last executing test programs: 23m21.190918885s ago: executing program 4 (id=682): syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54010000100001002bbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008200200140003006e657464657673696d300000000000000c011680980001800c00070006000000030000000c000700bafbffff07000000280001"], 0x154}}, 0x0) exit(0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 23m20.285585818s ago: executing program 4 (id=685): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) 23m18.727780397s ago: executing program 4 (id=689): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) getdents(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @random="9fd7e57ba054", @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x0, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @multicast, @private1, @empty, @local}}}}, &(0x7f00000007c0)={0x0, 0x4, [0xb5, 0x2bd, 0x88f, 0x32a]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_usb_control_io(0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000006c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="2015540000006adb82160939ee38a7a71115941c0018c329fc993bbbd0f0f74059cfdfc79c8bb27c35a3cd3c082c7591f69a1af03c0796f6a956a773d7713742f9dd88ae2056045e2fe627e5753e6df087dbabda96413b53a27d"], &(0x7f0000000180)={0x0, 0xa, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x58}, &(0x7f0000000200)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000240)={0x20, 0x0, 0x4, {0x1a0, 0x20}}, &(0x7f00000002c0)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000003c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000400)={0x40, 0xb, 0x2, "f483"}, &(0x7f0000000440)={0x40, 0xf, 0x2, 0xff}, &(0x7f0000000480)={0x40, 0x13, 0x6, @broadcast}, &(0x7f00000004c0)={0x40, 0x17, 0x6}, &(0x7f0000000500)={0x40, 0x19, 0x2, "b001"}, &(0x7f0000000540)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000580)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000040)={0x1, 0x0, [{0xd, 0x1, 0x1, 0xfffffff7, 0x3, 0x0, 0x7}]}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000300)=""/161) 23m15.535181921s ago: executing program 4 (id=697): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x4, 0x9c, {0x9c, 0x21, "7de72d93a970f1837275f05f5523ebab54309091d9fd3ad281fdea1fb687bf9b2de33de228fb7598c942d7ad3420dc4df47924d8bf87f98bec63f7273f891eab2442540d94d34f81262606167994c5049d6325cb0ad8c3331b19c050c2e0bd4e701afbf08adc95b7655507283f32b092173580eab2f9d26750511de216fe39e9e70544f3034cabd0c119cbc56486c11c0608ac99e1fada5059b6"}}, &(0x7f0000000280)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "df26df00a10133c4e1c91e5cb14b3d3965b73ae132217a4833b02f30e859c4aa00bafcd06a15355bd81e606ab3b290db8f1447dabc77a989bdeaab6ede969d6bfef719101cd69e0a7d3fde2dab46680f2c4b0131e120ad2c539bbb8c6143da01703604365595b3d322836e121c809dedd74b3772af2827beaf73f2f5cd48cd502908e19137ea222777c6929bf8a9245319362a5da7a6c39935a18d5ce406026509ac4a4c35495452c8ae4ecede44771543463c79f4"}}, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xeaecd51a6eaad926, "9850"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xdd5}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000400)={0x40, 0xd, 0xc4, "c03f772165435e78f420ffbbb51fe8d493f0ece56f0b2597427157c669f531f4b717ed2620ffad370d351bb257519007873b32831f69d92ec0b5783ed3315cfb55cd7070ff2677ca87f58cf9ff09920ef8681bd82c8cc096d380ec66251db0ba80cbbf1e58959d1c2621380293d1d2472244fc2498a3aeca7ed65d3790d41ed75431e9cc4f4933adab67b4e7aa0e55046607bf346b404c67f842f31f283dfd8496f149a636d6bbc932fb5dd1afd823c2193d014fe0ec33f5ebe499a59c1ef224fba83635"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000580)={0x20, 0x1, 0x15, "86efbab9eccb932b74cf2365587457b2487a39b9d3"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) 23m12.092526948s ago: executing program 4 (id=706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24000840) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x4000000}) 23m11.828387128s ago: executing program 4 (id=709): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x22020600) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03012e"], 