][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.049024][T20673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.058552][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.069125][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.079111][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.089705][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.100112][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.111107][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.121124][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.131701][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.141712][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.152844][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.162759][T20673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1181.173983][T20673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.185237][T20673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1181.196360][T20673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.205996][T20673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.214719][T20673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.224254][T20673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1181.630796][T20842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 1181.680899][T20842] CIFS: iocharset name too long [ 1181.757326][ T29] audit: type=1326 audit(1728499747.145:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20847 comm="syz.1.2739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3617dff9 code=0x0 [ 1181.783820][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.808845][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.966094][T14582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.985941][T14582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.469709][T20857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1182.635822][ T937] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1182.799724][ T937] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1182.809534][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.830646][ T937] usb 4-1: config 0 descriptor?? [ 1182.864377][ T937] go7007 4-1:0.0: probe with driver go7007 failed with error -12 [ 1183.006021][ T9] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1183.181671][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1183.220850][ T9] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=a3.b6 [ 1183.244478][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.255265][ T9] usb 2-1: Product: syz [ 1183.278752][ T9] usb 2-1: Manufacturer: syz [ 1183.293652][ T9] usb 2-1: SerialNumber: syz [ 1183.348560][ T9] usb 2-1: config 0 descriptor?? [ 1183.390202][ T9] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 1183.448212][ T937] usb 4-1: USB disconnect, device number 125 [ 1183.795094][T20904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2744'. [ 1183.816974][T20902] can: request_module (can-proto-0) failed. [ 1184.304477][T20913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.645881][ T9] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1184.819553][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.833176][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.886695][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1184.964475][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1184.985343][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.032946][ T9] usb 3-1: config 0 descriptor?? [ 1185.065299][T20909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1185.503394][ T9] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 1185.528446][ T9] plantronics 0003:047F:FFFF.0025: item fetching failed at offset 13/15 [ 1185.556489][ T9] plantronics 0003:047F:FFFF.0025: parse failed [ 1185.562881][ T9] plantronics 0003:047F:FFFF.0025: probe with driver plantronics failed with error -22 [ 1185.739532][ T9] usb 3-1: USB disconnect, device number 116 [ 1185.854241][T19507] usb 2-1: USB disconnect, device number 120 [ 1185.948368][ T4623] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 1186.331612][T20949] syzkaller0: entered promiscuous mode [ 1186.368775][T20949] syzkaller0: entered allmulticast mode [ 1186.831358][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1187.027231][T20966] netlink: 'syz.4.2754': attribute type 2 has an invalid length. [ 1187.307551][T20634] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1187.515800][T20634] usb 1-1: Using ep0 maxpacket: 32 [ 1187.523770][T20634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1187.536333][T20634] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1187.547292][T20634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.555325][T20634] usb 1-1: Product: syz [ 1187.559833][T20634] usb 1-1: Manufacturer: syz [ 1187.564449][T20634] usb 1-1: SerialNumber: syz [ 1187.581534][T20634] usb 1-1: config 0 descriptor?? [ 1187.589353][T20634] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1187.596511][T20634] pvrusb2: ********** [ 1187.601051][T20634] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1187.615048][T20634] pvrusb2: Important functionality might not be entirely working. [ 1187.752272][T20634] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1187.773088][T20634] pvrusb2: ********** [ 1187.840286][ T2040] pvrusb2: Invalid write control endpoint [ 1188.012165][ T2040] pvrusb2: Invalid write control endpoint [ 1188.036184][T20967] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1188.052877][ T2040] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1188.163992][ T2040] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1188.215783][ T2040] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1188.276057][ T2040] pvrusb2: Device being rendered inoperable [ 1188.306072][ T2040] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1188.315153][ T2040] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1188.459008][ T2040] pvrusb2: Attached sub-driver cx25840 [ 1188.492792][ T2040] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1188.529832][ T2040] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1192.070958][T20964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1192.132502][ T937] usb 1-1: USB disconnect, device number 7 [ 1192.494816][ T29] audit: type=1326 audit(1728499757.895:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20979 comm="syz.1.2761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed3617dff9 code=0x0 [ 1192.613851][T20991] dlm: non-version read from control device 231 [ 1193.725900][T19507] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1193.916770][T19507] usb 5-1: Using ep0 maxpacket: 8 [ 1193.927828][T19507] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1193.947010][T19507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.975807][T19507] usb 5-1: Product: syz [ 1193.983931][T19507] usb 5-1: Manufacturer: syz [ 1194.004027][T19507] usb 5-1: SerialNumber: syz [ 1194.021413][T19507] usb 5-1: config 0 descriptor?? [ 1194.252760][T19507] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1195.290017][T21034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1195.345854][T21034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1195.390401][T21034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1195.473320][T21035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1195.474622][T21034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1196.965983][ T937] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1196.988439][T19507] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1197.034892][T19507] usb 5-1: USB disconnect, device number 10 [ 1197.198381][ T937] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1197.235857][ T9] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1197.249500][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.283295][ T937] usb 3-1: config 0 descriptor?? [ 1197.391412][ T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1197.417669][ T9] usb 4-1: config 0 has no interface number 0 [ 1197.452570][ T9] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.504657][ T9] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.517489][T19507] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1197.568870][ T9] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1197.661556][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1197.709759][T19507] usb 1-1: Using ep0 maxpacket: 32 [ 1197.717233][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.727872][T19507] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1197.758456][T19507] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1197.772636][T19507] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1197.803663][ T9] usb 4-1: config 0 descriptor?? [ 1197.821954][T19507] usb 1-1: Product: syz [ 1197.852363][T19507] usb 1-1: Manufacturer: syz [ 1197.890493][T19507] usb 1-1: SerialNumber: syz [ 1197.909763][T19507] usb 1-1: config 0 descriptor?? [ 1197.956366][T21060] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1198.102193][ T4623] Bluetooth: hci4: link tx timeout [ 1198.108241][ T4623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1198.164073][T21053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.235669][T21053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.251807][ T937] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1198.263441][ T9] uclogic 0003:28BD:1903.0026: interface is invalid, ignoring [ 1198.276497][T21069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1198.283760][T21069] IPv6: NLM_F_CREATE should be set when creating new route [ 1198.315856][T16694] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1198.323655][ T937] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 1198.379882][ T937] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1198.406146][ T937] usb 3-1: USB disconnect, device number 117 [ 1198.542888][T16694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.566360][T21060] hsr0: entered promiscuous mode [ 1198.574113][T16694] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1198.601488][T16694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.608319][T15591] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1198.621383][T16694] usb 5-1: config 0 descriptor?? [ 1198.646419][T21060] hsr0: left promiscuous mode [ 1198.674510][T16694] pwc: Askey VC010 type 2 USB webcam detected. [ 1198.805915][T15591] usb 2-1: Using ep0 maxpacket: 16 [ 1198.824447][T15591] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1198.845838][T15591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.882101][T15591] usb 2-1: Product: syz [ 1198.915812][T15591] usb 2-1: Manufacturer: syz [ 1198.933702][T15591] usb 2-1: SerialNumber: syz [ 1198.949491][T15591] usb 2-1: config 0 descriptor?? [ 1199.109099][T16694] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1199.164794][T15591] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1199.396648][T15591] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1199.404283][T15591] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1199.408102][T21064] erspan0: entered promiscuous mode [ 1199.411174][T15591] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 1199.523121][T21064] erspan0: left promiscuous mode [ 1200.036169][T15591] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22 [ 1200.180844][T20668] Bluetooth: hci4: command 0x0406 tx timeout [ 1200.200099][T15591] usb 1-1: USB disconnect, device number 8 [ 1200.365521][T16694] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1200.405865][T16694] pwc: recv_control_msg error -71 req 04 val 1000 [ 1200.431438][T16694] pwc: recv_control_msg error -71 req 04 val 1300 [ 1200.468619][T21082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1200.511994][ T9] usb 2-1: USB disconnect, device number 121 [ 1200.518579][T16694] pwc: recv_control_msg error -71 req 04 val 1400 [ 1200.545885][T16694] pwc: recv_control_msg error -71 req 02 val 2000 [ 1200.566145][T21082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 1200.644609][T16694] pwc: recv_control_msg error -71 req 02 val 2100 [ 1200.652555][T21082] macvlan0: entered promiscuous mode [ 1200.685888][T16694] pwc: recv_control_msg error -71 req 04 val 1500 [ 1200.705322][T21082] batadv_slave_0: entered promiscuous mode [ 1200.736214][T16694] pwc: recv_control_msg error -71 req 02 val 2500 [ 1200.775939][T16694] pwc: recv_control_msg error -71 req 02 val 2400 [ 1200.787085][T21086] netlink: 'syz.0.2787': attribute type 1 has an invalid length. [ 1200.839921][T16694] pwc: recv_control_msg error -71 req 02 val 2600 [ 1200.930764][T16694] pwc: recv_control_msg error -71 req 02 val 2900 [ 1200.945797][ T9] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1200.966221][T16694] pwc: recv_control_msg error -71 req 02 val 2800 [ 1200.993080][T16694] pwc: recv_control_msg error -71 req 04 val 1100 [ 1201.005050][T16694] pwc: recv_control_msg error -71 req 04 val 1200 [ 1201.033925][T16694] pwc: Registered as video71. [ 1201.047051][T16694] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input71 [ 1201.161726][T16694] usb 5-1: USB disconnect, device number 11 [ 1201.192962][ T9] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1201.222615][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.248951][T15591] usb 4-1: USB disconnect, device number 126 [ 1201.356400][ T9] usb 3-1: config 0 descriptor?? [ 1201.677415][ T29] audit: type=1400 audit(1728499767.085:2324): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=21096 comm="syz.0.2792" [ 1201.825650][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1201.931557][T21101] pimreg: entered allmulticast mode [ 1201.986923][T15591] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1202.012106][T21105] pimreg: left allmulticast mode [ 1202.147727][T15591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1202.193672][T15591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 1202.253887][T15591] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1202.272507][T15591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.300957][T15591] usb 