0x4) io_setup(0xec, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000500)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000d0000000100000080000000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m11.342938654s ago: executing program 32 (id=709): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x22020600) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="03012e"], 0x4) io_setup(0xec, &(0x7f00000000c0)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x800c5012, &(0x7f0000000500)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a000000140002000000000000000000000000000000000105000300010000004c000080060001000200000008000200ac1414bb0500030002000000060001000200000008000200640100fe0500030001000000060001000200000008000200ac1414bb0500030002000000e8000080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200200100000000000000000000000000020500030001000000880000800600010002000000080002000000000005000300000000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14142d05000300010000001c000080060001000200000008000200ffffffff0500030003000000080003000200000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221c02098058000080060001000200000008000200000000000500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe880000000000000000000000000101050003000100000040000080060001000200000008000200ac1e00010500030001000000060001000a0000001400020000000000000000000000ffff0a010102050003000300000000010080060001000200000008000200ac1e00010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff0500030000000000060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200200100000000000000000000000000010500030003000000060001000200000008000200e000000105000300000000000600010002000000080002007f00000105000300020000000600010002000000080002000a010100050003000000000064000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000a000000140002002001000000000000000000000000000205000300010000001c000080060001000200000008000200ac141416050003000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e08000100", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000d0000000100000080000000", @ANYRES64=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffff1f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23m9.838297903s ago: executing program 0 (id=713): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004640), 0x0, 0x300) 23m9.747251246s ago: executing program 0 (id=714): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000980)='./binderfs/binder1\x00', 0x800, 0x0) signalfd4(r0, &(0x7f00000009c0)={[0x7, 0x7]}, 0x8, 0x80000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) gettid() sendmsg$kcm(r1, 0x0, 0x0) r2 = openat$vim2m(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) write$6lowpan_control(r4, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x7e, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r5}, 0x38) write$uinput_user_dev(r3, &(0x7f0000000500)={'syz0\x00', {0x8000, 0x7f, 0x3, 0x3}, 0x3a, [0x5, 0x1, 0x7, 0x83e, 0x5, 0xd, 0x6, 0x0, 0x7, 0x9, 0x4, 0x7, 0x1, 0x3ff, 0x3, 0xfffffff9, 0x27e8, 0xf93, 0x6, 0x3, 0x2, 0x1, 0x47dc, 0x10000, 0x4, 0x3, 0xfffffffc, 0x1, 0x0, 0x18, 0x8, 0x9, 0x190a, 0x1000, 0x23, 0x0, 0x4, 0x1, 0x1, 0x5, 0x2, 0xfd84, 0x200, 0x3, 0x6, 0x9, 0xffffffc0, 0x8, 0xe0000000, 0x5, 0x77, 0xb, 0x7, 0x5, 0x7, 0x22, 0x1, 0x7fffffff, 0x4, 0x80000000, 0xdc6, 0xfffffffc, 0x0, 0x7], [0x9, 0x1, 0x0, 0xffffc5b3, 0x2, 0x5, 0x2, 0xdc0, 0x0, 0x3, 0x2, 0x8, 0x6, 0x661b, 0x7, 0x5f, 0x7d, 0x10001, 0x2, 0x2, 0x8, 0x7, 0xbda, 0x80000000, 0x20, 0x4, 0x8, 0xfffffffc, 0x2, 0x9, 0x7fff, 0x4, 0x8, 0x6, 0x60, 0x6, 0x5, 0xfff, 0xfffffff9, 0x8, 0x6, 0xfffffffc, 0x7fffffff, 0x8, 0x8, 0x3, 0x2, 0xe14, 0x200, 0x7, 0x63, 0x8, 0x9, 0x7f, 0x3, 0xcbf, 0x200, 0x2, 0x2, 0x8, 0x3, 0x0, 0x400, 0x7], [0x9, 0x4, 0x0, 0x0, 0x6, 0x8, 0xffffff81, 0x4, 0x401, 0xb, 0x200, 0x9, 0xfe0, 0x5, 0x4, 0x40, 0xfffffff9, 0x956, 0x63, 0xb72, 0xf816, 0x57d, 0x0, 0x7, 0x1, 0x6, 0x1, 0xe9, 0x0, 0x3, 0x1, 0xfffffffb, 0x3, 0x3, 