1-1: config 0 descriptor?? [ 1202.306848][ T937] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1202.409744][T21102] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1202.458590][T15591] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1202.510812][ T937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1202.558066][ T937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 1202.574142][ T937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 1202.637094][ T937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1202.656008][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.669855][T21102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.740382][T21101] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1202.760220][T21101] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1202.787587][T21102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.890835][ T937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1202.987100][T15591] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 1203.059046][T15591] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1203.100606][T15591] usb 1-1: MIDIStreaming interface descriptor not found [ 1203.302600][T21101] netlink: 'syz.4.2791': attribute type 2 has an invalid length. [ 1203.501352][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1203.526610][ T9] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1203.567458][ T9] usb 3-1: USB disconnect, device number 118 [ 1203.591898][ T937] usb 5-1: USB disconnect, device number 12 [ 1204.680215][ T52] usb 1-1: USB disconnect, device number 9 [ 1204.974756][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2797'. [ 1206.370354][T21152] misc userio: No port type given on /dev/userio [ 1206.686358][ T52] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1206.905791][T20634] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1206.970268][ T52] usb 5-1: New USB device found, idVendor=0df6, idProduct=004b, bcdDevice=56.d7 [ 1206.990219][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.020343][ T52] usb 5-1: Product: syz [ 1207.026510][ T52] usb 5-1: Manufacturer: syz [ 1207.031586][ T52] usb 5-1: SerialNumber: syz [ 1207.042225][ T52] usb 5-1: config 0 descriptor?? [ 1207.053313][ T52] r8712u: register rtl8712_netdev_ops to netdev_ops [ 1207.076602][ T52] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 1207.124415][T20634] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1207.155857][T20634] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.166253][T20634] usb 1-1: config 0 has no interface number 0 [ 1207.172430][T20634] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1207.221641][T20634] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1207.310782][T20634] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1207.324635][T20634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.343800][T20634] usb 1-1: Product: syz [ 1207.348251][T20634] usb 1-1: Manufacturer: syz [ 1207.353069][T20634] usb 1-1: SerialNumber: syz [ 1207.367126][T20634] usb 1-1: config 0 descriptor?? [ 1207.611223][ T52] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 1207.636278][ T52] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 1207.644125][ T52] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 1207.729188][T21151] netlink: 'syz.0.2804': attribute type 10 has an invalid length. [ 1207.770567][T21151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.792569][T21151] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1207.856052][T20634] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1207.885042][ T9] usb 5-1: USB disconnect, device number 13 [ 1207.893082][T20634] usb 1-1: USB disconnect, device number 10 [ 1207.972610][T21171] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2811'. [ 1208.080768][T21172] batman_adv: batadv0: Adding interface: wlan1 [ 1208.087283][T21172] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.113286][T21172] batman_adv: batadv0: Interface activated: wlan1 [ 1208.416020][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1208.566723][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1208.600210][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.649825][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.722602][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1208.731864][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.745469][ T9] usb 3-1: config 0 descriptor?? [ 1208.844202][ T937] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1209.025913][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 1209.037871][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1209.064095][ T937] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1209.077111][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.093051][ T937] usb 1-1: Product: syz [ 1209.100986][ T937] usb 1-1: Manufacturer: syz [ 1209.113724][ T937] usb 1-1: SerialNumber: syz [ 1209.129532][ T937] usb 1-1: config 0 descriptor?? [ 1209.148105][ T937] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1209.173826][ T937] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1209.219375][ T9] hid-rmi 0003:17EF:6085.0027: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.2-1/input0 [ 1209.512925][T21168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.575376][T21168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.846712][ T937] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1210.329338][ T937] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1210.342427][T21175] loop8: detected capacity change from 0 to 7 [ 1210.355169][ T937] em28xx 1-1:0.0: board has no eeprom [ 1210.445845][T21175] Dev loop8: unable to read RDB block 7 [ 1210.451499][T21175] loop8: unable to read partition table [ 1210.522930][T21175] loop8: partition table beyond EOD, truncated [ 1210.539835][T21175] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1210.539835][T21175] ) failed (rc=-5) [ 1210.569039][ T9] usb 3-1: USB disconnect, device number 119 [ 1210.737868][T21197] netlink: 'syz.0.2812': attribute type 10 has an invalid length. [ 1210.887311][T21197] team0: Port device netdevsim0 added [ 1210.930156][T21198] netlink: 'syz.0.2812': attribute type 10 has an invalid length. [ 1211.026821][T21198] team0: Port device netdevsim0 removed [ 1211.062597][T21198] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1211.237642][ T937] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1211.293466][ T937] em28xx 1-1:0.0: dvb set to bulk mode. [ 1211.331854][T19507] em28xx 1-1:0.0: Binding DVB extension [ 1211.389082][ T937] usb 1-1: USB disconnect, device number 11 [ 1211.413143][ T937] em28xx 1-1:0.0: Disconnecting em28xx [ 1211.537712][T19507] em28xx 1-1:0.0: Registering input extension [ 1211.604232][ T937] em28xx 1-1:0.0: Closing input extension [ 1211.650085][ T937] em28xx 1-1:0.0: Freeing device [ 1212.154325][T21213] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2821'. [ 1212.576246][ T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1212.737677][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1212.749163][ T9] usb 2-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1212.831550][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1212.846056][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 28005, setting to 1024 [ 1212.857247][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1212.925873][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1212.934989][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1212.943271][ T9] usb 2-1: Manufacturer: syz [ 1212.977040][ T9] usb 2-1: config 0 descriptor?? [ 1212.983031][T21221] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1213.087828][T21234] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2825'. [ 1213.254439][T21221] fuse: Bad value for 'rootmode' [ 1215.439276][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1215.449663][ T9] usb 2-1: USB disconnect, device number 122 [ 1215.480913][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 1216.079016][ T7960] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.097958][T21267] fuse: Unknown parameter '0x000000000000000700000000000000000000w' [ 1216.528093][T20668] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1216.540448][T20668] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1216.550140][T20668] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1216.582693][T20668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1216.596941][T20668] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1216.610444][T20668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1216.934548][ T7960] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.245818][T20634] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1217.292213][ T7960] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.395905][T16694] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1217.416972][T20634] usb 1-1: Using ep0 maxpacket: 32 [ 1217.433682][T20634] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1217.452572][T20634] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.482838][T20634] usb 1-1: config 0 has no interface number 0 [ 1217.500559][T20634] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1217.535571][T20634] usb 1-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1217.578889][T20634] usb 1-1: config 0 interface 8 has no altsetting 0 [ 1217.585868][T16694] usb 5-1: Using ep0 maxpacket: 8 [ 1217.617868][T16694] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 1217.636238][T16694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.645479][T20634] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1217.658715][ T7960] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.679135][T20634] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.708875][T16694] usb 5-1: config 0 descriptor?? [ 1217.714347][T20634] usb 1-1: Product: syz [ 1217.738441][T16694] usb 5-1: unknown interface protocol 0x3f, assuming v1 [ 1217.756334][T20634] usb 1-1: Manufacturer: syz [ 1217.765240][T20634] usb 1-1: SerialNumber: syz [ 1217.778698][T16694] usb 5-1: cannot find UAC_HEADER [ 1217.793521][T20634] usb 1-1: config 0 descriptor?? [ 1217.839527][T16694] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1217.913517][T18948] udevd[18948]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1218.294644][T21276] chnl_net:caif_netlink_parms(): no params data found [ 1218.339396][ T937] usb 5-1: USB disconnect, device number 14 [ 1218.457406][ T7960] bridge_slave_1: left allmulticast mode [ 1218.463140][ T7960] bridge_slave_1: left promiscuous mode [ 1218.509164][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.541964][T20634] ath6kl: Failed to submit usb control message: -71 [ 1218.558735][ T7960] bridge_slave_0: left allmulticast mode [ 1218.564449][ T7960] bridge_slave_0: left promiscuous mode [ 1218.572334][T20634] ath6kl: unable to send the bmi data to the device: -71 [ 1218.577699][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.596012][T20634] ath6kl: Unable to send get target info: -71 [ 1218.622586][T20634] ath6kl: Failed to init ath6kl core: -71 [ 1218.636457][T20634] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1218.656247][ T4623] Bluetooth: hci2: command tx timeout [ 1218.713881][T20634] usb 1-1: USB disconnect, device number 12 [ 1219.934669][ T7960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.961818][ T7960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.975242][ T7960] bond0 (unregistering): Released all slaves [ 1220.155898][ T937] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1220.424488][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.454713][ T937] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1220.481370][ T937] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1220.502241][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64 [ 1220.515298][ T937] usb 4-1: SerialNumber: syz [ 1220.532703][ T937] usb 4-1: config 0 descriptor?? [ 1220.574532][T21327] netlink: 'syz.2.2847': attribute type 27 has an invalid length. [ 1220.736495][ T4623] Bluetooth: hci2: command tx timeout [ 1220.946175][T15591] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1221.110282][T15591] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1221.141162][T15591] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1221.158060][T21330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.199326][T21330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.230370][T15591] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.252597][T21330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1221.279714][T15591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.306020][T15591] usb 3-1: Product: syz [ 1221.319664][T21276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.330842][T15591] usb 3-1: Manufacturer: syz [ 1221.345948][T21276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.354295][T15591] usb 3-1: SerialNumber: syz [ 1221.382578][T21276] bridge_slave_0: entered allmulticast mode [ 1221.413327][T21276] bridge_slave_0: entered promiscuous mode [ 1221.460077][T15591] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1221.545328][T21276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.564377][T21276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.582802][T21276] bridge_slave_1: entered allmulticast mode [ 1221.604367][T21276] bridge_slave_1: entered promiscuous mode [ 1221.684896][ T7960] hsr_slave_0: left promiscuous mode [ 1221.694639][T19507] usb 3-1: USB disconnect, device number 120 [ 1221.708783][ T7960] hsr_slave_1: left promiscuous mode [ 1221.783182][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1221.809559][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.857105][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1221.873475][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.912401][ T7960] veth1_macvtap: left promiscuous mode [ 1221.920005][ T7960] veth0_macvtap: left promiscuous mode [ 1222.000102][ T5278] usb 4-1: USB disconnect, device number 127 [ 1222.816561][ T4623] Bluetooth: hci2: command tx timeout [ 1223.005637][T21353] binder: 21351:21353 ioctl c0306201 0 returned -14 [ 1223.255906][T19507] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1223.426275][T19507] usb 4-1: Using ep0 maxpacket: 8 [ 1223.459426][T19507] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1223.483510][T19507] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1223.518523][T19507] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1223.528016][T19507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.536743][T19507] usb 4-1: Product: syz [ 1223.541157][T19507] usb 4-1: Manufacturer: syz [ 1223.555016][T19507] usb 4-1: SerialNumber: syz [ 1223.781111][ T4623] Bluetooth: hci0: unknown advertising packet type: 0x65 [ 1223.781243][ T4623] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1223.851128][ T7960] team0 (unregistering): Port device team_slave_1 removed [ 1223.924712][ T7960] team0 (unregistering): Port device team_slave_0 removed [ 1223.995931][ T937] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1224.166050][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 1224.182360][ T937] usb 1-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=dd.2d [ 1224.204359][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.227597][ T937] usb 1-1: Product: syz [ 1224.231923][ T937] usb 1-1: Manufacturer: syz [ 1224.246356][ T937] usb 1-1: SerialNumber: syz [ 1224.267195][ T937] usb 1-1: config 0 descriptor?? [ 1224.279386][ T937] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 1224.298566][ T937] dvb-usb: bulk message failed: -22 (4/0) [ 1224.305113][ T937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.317545][ T937] dvb-usb: bulk message failed: -22 (5/0) [ 1224.323431][ T937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.341215][ T937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1224.353025][ T937] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 1224.364441][ T937] usb 1-1: media controller created [ 1224.392435][ T937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.440278][ T937] usb 1-1: selecting invalid altsetting 3 [ 1224.447647][ T937] ttusb2: set interface to alts=3 failed [ 1224.524436][ T937] DVB: Unable to find symbol tda10086_attach() [ 1224.531161][ T937] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 1224.542411][ T937] dvb-usb: bulk message failed: -22 (4/0) [ 1224.548663][ T937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.560917][ T937] dvb-usb: bulk message failed: -22 (5/0) [ 1224.567329][ T937] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1224.578366][ T937] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 1224.899736][T20668] Bluetooth: hci2: command tx timeout [ 1224.932761][T19507] usb 4-1: invalid UAC_HEADER (v1) [ 1224.990920][T19507] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1225.022605][T21364] netlink: 'syz.0.2854': attribute type 5 has an invalid length. [ 1225.046497][T19507] usb 4-1: USB disconnect, device number 2 [ 1225.067577][ T5278] usb 1-1: USB disconnect, device number 13 [ 1225.132859][T18966] udevd[18966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.157419][ T5278] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 1225.170386][T21276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.216264][T21276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.317382][T21276] team0: Port device team_slave_0 added [ 1225.367294][T21276] team0: Port device team_slave_1 added [ 1225.668044][T21276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.675068][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.734435][T21276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.858009][T21276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.864996][T21276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.936539][T21276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.975841][T16694] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1226.125979][T16694] usb 4-1: Using ep0 maxpacket: 8 [ 1226.144327][T20668] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1226.146901][T16694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1226.166128][T20668] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1226.168654][T16694] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1226.187242][T20668] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1226.187352][T21276] hsr_slave_0: entered promiscuous mode [ 1226.205315][T20668] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1226.212902][T16694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.223547][T20668] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1226.231119][T21276] hsr_slave_1: entered promiscuous mode [ 1226.237222][T20668] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1226.265895][T16694] usb 4-1: Product: syz [ 1226.270357][T16694] usb 4-1: Manufacturer: syz [ 1226.274964][T16694] usb 4-1: SerialNumber: syz [ 1226.288293][T16694] usb 4-1: config 0 descriptor?? [ 1226.298593][T21276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1226.320664][T21276] Cannot create hsr debugfs directory [ 1226.322058][T16694] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1227.018836][ T7960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.268479][ T7960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.524585][ T7960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.590795][ T937] usb 4-1: USB disconnect, device number 3 [ 1228.018122][ T7960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.339365][T20668] Bluetooth: hci1: command tx timeout [ 1228.389752][T21391] chnl_net:caif_netlink_parms(): no params data found [ 1228.700227][ T937] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1228.886685][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 1228.900758][ T937] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 1228.930510][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.942078][ T937] usb 4-1: Product: syz [ 1228.950197][ T937] usb 4-1: Manufacturer: syz [ 1228.954956][ T937] usb 4-1: SerialNumber: syz [ 1228.968187][ T937] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1228.974472][ T937] r8152-cfgselector 4-1: config 0 descriptor?? [ 1229.362353][ T7960] bridge_slave_1: left allmulticast mode [ 1229.369641][ T7960] bridge_slave_1: left promiscuous mode [ 1229.375432][ T7960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.404887][ T7960] bridge_slave_0: left allmulticast mode [ 1229.427306][ T7960] bridge_slave_0: left promiscuous mode [ 1229.444218][ T7960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.570438][T21425] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1229.867615][T21460] vivid-000: disconnect [ 1229.912626][T21460] vivid-000: reconnect [ 1230.426007][T20668] Bluetooth: hci1: command tx timeout [ 1230.689891][T21464] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1230.957023][ T7960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1230.981104][ T7960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1230.994494][ T7960] bond0 (unregistering): Released all slaves [ 1231.013900][T21391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.021347][T21391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.032670][T21391] bridge_slave_0: entered allmulticast mode [ 1231.047626][T21391] bridge_slave_0: entered promiscuous mode [ 1231.063632][T21423] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 1231.117426][T21466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2867'. [ 1231.174977][ T7960] batman_adv: batadv0: Interface deactivated: wlan1 [ 1231.185378][ T5316] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 1231.282300][ T7960] batman_adv: batadv0: Removing interface: wlan1 [ 1231.318704][T21391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.342124][T21391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.364154][T21391] bridge_slave_1: entered allmulticast mode [ 1231.377305][T21391] bridge_slave_1: entered promiscuous mode [ 1231.827080][ T7960] hsr_slave_0: left promiscuous mode [ 1231.833239][ T7960] hsr_slave_1: left promiscuous mode [ 1231.896308][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1231.903783][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1231.943531][ T7960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1231.943563][ T7960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.000841][ T7960] veth1_macvtap: left promiscuous mode [ 1232.000913][ T7960] veth0_macvtap: left promiscuous mode [ 1232.001004][ T7960] veth1_vlan: left promiscuous mode [ 1232.001134][ T7960] veth0_vlan: left promiscuous mode [ 1232.011149][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1232.468429][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1232.481157][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1232.490692][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1232.498090][ T4623] Bluetooth: hci1: command tx timeout [ 1232.518734][T15500] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1232.527504][T15500] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1232.534903][T15500] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1233.142452][T21473] delete_channel: no stack [ 1233.576881][ T7960] team0 (unregistering): Port device team_slave_1 removed [ 1233.776163][ T7960] team0 (unregistering): Port device team_slave_0 removed [ 1233.780558][T21484] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 1234.581138][T20668] Bluetooth: hci1: command tx timeout [ 1234.665917][T20668] Bluetooth: hci3: command tx timeout [ 1235.164652][T21391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.201907][T20668] Bluetooth: hci5: Ignoring connect complete event for invalid link type [ 1235.214557][T21391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.272889][T21276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1235.346984][T21276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1235.461006][T21276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1235.484577][T21276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1235.558821][T21391] team0: Port device team_slave_0 added [ 1235.587979][T21391] team0: Port device team_slave_1 added [ 1235.665958][T21391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.676445][T21391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.703077][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.776864][T21391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.848520][T21391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.866482][T21391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.914505][T21391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.159372][T21391] hsr_slave_0: entered promiscuous mode [ 1236.166340][T21391] hsr_slave_1: entered promiscuous mode [ 1236.172563][T21391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.181775][T21391] Cannot create hsr debugfs directory [ 1236.266228][ T5316] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1236.352776][T21480] chnl_net:caif_netlink_parms(): no params data found [ 1236.376089][ T937] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1236.436110][ T5316] usb 4-1: Using ep0 maxpacket: 32 [ 1236.454490][ T5316] usb 4-1: config 0 has an invalid interface number: 84 but max is 1 [ 1236.466296][ T5316] usb 4-1: config 0 has an invalid interface number: 84 but max is 1 [ 1236.474709][ T5316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.505142][ T5316] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1236.522905][ T5316] usb 4-1: config 0 has no interface number 0 [ 1236.526075][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 1236.537217][ T5316] usb 4-1: config 0 interface 84 has no altsetting 1 [ 1236.557138][ T5316] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=6c.3e [ 1236.558532][ T937] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1236.580775][ T5316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.591024][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.609381][ T5316] usb 4-1: Product: syz [ 1236.610948][ T937] usb 1-1: Product: syz [ 1236.613595][ T5316] usb 4-1: Manufacturer: syz [ 1236.623203][ T937] usb 1-1: Manufacturer: syz [ 1236.633237][ T937] usb 1-1: SerialNumber: syz [ 1236.645427][ T5316] usb 4-1: SerialNumber: syz [ 1236.663587][ T937] usb 1-1: config 0 descriptor?? [ 1236.671416][ T5316] usb 4-1: config 0 descriptor?? [ 1236.683170][ T937] as10x_usb: device has been detected [ 1236.694358][ T937] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1236.735946][T20668] Bluetooth: hci3: command tx timeout [ 1236.761068][ T937] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1236.844364][ T937] as10x_usb: error during firmware upload part1 [ 1236.851430][T21276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.869655][ T937] Registered device Sky IT Digital Key (green led) [ 1236.886535][T21507] random: crng reseeded on system resumption [ 1237.131272][T21480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.140086][T21480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.147830][T21480] bridge_slave_0: entered allmulticast mode [ 1237.155258][T21480] bridge_slave_0: entered promiscuous mode [ 1237.236551][T21480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.250725][T21480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.266020][T21480] bridge_slave_1: entered allmulticast mode [ 1237.281522][T21480] bridge_slave_1: entered promiscuous mode [ 1237.300403][T21531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2877'. [ 1237.349446][T21276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.387972][T21276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1237.398820][T21276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1237.419084][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.426319][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.448993][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.456206][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1237.548689][T21535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.571045][T21480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.603641][T21535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.615443][T21480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.628387][T16694] usb 