0x81, 0xf, 0x9, 0x3, 0x3cc, 0x9, 0xc, 0x800, 0x9983, 0x31, 0x2, 0x0, 0x3, 0x7, 0x3, 0x6, 0x9, 0xe0, 0x7, 0x7f, 0x1ff, 0x6d, 0x7, 0xfffffffb, 0x1175, 0x8000, 0x11d, 0x8f9b, 0x3, 0x6], [0x9, 0x5, 0xfffffbff, 0x5, 0x6, 0x5, 0x80000001, 0x7fff, 0xff, 0x0, 0x1, 0x1, 0x6, 0xffffd529, 0x408, 0x0, 0x2f5, 0x1ff, 0x8000, 0x3, 0x7f, 0x7fffffff, 0x40000000, 0x4b1, 0x6, 0xc, 0x5, 0x5, 0x508f, 0xc6, 0x81, 0x9, 0x7ea692d0, 0x2, 0x8, 0x1d59, 0xfff, 0xe10d, 0xc, 0x40, 0x4, 0x3, 0xfff, 0xfe, 0x1, 0x3, 0x366e, 0x7, 0xfffffffc, 0x8001, 0x3, 0x3, 0x4, 0x0, 0x8, 0x0, 0x3ff, 0x6, 0x0, 0x1, 0x9, 0xffffffff, 0x7, 0x5]}, 0x45c) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc04c5609, &(0x7f0000000280)=@fd={0x5, 0x1, 0x4, 0x7d401, 0x4, {0x77359400}, {0x3, 0xc, 0xa, 0x9, 0x2b, 0x82, "aa4376b5"}, 0x4, 0x4, {}, 0x6}) r6 = syz_open_dev$vivid(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r6, 0xc0cc5604, &(0x7f0000000100)={0x9, @sdr={0x38414261, 0xa5ba}}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007c0631207d0700010000c00509045a000184da28030002020501"], 0x0) 23m6.540875515s ago: executing program 0 (id=718): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[{0xa4, 0x109, 0x8, "9adfac769f91bc0832421e651d1f61af7bdab6ccc02dd49658a46bda78788437046c9778d7c690e025037ade2ee20fb661945c023e081d00a2bf4ca7d9fdca6a094bc7e5f6e7462eee0b660a01b61bf8aa4827640ec7499211debd24672494a06f9a503d615ec2a82520fc96c4315b846094af08d629142490cbc5731c78ce8b47a67843ab25a913f2b1357c5caebb225bf6c3baf12e"}, {0x14, 0x103, 0xf8, "9705c4d59f"}, {0xc, 0x11}], 0xc4}}], 0x1, 0x300) 23m5.188043088s ago: executing program 0 (id=719): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x4, 0x9c, {0x9c, 0x21, "7de72d93a970f1837275f05f5523ebab54309091d9fd3ad281fdea1fb687bf9b2de33de228fb7598c942d7ad3420dc4df47924d8bf87f98bec63f7273f891eab2442540d94d34f81262606167994c5049d6325cb0ad8c3331b19c050c2e0bd4e701afbf08adc95b7655507283f32b092173580eab2f9d26750511de216fe39e9e70544f3034cabd0c119cbc56486c11c0608ac99e1fada5059b6"}}, &(0x7f0000000280)={0x0, 0x3, 0xb7, @string={0xb7, 0x3, "df26df00a10133c4e1c91e5cb14b3d3965b73ae132217a4833b02f30e859c4aa00bafcd06a15355bd81e606ab3b290db8f1447dabc77a989bdeaab6ede969d6bfef719101cd69e0a7d3fde2dab46680f2c4b0131e120ad2c539bbb8c6143da01703604365595b3d322836e121c809dedd74b3772af2827beaf73f2f5cd48cd502908e19137ea222777c6929bf8a9245319362a5da7a6c39935a18d5ce406026509ac4a4c35495452c8ae4ecede44771543463c79f4"}}, &(0x7f0000000040)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0xeaecd51a6eaad926, "9850"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0xdd5}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000400)={0x40, 0xd, 0xc4, "c03f772165435e78f420ffbbb51fe8d493f0ece56f0b2597427157c669f531f4b717ed2620ffad370d351bb257519007873b32831f69d92ec0b5783ed3315cfb55cd7070ff2677ca87f58cf9ff09920ef8681bd82c8cc096d380ec66251db0ba80cbbf1e58959d1c2621380293d1d2472244fc2498a3aeca7ed65d3790d41ed75431e9cc4f4933adab67b4e7aa0e55046607bf346b404c67f842f31f283dfd8496f149a636d6bbc932fb5dd1afd823c2193d014fe0ec33f5ebe499a59c1ef224fba83635"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000580)={0x20, 0x1, 0x15, "86efbab9eccb932b74cf2365587457b2487a39b9d3"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003000000000000000000000200000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000004000e80080008"], 0xa0}, 0x1, 0xfffff000, 0x0, 0xa0}, 0x0) 23m2.049804563s ago: executing program 0 (id=726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) open_tree(r2, &(0x7f0000006180)='./mnt\x00', 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000840) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc3036bb66682c", 0x7, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) 23m1.642901009s ago: executing program 0 (id=727): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 23m1.070046355s ago: executing program 33 (id=727): socket$nl_generic(0x10, 0x3, 0x10) openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 8.259065703s ago: executing program 2 (id=6027): r0 = socket$netlink(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) 8.039756023s ago: executing program 2 (id=6030): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a", 0xa}], 0x2}, 0x0) 7.100388869s ago: executing program 2 (id=6046): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x24048845) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4d}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) socket$igmp6(0xa, 0x3, 0x2) 6.967557815s ago: executing program 2 (id=6048): bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "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"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6.658497344s ago: executing program 2 (id=6054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x14, 0x5, 0x0, 0x5, 0xffffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.091972681s ago: executing program 2 (id=6061): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) finit_module(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f150721"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x34, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x34}}, 0x8000) sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.819959414s ago: executing program 5 (id=6088): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008000, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b909523558a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d000000009276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fdf23a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c4440e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xe7}, {&(0x7f0000001100)="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", 0x2af}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe5", 0xd8}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999", 0x2c}, {0x0}], 0x5}}], 0x1, 0xc0) 3.665534272s ago: executing program 5 (id=6089): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x3, 0xb, 0x4, 0x3}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) 3.236455217s ago: executing program 6 (id=6091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 2.913345486s ago: executing program 6 (id=6093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.043624558s ago: executing program 6 (id=6097): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x24048845) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4d}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) socket$igmp6(0xa, 0x3, 0x2) 1.675970057s ago: executing program 1 (id=6100): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 1.658422824s ago: executing program 6 (id=6101): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000d042abd", @ANYRES32=0x0, @ANYBLOB="00000100400000002c0012800c0001006d6163766c616e001c0002800c000900ffffffff08000100000000000000000000000000140035006d6163766c616e3000000000000000"], 0x60}}, 0x8000) 1.620549005s ago: executing program 5 (id=6102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 1.526842406s ago: executing program 1 (id=6104): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) 1.372166186s ago: executing program 6 (id=6106): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/192, 0x0, 0xffff1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4110, 0x3000}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.300038446s ago: executing program 1 (id=6107): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) finit_module(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f150721"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x34, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x34}}, 0x8000) sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0) 1.269964117s ago: executing program 5 (id=6108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.188454097s ago: executing program 1 (id=6109): syz_emit_ethernet(0x46, &(0x7f0000000a00)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@loopback, @remote]}, @timestamp_addr={0x44, 0x4, 0x89, 0x1, 0x8}]}}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 1.08330469s ago: executing