4-1: USB disconnect, device number 5 [ 1237.736388][T21276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1237.833807][T21480] team0: Port device team_slave_0 added [ 1237.858281][T21480] team0: Port device team_slave_1 added [ 1237.967616][T21480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1237.974648][T21480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1238.001519][T21480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.024714][ T7974] bridge_slave_1: left allmulticast mode [ 1238.031470][ T7974] bridge_slave_1: left promiscuous mode [ 1238.040642][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.050502][ T7974] bridge_slave_0: left allmulticast mode [ 1238.057350][ T7974] bridge_slave_0: left promiscuous mode [ 1238.065633][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.254996][ T937] usb 1-1: USB disconnect, device number 14 [ 1238.270452][ T937] Unregistered device Sky IT Digital Key (green led) [ 1238.303493][ T937] as10x_usb: device has been disconnected [ 1238.568572][T21561] netlink: 'syz.3.2879': attribute type 2 has an invalid length. [ 1238.826331][T20668] Bluetooth: hci3: command tx timeout [ 1238.982842][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.992813][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.287536][T20634] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1239.456517][T20634] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=79.b0 [ 1239.466958][T20634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.482463][T20634] usb 1-1: config 0 descriptor?? [ 1239.509284][T20634] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 1239.536840][T20634] dvb-usb: bulk message failed: -22 (2/0) [ 1239.576881][T20634] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1239.606715][T20634] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 1239.651650][T20634] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1239.848748][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1239.876457][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.909394][ T7974] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1239.947309][ T7974] bond0 (unregistering): Released all slaves [ 1239.988036][T21480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1239.995878][T21480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.154480][T21480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1240.408864][T21391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1240.661993][T21391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1240.698978][T21391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1240.758387][T21391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1240.804694][T21480] hsr_slave_0: entered promiscuous mode [ 1240.818639][T21480] hsr_slave_1: entered promiscuous mode [ 1240.859651][T21480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1240.868525][T21480] Cannot create hsr debugfs directory [ 1240.906933][T20668] Bluetooth: hci3: command tx timeout [ 1241.105210][T21276] veth0_vlan: entered promiscuous mode [ 1241.195191][ T7974] hsr_slave_0: left promiscuous mode [ 1241.221173][ T7974] hsr_slave_1: left promiscuous mode [ 1241.245925][ T937] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1241.258026][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.275199][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.375941][ T937] usb 4-1: device descriptor read/64, error -71 [ 1241.645860][ T937] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1241.798208][T19507] usb 1-1: USB disconnect, device number 15 [ 1241.868152][ T937] usb 4-1: device descriptor read/64, error -71 [ 1241.983249][ T937] usb usb4-port1: attempt power cycle [ 1242.216295][T19507] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1242.365961][ T937] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1242.383716][T19507] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1242.403423][T19507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.434024][ T937] usb 4-1: device descriptor read/8, error -71 [ 1242.445022][T19507] usb 1-1: Product: syz [ 1242.452151][T19507] usb 1-1: Manufacturer: syz [ 1242.458967][T19507] usb 1-1: SerialNumber: syz [ 1242.479258][T19507] usb 1-1: config 0 descriptor?? [ 1242.488628][T19507] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 016 [ 1242.698116][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.731654][ T937] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1242.756511][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.809340][ T937] usb 4-1: device descriptor read/8, error -71 [ 1242.818957][T21611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.856903][T21611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.936400][ T937] usb usb4-port1: unable to enumerate USB device [ 1243.717506][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1243.882692][T21634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.972600][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1244.463634][T19507] (null): failure setting delay to 10us [ 1244.469905][T19507] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 1244.482288][T19507] usb 1-1: USB disconnect, device number 16 [ 1245.121445][T21276] veth1_vlan: entered promiscuous mode [ 1245.395993][T16694] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1245.519954][T21276] veth0_macvtap: entered promiscuous mode [ 1245.569726][T16694] usb 4-1: Using ep0 maxpacket: 32 [ 1245.584998][T21276] veth1_macvtap: entered promiscuous mode [ 1245.624700][T16694] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 1245.646395][T16694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.682540][T21648] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1245.712563][T16694] usb 4-1: config 0 descriptor?? [ 1245.738446][T16694] smsc75xx v1.0.0 [ 1245.742179][T16694] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1245.773944][T16694] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 1245.895928][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1245.943394][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.046614][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.098832][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.216106][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.277913][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.317041][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.335944][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.346642][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1246.426325][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.473990][T21276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.500796][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.512081][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.525732][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.568976][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.682836][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.703078][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.713568][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.790159][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1246.853214][T21276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1246.948749][T21276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.055504][T21276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.203293][T21675] syzkaller0: entered promiscuous mode [ 1247.209604][T21675] syzkaller0: entered allmulticast mode [ 1247.385463][T21391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.906817][ T5277] usb 4-1: USB disconnect, device number 10 [ 1251.890379][T21276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.899407][T21276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.911038][T21276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.920364][T21276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.949117][T21685] netlink: 'syz.3.2888': attribute type 10 has an invalid length. [ 1252.083739][T21685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.097656][T21685] team0: Port device bond0 added [ 1252.236853][T20668] Bluetooth: hci0: Malformed Event: 0x02 [ 1252.243271][T21391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1252.337514][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.344723][T14582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1252.428893][T19258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.436090][T19258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.461970][T21695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1252.472204][T21692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1252.500770][T21695] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1252.507963][T21480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1252.519235][T21480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1252.569963][T21480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1252.618958][T21480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1252.740441][T14582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.759604][T14582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.858211][ T7956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.918093][ T7956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.024270][T21391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.106531][T19507] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1253.183061][T21480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.243339][T21391] veth0_vlan: entered promiscuous mode [ 1253.321202][T19507] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1253.336328][T21480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.366353][T19507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.380156][ T7956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.387392][ T7956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.405383][T19507] usb 4-1: Product: syz [ 1253.426307][T19507] usb 4-1: Manufacturer: syz [ 1253.430989][T19507] usb 4-1: SerialNumber: syz [ 1253.450597][T19507] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1253.451768][T21391] veth1_vlan: entered promiscuous mode [ 1253.537133][T15591] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1253.589608][ T7956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.596824][ T7956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.779327][T21391] veth0_macvtap: entered promiscuous mode [ 1253.830274][T21391] veth1_macvtap: entered promiscuous mode [ 1253.893530][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.908997][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.936804][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1253.948230][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1253.992583][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.035749][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.045638][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.085812][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.115787][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.145771][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.176422][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.193055][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.212731][T21391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.225007][T21721] netlink: 'syz.1.2893': attribute type 27 has an invalid length. [ 1254.378439][T21721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.386040][T21721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.566161][ T5277] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1254.690000][T21721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1254.713084][T21721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1254.730514][ T5277] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1254.761337][ T5277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1254.800490][ T5277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1254.810317][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.818999][T15591] usb 4-1: Service connection timeout for: 256 [ 1254.826388][ T5277] usb 2-1: Product: syz [ 1254.831954][T15591] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1254.841013][ T5277] usb 2-1: Manufacturer: syz [ 1254.847942][ T5277] usb 2-1: SerialNumber: syz [ 1254.870324][ T5277] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1254.881583][T15591] ath9k_htc: Failed to initialize the device [ 1254.892911][T15591] usb 4-1: ath9k_htc: USB layer deinitialized [ 1255.042267][T21721] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.053088][T21721] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.069951][T21721] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.087391][T21721] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1255.253624][T21722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.263474][T21722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.284508][T21722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1255.396872][ T9] usb 2-1: USB disconnect, device number 123 [ 1255.418763][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.430037][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.442140][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.453515][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.464548][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.491515][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.524049][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.554132][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.579820][T21391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.610983][T21391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.650356][T21391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.697671][T21391] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.717420][T21391] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.734242][T21391] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.744638][T21391] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.783468][T20634] usb 4-1: USB disconnect, device number 11 [ 1255.884783][T21480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.287905][T21740] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2897'. [ 1256.370218][T21740] xt_hashlimit: Unknown mode mask 312C7057, kernel too old? [ 1256.396203][T21480] veth0_vlan: entered promiscuous mode [ 1256.429464][ T7962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.474540][ T7962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.511558][T21480] veth1_vlan: entered promiscuous mode [ 1256.634704][T14582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.668819][T21480] veth0_macvtap: entered promiscuous mode [ 1256.689526][T14582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.734777][T21480] veth1_macvtap: entered promiscuous mode [ 1256.856579][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1256.947559][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.007415][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.025150][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.056111][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.066126][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.077056][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.087493][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.103348][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.113490][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.125915][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.136087][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.146713][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.158403][T21480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.168589][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.186140][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.196136][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.206712][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.216808][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.227497][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.237564][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.248438][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.259051][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.270564][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.280605][T21480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.291576][T21480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.304041][T21480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.359208][T21480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.389841][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1257.395998][T21480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.405644][T21480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.414594][T21480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.424780][ T9] usb 1-1: config 0 has no interfaces? [ 1257.434657][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1257.456078][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.464361][ T9] usb 1-1: Product: syz [ 1257.604285][ T9] usb 1-1: Manufacturer: syz [ 1257.674062][ T9] usb 1-1: SerialNumber: syz [ 1257.735237][ T9] usb 1-1: config 0 descriptor?? [ 1257.755639][ T7956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.810763][ T7956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.819268][T21751] sctp: [Deprecated]: syz.3.2899 (pid 21751) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1257.819268][T21751] Use struct sctp_sack_info instead [ 1257.940718][ T7962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.940741][ T7962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.200300][T21761] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.212691][T21761] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.223837][T21761] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.263114][T21761] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1258.276281][T21761] geneve2: entered promiscuous mode [ 1258.370409][T21761] geneve2: entered allmulticast mode [ 1258.433486][T21761] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1258.516496][T21761] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1258.544409][T21761] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1258.608580][T21769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1258.656011][T21761] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1259.816032][T19507] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1259.990965][T19507] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.991000][T19507] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1259.991890][T19507] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1259.991913][T19507] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1259.991931][T19507] usb 2-1: SerialNumber: syz [ 1260.015469][T19507] usb 2-1: bad CDC descriptors [ 1260.147393][T19507] usb 1-1: USB disconnect, device number 17 [ 1261.010931][T21807] x_tables: unsorted underflow at hook 4 [ 1261.328797][ T29] audit: type=1326 audit(1728499826.735:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21792 comm="syz.4.2906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x0 [ 1261.350874][ C1] vkms_vblank_simulate: vblank timer overrun [ 1261.494550][T21812] binder: 21810:21812 ioctl c018620c 0 returned -14 [ 1261.524241][T21812] binder: 21810:21812 ioctl c0145608 0 returned -22 [ 1261.574934][T21812] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1261.908845][T21814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2911'. [ 1261.932075][T21814] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1261.977422][T21814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 1262.418382][T21817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1262.439003][T20635] usb 2-1: USB disconnect, device number 124 [ 1262.660165][T21822] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2914'. [ 1262.895115][T21826] tipc: Started in network mode [ 1262.907348][T21826] tipc: Node identity 7f000001, cluster identity 4711 [ 1262.933926][T21826] tipc: Enabled bearer , priority 10 [ 1263.883923][T21843] program syz.1.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1263.921985][T21846] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2921'. [ 1264.050454][T20635] tipc: Node number set to 2130706433 [ 1264.120947][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1264.198551][T21843] kvm_intel: kvm [21840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff5556c5 [ 1264.209313][T21843] kvm: kvm [21840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff555ee1 [ 1264.225934][ T52] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1264.234133][T21848] netlink: 'syz.1.2920': attribute type 21 has an invalid length. [ 1264.244871][T21843] kvm: kvm [21840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffdbff555e59 [ 1264.272268][T21848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1264.285859][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1264.292854][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1264.306268][T21843] kvm: kvm [21840]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xffb4ff555eb8 [ 1264.330082][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1264.336228][T21848] netlink: 'syz.1.2920': attribute type 4 has an invalid length. [ 1264.364825][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.387693][T21848] netlink: 'syz.1.2920': attribute type 5 has an invalid length. [ 1264.393278][ T9] usb 5-1: Product: syz [ 1264.401100][ T9] usb 5-1: Manufacturer: syz [ 1264.405988][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 1264.406533][ T9] usb 5-1: SerialNumber: syz [ 1264.420076][ T52] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1264.421846][ T9] usb 5-1: config 0 descriptor?? [ 1264.438956][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.450510][T21848] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2920'. [ 1264.460525][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1264.493337][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1264.506002][ T52] usb 1-1: config 0 descriptor?? [ 1264.523429][ T52] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1264.557264][ T29] audit: type=1326 audit(1728499829.965:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21853 comm="syz.3.2923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd940b7dff9 code=0x0 [ 1264.640430][T21855] netlink: 'syz.3.2923': attribute type 10 has an invalid length. [ 1264.747316][T21855] team0: Failed to send options change via netlink (err -105) [ 1264.770284][T21855] team0: Port device netdevsim0 added [ 1264.786789][T19653] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1265.069414][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1265.145933][T20635] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1265.335841][T20635] usb 3-1: Using ep0 maxpacket: 32 [ 1265.348774][T20635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1265.400929][T20635] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.431685][T20635] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1265.482624][T20635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.529400][T20635] usb 3-1: config 0 descriptor?? [ 1265.536339][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1265.544356][ T9] em28xx 5-1:0.0: board has no eeprom [ 1265.550194][T21838] loop8: detected capacity change from 0 to 7 [ 1265.572614][T21865] can: request_module (can-proto-0) failed. [ 1265.600704][T21838] Dev loop8: unable to read RDB block 7 [ 1265.638910][T21869] netlink: 'syz.4.2918': attribute type 10 has an invalid length. [ 1265.653088][T21838] loop8: unable to read partition table [ 1265.679590][T21838] loop8: partition table beyond EOD, truncated [ 1265.688688][T21838] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1265.688688][T21838] ) failed (rc=-5) [ 1265.700176][T21869] team0: Port device netdevsim0 added [ 1265.715222][ T52] gspca_sq930x: ucbus_write failed -71 [ 1265.724320][ T52] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1265.751478][T21873] netlink: 'syz.4.2918': attribute type 10 has an invalid length. [ 1265.766246][T21872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2927'. [ 1265.790259][ T52] usb 1-1: USB disconnect, device number 18 [ 1266.060038][T20635] macally 0003:060B:0001.0028: unknown main item tag 0x0 [ 1266.067433][T20635] macally 0003:060B:0001.0028: item fetching failed at offset 4/5 [ 1266.092890][T20635] macally 0003:060B:0001.0028: probe with driver macally failed with error -22 [ 1266.122520][T21873] team0: Port device netdevsim0 removed [ 1266.130820][T21873] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1266.326626][T21861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1266.395860][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1266.403805][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 1266.416130][T20634] em28xx 5-1:0.0: Binding DVB extension [ 1266.424731][ T5280] usb 3-1: USB disconnect, device number 121 [ 1266.448440][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1266.503509][ T9] usb 5-1: USB disconnect, device number 15 [ 1266.556544][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 1266.641287][T21881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1266.694969][T20634] em28xx 5-1:0.0: Registering input extension [ 1266.723519][ T9] em28xx 5-1:0.0: Closing input extension [ 1266.781759][ T9] em28xx 5-1:0.0: Freeing device [ 1266.819379][ T5277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1266.997800][ T5277] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1267.016519][ T5277] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1267.044827][T21900] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1267.053526][T21900] PKCS7: Only support pkcs7_signedData type [ 1267.104492][ T5277] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1267.122962][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.138211][ T5277] usb 4-1: Product: syz [ 1267.142467][ T5277] usb 4-1: Manufacturer: syz [ 1267.147163][ T5277] usb 4-1: SerialNumber: syz [ 1267.156392][ T5277] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1267.201306][T21901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2933'. [ 1267.617115][ T52] usb 4-1: USB disconnect, device number 12 [ 1267.633920][T21907] netem: change failed [ 1268.006907][T21915] netlink: 'syz.0.2936': attribute type 27 has an invalid length. [ 1268.126090][ T5277] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1268.162904][T21915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.170337][T21915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.287737][ T5277] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1268.341725][ T5277] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1268.367484][ T5277] usb 5-1: config 0 has no interface number 0 [ 1268.385807][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1268.399700][ T5277] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1268.425209][ T5277] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1268.452223][ T5277] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1268.488169][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.527524][ T5277] usb 5-1: config 0 descriptor?? [ 1268.576317][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1268.670484][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1268.822356][ T5277] usb 5-1: USB disconnect, device number 16 [ 1268.824662][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.884810][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.954002][ T9] usb 1-1: Product: syz [ 1268.979576][ T9] usb 1-1: Manufacturer: syz [ 1268.991921][ T9] usb 1-1: SerialNumber: syz [ 1269.039830][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1269.111061][T21915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.126846][T21915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.673227][T21915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.693649][T21915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.725180][T21915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.734235][T21915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.000329][ T29] audit: type=1326 audit(1728499835.345:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.070423][T21918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.082386][T21918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.102371][T21918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1270.146097][ T52] usb 1-1: USB disconnect, device number 19 [ 1270.213602][ T29] audit: type=1326 audit(1728499835.345:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.305813][ T29] audit: type=1326 audit(1728499835.345:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.395879][ T29] audit: type=1326 audit(1728499835.345:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.419083][ T29] audit: type=1326 audit(1728499835.345:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.441673][ T29] audit: type=1326 audit(1728499835.345:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8637d74fa7 code=0x7ffc0000 [ 1270.465980][ T29] audit: type=1326 audit(1728499835.345:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8637d19959 code=0x7ffc0000 [ 1270.489364][ T29] audit: type=1326 audit(1728499835.345:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.516432][ T29] audit: type=1326 audit(1728499835.345:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8637d7dff9 code=0x7ffc0000 [ 1270.540078][ T29] audit: type=1326 audit(1728499835.345:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.4.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8637d74fa7 code=0x7ffc0000 [ 1271.007936][T21933] netlink: 'syz.1.2939': attribute type 10 has an invalid length. [ 1271.050897][T21933] batman_adv: batadv0: Adding interface: team0 [ 1271.077324][T21933] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.162998][T21933] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1271.194742][T21934] netlink: 'syz.1.2939': attribute type 10 has an invalid length. [ 1271.225884][T21934] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2939'. [ 1271.245953][T21934] team0: entered promiscuous mode [ 1271.251008][T21934] team_slave_0: entered promiscuous mode [ 1271.267366][T21934] team_slave_1: entered promiscuous mode [ 1271.280079][T21934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.287353][T21934] batman_adv: batadv0: Interface activated: team0 [ 1271.294236][T21934] batman_adv: batadv0: Interface deactivated: team0 [ 1271.307869][T21934] batman_adv: batadv0: Removing interface: team0 [ 1271.385415][T21934] bridge0: port 3(team0) entered blocking state [ 1271.394793][T21934] bridge0: port 3(team0) entered disabled state [ 1271.425361][T21934] team0: entered allmulticast mode [ 1271.456194][T21934] team_slave_0: entered allmulticast mode [ 1271.486334][T21934] team_slave_1: entered allmulticast mode [ 1271.995795][T15591] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1272.151128][T15591] usb 2-1: Using ep0 maxpacket: 8 [ 1272.161806][T15591] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1272.185870][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1272.220343][T15591] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.265968][T20635] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1272.275856][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.305171][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1272.315167][ T7974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.318030][T15591] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1272.458381][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1272.464295][T20635] usb 3-1: Using ep0 maxpacket: 8 [ 1272.506188][T20635] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1272.514693][T20635] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1272.524611][T15591] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.524647][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.621877][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1272.649760][T20635] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1272.685822][T20635] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 45600, setting to 1024 [ 1272.764614][ T7974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.775985][T15591] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1272.783631][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1272.795007][T15591] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1272.806919][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1272.812185][T20635] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1272.818042][T15591] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1272.839613][T20635] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1272.852993][T20635] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1272.862563][T20635] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.874012][T21962] netlink: 'syz.0.2950': attribute type 4 has an invalid length. [ 1272.885785][T15591] usb 2-1: string descriptor 0 read error: -22 [ 1272.892079][T15591] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1272.902483][T15591] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.955010][T21963] netlink: 'syz.0.2950': attribute type 4 has an invalid length. [ 1272.967881][T15591] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1273.001195][T15500] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1273.029931][T15500] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1273.039190][T15500] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1273.047242][T15500] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1273.055458][T15500] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1273.063236][T15500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1273.176222][T21962] netlink: 'syz.0.2950': attribute type 1 has an invalid length. [ 1273.182732][T20635] usb 3-1: GET_CAPABILITIES returned 0 [ 1273.189921][T20635] usbtmc 3-1:16.0: can't read capabilities [ 1273.240091][ T7974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.394370][T20635] usb 3-1: USB disconnect, device number 122 [ 1273.476531][ T7974] team0: Port device netdevsim0 removed [ 1273.527127][ T7974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.598259][T21970] syz.1.2944(21970): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1273.680567][T15591] usb 2-1: USB disconnect, device number 125 [ 1273.692580][T21968] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 1273.943311][T21967] chnl_net:caif_netlink_parms(): no params data found [ 1273.950706][T21980] xt_connbytes: Forcing CT accounting to be enabled [ 1273.994141][T21980] xt_NFQUEUE: number of total queues is 0 [ 1274.126208][ T7974] bridge_slave_1: left allmulticast mode [ 1274.147025][ T7974] bridge_slave_1: left promiscuous mode [ 1274.197739][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.226309][ T7974] bridge_slave_0: left allmulticast mode [ 1274.231999][ T7974] bridge_slave_0: left promiscuous mode [ 1274.243130][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.846056][T22011] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1274.872673][T22011] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm [ 1275.139305][T20668] Bluetooth: hci0: command tx timeout [ 1275.530996][ T7974] team0: Port device bond0 removed [ 1275.552816][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.566775][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.588667][ T7974] bond0 (unregistering): Released all slaves [ 1276.034575][T21967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.064299][T21967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.092937][T21967] bridge_slave_0: entered allmulticast mode [ 1276.107217][T21967] bridge_slave_0: entered promiscuous mode [ 1276.187162][ T7974] hsr_slave_0: left promiscuous mode [ 1276.201797][ T7974] hsr_slave_1: left promiscuous mode [ 1276.221971][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.244197][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.260587][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.274812][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.338660][ T7974] veth1_macvtap: left promiscuous mode [ 1276.359309][ T7974] veth0_macvtap: left promiscuous mode [ 1276.379985][ T7974] veth1_vlan: left promiscuous mode [ 1276.403761][ T7974] veth0_vlan: left promiscuous mode [ 1277.091317][T22037] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1277.216453][T20668] Bluetooth: hci0: command tx timeout [ 1277.915157][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1278.035428][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1278.045792][ T5280] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1278.215821][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 1278.226807][ T5280] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1278.236018][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.244062][ T5280] usb 2-1: Product: syz [ 1278.248837][ T5280] usb 2-1: Manufacturer: syz [ 1278.253993][ T5280] usb 2-1: SerialNumber: syz [ 1278.266891][ T5280] usb 2-1: config 0 descriptor?? [ 1278.492200][ T5280] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1278.793385][T21967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.793495][T21967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.793689][T21967] bridge_slave_1: entered allmulticast mode [ 1278.795116][T21967] bridge_slave_1: entered promiscuous mode [ 1278.972238][T21967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.001123][T21967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.163609][T21967] team0: Port device team_slave_0 added [ 1279.178438][T21967] team0: Port device team_slave_1 added [ 1279.296545][T20668] Bluetooth: hci0: command tx timeout [ 1279.359597][T21967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.368793][ T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1279.400579][T21967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.429673][T21967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.507410][T21967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.524968][T21967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.551100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.564424][T21967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.578348][ T52] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 1279.587991][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.609136][ T52] usb 5-1: config 0 descriptor?? [ 1279.670189][ T52] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input76 [ 1279.841526][T21967] hsr_slave_0: entered promiscuous mode [ 1279.886533][T21967] hsr_slave_1: entered promiscuous mode [ 1280.377829][T15500] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1280.396399][ T4670] bcm5974 5-1:0.0: could not read from device [ 1280.402735][T15500] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1280.486187][T15500] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1280.510469][T15500] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1280.519864][T15500] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1280.532354][T15500] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1280.650228][ T4670] bcm5974 5-1:0.0: could not read from device [ 1280.682557][ T4670] bcm5974 5-1:0.0: could not read from device [ 1280.682888][ T52] usb 5-1: USB disconnect, device number 17 [ 1280.747769][T22053] udevd[22053]: Error opening device "/dev/input/event4": No such file or directory [ 1280.782332][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1280.797003][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1280.826033][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1280.849781][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1281.384099][T20668] Bluetooth: hci0: command tx timeout [ 1281.532196][ T5280] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1281.553771][ T5280] usb 2-1: USB disconnect, device number 126 [ 1281.757988][ T7974] bond0: (slave netdevsim0): Releasing backup interface [ 1281.958839][T22087] team_slave_0: entered promiscuous mode [ 1281.964606][T22087] team_slave_1: entered promiscuous mode [ 1281.976713][T22089] netlink: 'syz.4.2970': attribute type 10 has an invalid length. [ 1282.001541][T22089] team_slave_0: left promiscuous mode [ 1282.009465][T22089] team_slave_1: left promiscuous mode [ 1282.025234][T22089] team_slave_0: entered promiscuous mode [ 1282.031009][T22089] team_slave_1: entered promiscuous mode [ 1282.037939][T22089] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.046997][T22089] bond0: (slave team0): Enslaving as an active interface with an up link [ 1282.342707][T22084] team_slave_0: left promiscuous mode [ 1282.348692][T22084] team_slave_1: left promiscuous mode [ 1282.477186][T21967] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1282.515103][T22075] chnl_net:caif_netlink_parms(): no params data found [ 1282.587165][T20668] Bluetooth: hci4: command tx timeout [ 1282.624452][T21967] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1282.679538][T21967] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1282.769942][T21967] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1282.826047][T15591] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1282.887839][ T7974] bridge_slave_1: left allmulticast mode [ 1282.893554][ T7974] bridge_slave_1: left promiscuous mode [ 1282.918814][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.945073][ T7974] bridge_slave_0: left allmulticast mode [ 1282.952997][ T7974] bridge_slave_0: left promiscuous mode [ 1282.959020][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.995961][T15591] usb 5-1: Using ep0 maxpacket: 32 [ 1283.012541][T15591] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.055247][T15591] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1283.084883][T15591] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1283.164345][T15591] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1283.173848][T15591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.190847][T15591] usb 5-1: Product: syz [ 1283.195231][T15591] usb 5-1: Manufacturer: syz [ 1283.200097][T15591] usb 5-1: SerialNumber: syz [ 1283.210252][T15591] cdc_ncm 5-1:1.0: skipping garbage [ 1283.215782][T15591] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1283.224945][T15591] cdc_ncm 5-1:1.0: bind() failure [ 1284.194221][T22144] netlink: 'syz.1.2975': attribute type 1 has an invalid length. [ 1284.475944][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.490631][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.520688][ T7974] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1284.549243][ T7974] bond0 (unregistering): Released all slaves [ 1284.604842][T22139] netlink: 'syz.1.2975': attribute type 4 has an invalid length. [ 1284.666070][T20668] Bluetooth: hci4: command tx timeout [ 1284.673519][T22143] netlink: 'syz.1.2975': attribute type 4 has an invalid length. [ 1284.704779][T22148] ɶƣ0G0w: entered promiscuous mode [ 1285.126156][T20634] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1285.138345][T22075] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.145594][T22075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.167176][T22075] bridge_slave_0: entered allmulticast mode [ 1285.196540][T22075] bridge_slave_0: entered promiscuous mode [ 1285.228202][T22075] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.235360][T22075] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.258221][T22075] bridge_slave_1: entered allmulticast mode [ 1285.275818][ T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1285.312525][T22075] bridge_slave_1: entered promiscuous mode [ 1285.333991][T20634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.416518][T20634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.436015][T20634] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1285.447718][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 1285.462150][T22075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.475773][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.496415][T20634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.536903][ T9] usb 2-1: config 0 descriptor?? [ 1285.549403][T20634] usb 3-1: config 0 descriptor?? [ 1285.577711][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input77 [ 1285.808291][T22165] [ 1285.810665][T22165] ===================================================== [ 1285.817600][T22165] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1285.825058][T22165] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted [ 1285.832169][T22165] ----------------------------------------------------- [ 1285.839103][T22165] syz.1.2978/22165 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1285.846831][T22165] ffff8880233abde0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 1285.855576][T22165] [ 1285.855576][T22165] and this task is already holding: [ 1285.862946][T22165] ffff888060641028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1285.872714][T22165] which would create a new lock dependency: [ 1285.878615][T22165] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 1285.886746][T22165] [ 1285.886746][T22165] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1285.896199][T22165] (&dev->event_lock#2){..-.}-{2:2} [ 1285.896238][T22165] [ 1285.896238][T22165] ... which became SOFTIRQ-irq-safe at: [ 1285.909123][T22165] lock_acquire+0x1ed/0x550 [ 1285.913734][T22165] _raw_spin_lock_irqsave+0xd5/0x120 [ 1285.919141][T22165] input_inject_event+0xc5/0x340 [ 1285.924200][T22165] led_trigger_event+0x138/0x210 [ 1285.929235][T22165] kbd_bh+0x1b5/0x290 [ 1285.933315][T22165] tasklet_action_common+0x321/0x4d0 [ 1285.938703][T22165] handle_softirqs+0x2c5/0x980 [ 1285.943564][T22165] run_ksoftirqd+0xca/0x130 [ 1285.948166][T22165] smpboot_thread_fn+0x544/0xa30 [ 1285.953204][T22165] kthread+0x2f0/0x390 [ 1285.957366][T22165] ret_from_fork+0x4b/0x80 [ 1285.961892][T22165] ret_from_fork_asm+0x1a/0x30 [ 1285.966755][T22165] [ 1285.966755][T22165] to a SOFTIRQ-irq-unsafe lock: [ 1285.973774][T22165] (tasklist_lock){.+.+}-{2:2} [ 1285.973808][T22165] [ 1285.973808][T22165] ... which became SOFTIRQ-irq-unsafe at: [ 1285.986443][T22165] ... [ 1285.986452][T22165] lock_acquire+0x1ed/0x550 [ 1285.993633][T22165] _raw_read_lock+0x36/0x50 [ 1285.998238][T22165] __do_wait+0x12d/0x850 [ 1286.002571][T22165] do_wait+0x1e9/0x560 [ 1286.006741][T22165] kernel_wait+0xe9/0x240 [ 1286.011168][T22165] call_usermodehelper_exec_work+0xbd/0x230 [ 1286.017162][T22165] process_scheduled_works+0xa63/0x1850 [ 1286.022811][T22165] worker_thread+0x870/0xd30 [ 1286.027504][T22165] kthread+0x2f0/0x390 [ 1286.031674][T22165] ret_from_fork+0x4b/0x80 [ 1286.036192][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.041058][T22165] [ 1286.041058][T22165] other info that might help us debug this: [ 1286.041058][T22165] [ 1286.051303][T22165] Chain exists of: [ 1286.051303][T22165] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1286.051303][T22165] [ 1286.064898][T22165] Possible interrupt unsafe locking scenario: [ 1286.064898][T22165] [ 1286.073226][T22165] CPU0 CPU1 [ 1286.078592][T22165] ---- ---- [ 1286.083958][T22165] lock(tasklist_lock); [ 1286.088217][T22165] local_irq_disable(); [ 1286.094969][T22165] lock(&dev->event_lock#2); [ 1286.102183][T22165] lock(&client->buffer_lock); [ 1286.109577][T22165] [ 1286.113029][T22165] lock(&dev->event_lock#2); [ 1286.117900][T22165] [ 1286.117900][T22165] *** DEADLOCK *** [ 1286.117900][T22165] [ 1286.126044][T22165] 7 locks held by syz.1.2978/22165: [ 1286.131245][T22165] #0: ffff888146783110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 1286.140417][T22165] #1: ffff8881472f6230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 1286.150552][T22165] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 1286.160238][T22165] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 1286.169857][T22165] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 1286.179024][T22165] #5: ffff888060641028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1286.189246][T22165] #6: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 1286.198337][T22165] [ 1286.198337][T22165] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1286.208749][T22165] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1286.214419][T22165] IN-SOFTIRQ-W at: [ 1286.218490][T22165] lock_acquire+0x1ed/0x550 [ 1286.224837][T22165] _raw_spin_lock_irqsave+0xd5/0x120 [ 1286.231957][T22165] input_inject_event+0xc5/0x340 [ 1286.238732][T22165] led_trigger_event+0x138/0x210 [ 1286.245501][T22165] kbd_bh+0x1b5/0x290 [ 1286.251319][T22165] tasklet_action_common+0x321/0x4d0 [ 1286.258447][T22165] handle_softirqs+0x2c5/0x980 [ 1286.265053][T22165] run_ksoftirqd+0xca/0x130 [ 1286.271398][T22165] smpboot_thread_fn+0x544/0xa30 [ 1286.278171][T22165] kthread+0x2f0/0x390 [ 1286.284072][T22165] ret_from_fork+0x4b/0x80 [ 1286.290329][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.296934][T22165] INITIAL USE at: [ 1286.300921][T22165] lock_acquire+0x1ed/0x550 [ 1286.307175][T22165] _raw_spin_lock_irqsave+0xd5/0x120 [ 1286.314206][T22165] input_inject_event+0xc5/0x340 [ 1286.320901][T22165] kbd_led_trigger_activate+0xb8/0x100 [ 1286.328112][T22165] led_trigger_set+0x582/0x9c0 [ 1286.334622][T22165] led_trigger_set_default+0x229/0x260 [ 1286.341830][T22165] led_classdev_register_ext+0x6e6/0x8a0 [ 1286.349212][T22165] input_leds_connect+0x489/0x630 [ 1286.355994][T22165] input_register_device+0xd3b/0x1110 [ 1286.363135][T22165] atkbd_connect+0x752/0xa00 [ 1286.369473][T22165] serio_driver_probe+0x7f/0xa0 [ 1286.376081][T22165] really_probe+0x2b8/0xad0 [ 1286.382331][T22165] __driver_probe_device+0x1a2/0x390 [ 1286.389369][T22165] driver_probe_device+0x50/0x430 [ 1286.396144][T22165] __driver_attach+0x45f/0x710 [ 1286.402659][T22165] bus_for_each_dev+0x239/0x2b0 [ 1286.409264][T22165] serio_handle_event+0x1c7/0x920 [ 1286.416034][T22165] process_scheduled_works+0xa63/0x1850 [ 1286.423332][T22165] worker_thread+0x870/0xd30 [ 1286.429677][T22165] kthread+0x2f0/0x390 [ 1286.435492][T22165] ret_from_fork+0x4b/0x80 [ 1286.441668][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.448188][T22165] } [ 1286.450778][T22165] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1286.459906][T22165] -> (&client->buffer_lock){....}-{2:2} { [ 1286.465662][T22165] INITIAL USE at: [ 1286.469574][T22165] lock_acquire+0x1ed/0x550 [ 1286.475661][T22165] _raw_spin_lock_irq+0xd3/0x120 [ 1286.482183][T22165] evdev_read+0x535/0xe00 [ 1286.488084][T22165] vfs_readv+0x6bc/0xa80 [ 1286.493901][T22165] do_readv+0x1b1/0x350 [ 1286.499633][T22165] do_syscall_64+0xf3/0x230 [ 1286.505707][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.513179][T22165] } [ 1286.515690][T22165] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 1286.523858][T22165] ... acquired at: [ 1286.527663][T22165] lock_acquire+0x1ed/0x550 [ 1286.532360][T22165] _raw_spin_lock+0x2e/0x40 [ 1286.537055][T22165] evdev_handle_get_val+0x67/0x820 [ 1286.542344][T22165] evdev_ioctl_handler+0x1359/0x21a0 [ 1286.547805][T22165] __se_sys_ioctl+0xf9/0x170 [ 1286.552581][T22165] do_syscall_64+0xf3/0x230 [ 1286.557265][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.563345][T22165] [ 1286.565673][T22165] [ 1286.565673][T22165] the dependencies between the lock to be acquired [ 1286.565686][T22165] and SOFTIRQ-irq-unsafe lock: [ 1286.579208][T22165] -> (tasklist_lock){.+.+}-{2:2} { [ 1286.584531][T22165] HARDIRQ-ON-R at: [ 1286.588690][T22165] lock_acquire+0x1ed/0x550 [ 1286.595204][T22165] _raw_read_lock+0x36/0x50 [ 1286.601725][T22165] __do_wait+0x12d/0x850 [ 1286.607969][T22165] do_wait+0x1e9/0x560 [ 1286.614047][T22165] kernel_wait+0xe9/0x240 [ 1286.620384][T22165] call_usermodehelper_exec_work+0xbd/0x230 [ 1286.628294][T22165] process_scheduled_works+0xa63/0x1850 [ 1286.635852][T22165] worker_thread+0x870/0xd30 [ 1286.642456][T22165] kthread+0x2f0/0x390 [ 1286.648526][T22165] ret_from_fork+0x4b/0x80 [ 1286.654952][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.661733][T22165] SOFTIRQ-ON-R at: [ 1286.665897][T22165] lock_acquire+0x1ed/0x550 [ 1286.672411][T22165] _raw_read_lock+0x36/0x50 [ 1286.678933][T22165] __do_wait+0x12d/0x850 [ 1286.685185][T22165] do_wait+0x1e9/0x560 [ 1286.691271][T22165] kernel_wait+0xe9/0x240 [ 1286.697621][T22165] call_usermodehelper_exec_work+0xbd/0x230 [ 1286.705524][T22165] process_scheduled_works+0xa63/0x1850 [ 1286.713079][T22165] worker_thread+0x870/0xd30 [ 1286.719675][T22165] kthread+0x2f0/0x390 [ 1286.725755][T22165] ret_from_fork+0x4b/0x80 [ 1286.732185][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.738985][T22165] INITIAL USE at: [ 1286.743067][T22165] lock_acquire+0x1ed/0x550 [ 1286.749508][T22165] _raw_write_lock_irq+0xd3/0x120 [ 1286.756466][T22165] copy_process+0x2267/0x3d50 [ 1286.763075][T22165] kernel_clone+0x226/0x8f0 [ 1286.769503][T22165] user_mode_thread+0x132/0x1a0 [ 1286.776286][T22165] rest_init+0x23/0x300 [ 1286.782365][T22165] start_kernel+0x47f/0x500 [ 1286.788788][T22165] x86_64_start_reservations+0x2a/0x30 [ 1286.796188][T22165] x86_64_start_kernel+0x9f/0xa0 [ 1286.803094][T22165] common_startup_64+0x13e/0x147 [ 1286.809985][T22165] INITIAL READ USE at: [ 1286.814503][T22165] lock_acquire+0x1ed/0x550 [ 1286.821391][T22165] _raw_read_lock+0x36/0x50 [ 1286.828262][T22165] __do_wait+0x12d/0x850 [ 1286.834864][T22165] do_wait+0x1e9/0x560 [ 1286.841296][T22165] kernel_wait+0xe9/0x240 [ 1286.847988][T22165] call_usermodehelper_exec_work+0xbd/0x230 [ 1286.856236][T22165] process_scheduled_works+0xa63/0x1850 [ 1286.864148][T22165] worker_thread+0x870/0xd30 [ 1286.871099][T22165] kthread+0x2f0/0x390 [ 1286.877520][T22165] ret_from_fork+0x4b/0x80 [ 1286.884297][T22165] ret_from_fork_asm+0x1a/0x30 [ 1286.891436][T22165] } [ 1286.894110][T22165] ... key at: [] tasklist_lock+0x18/0x40 [ 1286.902018][T22165] ... acquired at: [ 1286.906018][T22165] lock_acquire+0x1ed/0x550 [ 1286.910716][T22165] _raw_read_lock+0x36/0x50 [ 1286.915408][T22165] send_sigio+0x108/0x390 [ 1286.919924][T22165] kill_fasync+0x256/0x4f0 [ 1286.924529][T22165] lease_break_callback+0x26/0x30 [ 1286.929746][T22165] __break_lease+0x6d5/0x1820 [ 1286.934607][T22165] do_dentry_open+0x8d4/0x1460 [ 1286.939556][T22165] vfs_open+0x3e/0x330 [ 1286.943809][T22165] path_openat+0x2c84/0x3590 [ 1286.948590][T22165] do_filp_open+0x235/0x490 [ 1286.953286][T22165] do_sys_openat2+0x13e/0x1d0 [ 1286.958154][T22165] __x64_sys_openat+0x247/0x2a0 [ 1286.963193][T22165] do_syscall_64+0xf3/0x230 [ 1286.967881][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.973970][T22165] [ 1286.976303][T22165] -> (&f_owner->lock){....}-{2:2} { [ 1286.981627][T22165] INITIAL USE at: [ 1286.985615][T22165] lock_acquire+0x1ed/0x550 [ 1286.991884][T22165] _raw_write_lock_irq+0xd3/0x120 [ 1286.998669][T22165] __f_setown+0x6b/0x380 [ 1287.004698][T22165] generic_setlease+0xc74/0x1550 [ 1287.011391][T22165] fcntl_setlease+0x404/0x540 [ 1287.017817][T22165] do_fcntl+0x69d/0x1a60 [ 1287.023814][T22165] __se_sys_fcntl+0xd2/0x1e0 [ 1287.030155][T22165] do_syscall_64+0xf3/0x230 [ 1287.036405][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.044055][T22165] INITIAL READ USE at: [ 1287.048475][T22165] lock_acquire+0x1ed/0x550 [ 1287.055166][T22165] _raw_read_lock_irqsave+0xdd/0x130 [ 1287.062641][T22165] send_sigio+0x37/0x390 [ 1287.069069][T22165] kill_fasync+0x256/0x4f0 [ 1287.075675][T22165] lease_break_callback+0x26/0x30 [ 1287.082884][T22165] __break_lease+0x6d5/0x1820 [ 1287.089763][T22165] vfs_truncate+0x26b/0x3b0 [ 1287.096446][T22165] do_sys_truncate+0xdb/0x190 [ 1287.103301][T22165] do_syscall_64+0xf3/0x230 [ 1287.109981][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.118065][T22165] } [ 1287.120653][T22165] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1287.129601][T22165] ... acquired at: [ 1287.133495][T22165] lock_acquire+0x1ed/0x550 [ 1287.138184][T22165] _raw_read_lock_irqsave+0xdd/0x130 [ 1287.143657][T22165] send_sigio+0x37/0x390 [ 1287.148085][T22165] kill_fasync+0x256/0x4f0 [ 1287.152684][T22165] lease_break_callback+0x26/0x30 [ 1287.157896][T22165] __break_lease+0x6d5/0x1820 [ 1287.162754][T22165] vfs_truncate+0x26b/0x3b0 [ 1287.167434][T22165] do_sys_truncate+0xdb/0x190 [ 1287.172285][T22165] do_syscall_64+0xf3/0x230 [ 1287.176981][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.183096][T22165] [ 1287.185430][T22165] -> (&new->fa_lock){....}-{2:2} { [ 1287.190588][T22165] INITIAL USE at: [ 1287.194502][T22165] lock_acquire+0x1ed/0x550 [ 1287.200599][T22165] _raw_write_lock_irq+0xd3/0x120 [ 1287.207234][T22165] fasync_remove_entry+0xff/0x1d0 [ 1287.213840][T22165] sock_fasync+0x87/0x100 [ 1287.219754][T22165] __fput+0x71b/0x880 [ 1287.225316][T22165] task_work_run+0x24f/0x310 [ 1287.231486][T22165] get_signal+0x15e8/0x1740 [ 1287.237563][T22165] arch_do_signal_or_restart+0x96/0x860 [ 1287.244682][T22165] syscall_exit_to_user_mode+0xc9/0x370 [ 1287.251811][T22165] do_syscall_64+0x100/0x230 [ 1287.257973][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.265454][T22165] INITIAL READ USE at: [ 1287.269795][T22165] lock_acquire+0x1ed/0x550 [ 1287.276313][T22165] _raw_read_lock_irqsave+0xdd/0x130 [ 1287.283622][T22165] kill_fasync+0x199/0x4f0 [ 1287.290062][T22165] sock_wake_async+0x147/0x170 [ 1287.296851][T22165] unix_write_space+0x3c0/0x470 [ 1287.303716][T22165] sock_wfree+0x1dd/0x7b0 [ 1287.310093][T22165] unix_destruct_scm+0x1c6/0x210 [ 1287.317086][T22165] skb_release_head_state+0x100/0x250 [ 1287.324500][T22165] sk_skb_reason_drop+0x194/0x380 [ 1287.331556][T22165] unix_dgram_sendmsg+0x824/0x1f80 [ 1287.338684][T22165] __sock_sendmsg+0x221/0x270 [ 1287.345385][T22165] ____sys_sendmsg+0x52a/0x7e0 [ 1287.352159][T22165] __sys_sendmmsg+0x3ab/0x730 [ 1287.358852][T22165] __x64_sys_sendmmsg+0xa0/0xb0 [ 1287.365730][T22165] do_syscall_64+0xf3/0x230 [ 1287.372242][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.380163][T22165] } [ 1287.382666][T22165] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1287.391352][T22165] ... acquired at: [ 1287.395168][T22165] lock_acquire+0x1ed/0x550 [ 1287.399893][T22165] _raw_read_lock_irqsave+0xdd/0x130 [ 1287.405371][T22165] kill_fasync+0x199/0x4f0 [ 1287.409990][T22165] evdev_pass_values+0x58a/0xad0 [ 1287.415108][T22165] evdev_events+0x1c2/0x300 [ 1287.419799][T22165] input_pass_values+0x286/0x860 [ 1287.424930][T22165] input_event_dispose+0x30f/0x600 [ 1287.430233][T22165] input_handle_event+0xa71/0xbe0 [ 1287.435443][T22165] input_inject_event+0x22f/0x340 [ 1287.440658][T22165] evdev_write+0x5fd/0x790 [ 1287.445253][T22165] vfs_write+0x29c/0xc90 [ 1287.449677][T22165] ksys_write+0x183/0x2b0 [ 1287.454193][T22165] do_syscall_64+0xf3/0x230 [ 1287.458879][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.464961][T22165] [ 1287.467305][T22165] [ 1287.467305][T22165] stack backtrace: [ 1287.473196][T22165] CPU: 1 UID: 0 PID: 22165 Comm: syz.1.2978 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 1287.483965][T22165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1287.494910][T22165] Call Trace: [ 1287.498201][T22165] [ 1287.501153][T22165] dump_stack_lvl+0x241/0x360 [ 1287.505847][T22165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1287.511059][T22165] ? __pfx__printk+0x10/0x10 [ 1287.515677][T22165] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1287.522033][T22165] validate_chain+0x4ebd/0x5920 [ 1287.526908][T22165] ? __pfx_validate_chain+0x10/0x10 [ 1287.532124][T22165] ? __pfx_validate_chain+0x10/0x10 [ 1287.537338][T22165] ? register_lock_class+0x102/0x980 [ 1287.542649][T22165] ? __pfx_register_lock_class+0x10/0x10 [ 1287.548310][T22165] ? queue_work_on+0x246/0x380 [ 1287.553099][T22165] ? mark_lock+0x9a/0x360 [ 1287.557445][T22165] __lock_acquire+0x1384/0x2050 [ 1287.562320][T22165] lock_acquire+0x1ed/0x550 [ 1287.566848][T22165] ? kill_fasync+0x199/0x4f0 [ 1287.571637][T22165] ? __pfx_lock_acquire+0x10/0x10 [ 1287.576693][T22165] ? __pfx_lock_acquire+0x10/0x10 [ 1287.581745][T22165] _raw_read_lock_irqsave+0xdd/0x130 [ 1287.587069][T22165] ? kill_fasync+0x199/0x4f0 [ 1287.591689][T22165] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1287.597609][T22165] ? do_raw_spin_lock+0x14f/0x370 [ 1287.602684][T22165] kill_fasync+0x199/0x4f0 [ 1287.607142][T22165] ? kill_fasync+0x54/0x4f0 [ 1287.611692][T22165] evdev_pass_values+0x58a/0xad0 [ 1287.616652][T22165] ? evdev_pass_values+0x581/0xad0 [ 1287.621781][T22165] evdev_events+0x1c2/0x300 [ 1287.626298][T22165] ? evdev_events+0x6f/0x300 [ 1287.631005][T22165] input_pass_values+0x286/0x860 [ 1287.636070][T22165] ? input_pass_values+0x8f/0x860 [ 1287.641217][T22165] input_event_dispose+0x30f/0x600 [ 1287.646353][T22165] input_handle_event+0xa71/0xbe0 [ 1287.651406][T22165] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1287.656885][T22165] ? __pfx_input_handle_event+0x10/0x10 [ 1287.662457][T22165] input_inject_event+0x22f/0x340 [ 1287.667525][T22165] ? input_inject_event+0xd6/0x340 [ 1287.672651][T22165] evdev_write+0x5fd/0x790 [ 1287.677082][T22165] ? __pfx_evdev_write+0x10/0x10 [ 1287.682035][T22165] ? bpf_lsm_file_permission+0x9/0x10 [ 1287.687422][T22165] ? security_file_permission+0x74/0x280 [ 1287.693079][T22165] ? rw_verify_area+0x1c3/0x6f0 [ 1287.697957][T22165] ? __pfx_evdev_write+0x10/0x10 [ 1287.702902][T22165] vfs_write+0x29c/0xc90 [ 1287.707153][T22165] ? kmem_cache_free+0x1a2/0x420 [ 1287.712114][T22165] ? __pfx_vfs_write+0x10/0x10 [ 1287.716898][T22165] ? __fget_files+0x29/0x470 [ 1287.721500][T22165] ? __fget_files+0x3f3/0x470 [ 1287.726198][T22165] ? __fget_files+0x29/0x470 [ 1287.730809][T22165] ? fdget_pos+0x19a/0x320 [ 1287.735245][T22165] ksys_write+0x183/0x2b0 [ 1287.739627][T22165] ? __pfx_ksys_write+0x10/0x10 [ 1287.744483][T22165] ? do_syscall_64+0x100/0x230 [ 1287.749261][T22165] ? do_syscall_64+0xb6/0x230 [ 1287.753949][T22165] do_syscall_64+0xf3/0x230 [ 1287.758471][T22165] ? clear_bhb_loop+0x35/0x90 [ 1287.763251][T22165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.769175][T22165] RIP: 0033:0x7f16eb77dff9 [ 1287.773606][T22165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.793244][T22165] RSP: 002b:00007f16ec5f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1287.801678][T22165] RAX: ffffffffffffffda RBX: 00007f16eb935f80 RCX: 00007f16eb77dff9 [ 1287.809662][T22165] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000009 [ 1287.817656][T22165] RBP: 00007f16eb7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1287.825656][T22165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.833837][T22165] R13: 0000000000000000 R14: 00007f16eb935f80 R15: 00007f16eba5fa28 [ 1287.841833][T22165] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1287.915722][T20668] Bluetooth: hci4: command tx timeout [ 1287.945803][T20634] usbhid 3-1:0.0: can't add hid device: -71 [ 1287.950613][T22075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.951854][T20634] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1288.073056][T20634] usb 3-1: USB disconnect, device number 123 [ 1288.203055][T20635] usb 5-1: USB disconnect, device number 18 [ 1288.373746][ T7974] macvlan0: left promiscuous mode [ 1288.414160][ T7974] batadv_slave_0: left promiscuous mode [ 1288.469412][ T7974] hsr_slave_0: left promiscuous mode [ 1288.475404][ T7974] hsr_slave_1: left promiscuous mode [ 1288.485565][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.527972][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.085230][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1289.143483][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1289.800755][ T4670] bcm5974 2-1:0.0: could not read from device [ 1289.804569][ T52] usb 2-1: USB disconnect, device number 127 [ 1289.818180][ T4670] bcm5974: mode switch failed [ 1289.829389][T22053] bcm5974 2-1:0.0: could not read from device [ 1289.835502][T22053] bcm5974: mode switch failed [ 1289.852659][T22053] udevd[22053]: Error opening device "/dev/input/event4": No such device [ 1289.885765][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.894341][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.930943][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.956065][T22053] udevd[22053]: Unable to EVIOCGABS device "/dev/input/event4" [ 1289.986619][T22053] udevd[22053]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 1290.011922][ T4685] udevd[4685]: worker [22053] terminated by signal 6 (Aborted) [ 1290.026753][ T4685] udevd[4685]: worker [22053] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input77/event4' [ 1290.569000][ T7974] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.702321][ T7974] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.752525][ T7974] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.828969][ T7974] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.233088][ T7974] bridge_slave_1: left allmulticast mode [ 1291.244513][ T7974] bridge_slave_1: left promiscuous mode [ 1291.250527][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.262931][ T7974] bridge_slave_0: left allmulticast mode [ 1291.268687][ T7974] bridge_slave_0: left promiscuous mode [ 1291.274380][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.288439][ T7974] bridge_slave_1: left allmulticast mode [ 1291.294118][ T7974] bridge_slave_1: left promiscuous mode [ 1291.300946][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.310787][ T7974] bridge_slave_0: left allmulticast mode [ 1291.316673][ T7974] bridge_slave_0: left promiscuous mode [ 1291.322332][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.331232][ T7974] team0: left allmulticast mode [ 1291.336291][ T7974] team_slave_0: left allmulticast mode [ 1291.341760][ T7974] team_slave_1: left allmulticast mode [ 1291.348806][ T7974] bridge0: port 3(team0) entered disabled state [ 1291.356850][ T7974] bridge_slave_1: left allmulticast mode [ 1291.362506][ T7974] bridge_slave_1: left promiscuous mode [ 1291.368449][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.378688][ T7974] bridge_slave_0: left allmulticast mode [ 1291.384776][ T7974] bridge_slave_0: left promiscuous mode [ 1291.390719][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.399506][ T7974] bridge_slave_1: left allmulticast mode [ 1291.405147][ T7974] bridge_slave_1: left promiscuous mode [ 1291.410898][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.419280][ T7974] bridge_slave_0: left allmulticast mode [ 1291.424922][ T7974] bridge_slave_0: left promiscuous mode [ 1291.431200][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.939580][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.950284][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.960799][ T7974] bond0 (unregistering): Released all slaves [ 1291.973640][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.985222][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.998580][ T7974] bond0 (unregistering): Released all slaves [ 1292.154356][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.164178][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.173627][ T7974] bond0 (unregistering): Released all slaves [ 1292.183116][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.193199][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.204031][ T7974] bond0 (unregistering): Released all slaves [ 1292.300149][ T7974] tipc: Disabling bearer [ 1292.315883][ T7974] tipc: Left network mode [ 1292.649638][ T7974] hsr_slave_0: left promiscuous mode [ 1292.655437][ T7974] hsr_slave_1: left promiscuous mode [ 1292.662444][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.670317][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.682588][ T7974] hsr_slave_0: left promiscuous mode [ 1292.689309][ T7974] hsr_slave_1: left promiscuous mode [ 1292.695068][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.703040][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.711277][ T7974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.719347][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.730406][ T7974] hsr_slave_0: left promiscuous mode [ 1292.736305][ T7974] hsr_slave_1: left promiscuous mode [ 1292.742092][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.750189][ T7974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.761166][ T7974] veth1_macvtap: left promiscuous mode [ 1292.767299][ T7974] veth0_macvtap: left promiscuous mode [ 1292.772902][ T7974] veth1_vlan: left promiscuous mode [ 1292.778549][ T7974] veth0_vlan: left promiscuous mode [ 1292.948026][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1292.979571][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1293.207576][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1293.244229][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1293.744149][ T7974] team_slave_1 (unregistering): left promiscuous mode [ 1293.752000][ T7974] team0 (unregistering): Port device team_slave_1 removed [ 1293.799386][ T7974] team_slave_0 (unregistering): left promiscuous mode [ 1293.806844][ T7974] team0 (unregistering): Port device team_slave_0 removed [ 1295.242497][ T7974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.266924][ T7974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.321762][ T7974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.387733][ T7974] bond0: (slave netdevsim0): Releasing backup interface [ 1295.397263][ T7974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.501474][ T7974] bridge_slave_1: left allmulticast mode [ 1295.507874][ T7974] bridge_slave_1: left promiscuous mode [ 1295.513595][ T7974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.523449][ T7974] bridge_slave_0: left allmulticast mode [ 1295.529364][ T7974] bridge_slave_0: left promiscuous mode [ 1295.535065][ T7974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.633322][ T7974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.645552][ T7974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.657130][ T7974] bond0 (unregistering): (slave team0): Releasing backup interface [ 1295.667733][ T7974] bond0 (unregistering): Released all slaves [ 1295.721811][ T7974] ɶƣ0G0w: left promiscuous mode