program 5 (id=6111): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x24048845) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2a, 0x2, 0x0) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4d}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) socket$igmp6(0xa, 0x3, 0x2) 959.928874ms ago: executing program 1 (id=6112): r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) 850.513056ms ago: executing program 5 (id=6114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 824.607439ms ago: executing program 1 (id=6115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000a40), 0x0, 0x24008000, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b909523558a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d000000009276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fdf23a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c4440e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xe7}, {&(0x7f0000001100)="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", 0x2af}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe5", 0xd8}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999", 0x2c}, {0x0}], 0x5}}], 0x1, 0xc0) 708.077128ms ago: executing program 3 (id=6116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8, 0x14, 0x5, 0x0, 0x5, 0xffffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 507.742011ms ago: executing program 3 (id=6117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 416.51067ms ago: executing program 6 (id=6118): bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x8, 0x5, 0x400, {{0x5, 0x4, 0x0, 0x2b, 0x14, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1}}}}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "fc0300", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, '\x00', 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}, [@hopopts={0x4fb560df2bad385d, 0x2, '\x00', [@generic={0x7, 0xf, "55b5d747d5ce5853e308cdbcf10ddd"}]}, @dstopts={0x16, 0x1e3, '\x00', [@jumbo, @enc_lim, @jumbo={0xc2, 0x4, 0x40}, @calipso={0x7, 0x10, {0x4, 0x2, 0x4, 0x6c8, [0x0]}}, @generic={0x2, 0xef6, "471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b987951e70d75bba7371694f1fb2b1957b4954fb807f86d7c7781697c2304a26e879a066a81d9b4f9ad82632a90632f737b44dc95d5b56a4acfdca287e039c5ebe808b5d585eda8c1543dbc5bf1b6bfc52c5ff2a947bce2327ccfeccfc2ba9df17ea126da5c4bbb54018d4f8277939acd67cd26ce4173968cfb747b74d61eb69503dea36f616de641ed0755b2e37f14dc9a8d86bab92acdfcbb93bed1d4344f2fd9c539d5fda77cbae2bedb79e05fc03e64e253b03bd8ac170e54ee380314727c60a3bc1d689b989710dd0f9a418f90637db3aae7034a9b83e8c843ba835c6a500ae43e840688d0801a882ffb94b7a77bd2314217aac52d296d169395c0b3dc7339a389354e1e4ff0746e6b2e3fc0149a36e75eafc20d51812e984faeecb52ad9b89288bacf21c152290ff2f6781dc761a3e50d88a8b4da3e65782fa959d583c718cf64d09d330c381ae123bea01e7d25eb8f8be911f3928237e3878e505be36bb6852903dff1e77be22ccf3b3e1c8658a5b92c816c6f3f0306a196ec62d5a39ecf36528f18e639b26351b6bc9d1230482e5d8e2c9561de5204d98487364c50f7236c503db3665876f6c04f7f23d1606d36120f62e3fd3de4a7525678e3748905d5a14fa840297c7dda43e13e18fad1453d5c24ddcb4bef61ab494d4f620201993b1b20f339ec6409474a6f104edbe42e0df14633c9a40352f773600b335e6a7ec6f0b0511c6d55fb484696d3b3e2fa4346d26446cba1e2e7ae1de5df058e7c2b52a1d6bb2d2daff1c73a4718541d6b9882891870b3f17442bdc250de45202f7314cd6c3670c3061b9ea658f21e1c362d622316f158968f118a72bef80745a9159f3c77985ecd9bca98ccd482b96ab39701053e30fb4d6d5efc4ba8f33fe18b0df2ab24ad5b2169ed8569cc264f91481fe3accc27448231088f05d996f562fd1950e43313193d23338fc134753ef5127d57161597f99598d546e290123ac1c3df0f5ded6cad9f523e71f7d5ce0b7d41f0d2fc6f911bd6b578f156b7b85dcf90d423e1cb854bb18ddc6801fc30ce76df9c27c1d5d91e06e9209d061b43449d0abdf346c644db465ee610d3ed406af49cce6119a1ec2ac9846350367f99e7255e5be602f0cce16439f3c5beb7276f96f2f9dffc88da05c8b197b90bf4ca75be6d767dc10d1ff883728fcaecbde596ed9b01a456e417fb9ded7431323b19a6fa8f6fd0ec596410a887037ff6a0feb81ce0dffdfdec39a5b04ec962e87bc038e4436b2a8ac00e51bca0976eef42211107422ff30034cc62355fcf65b51325fcd25861ee487c695b51ba4be9b3c47ab47388e9a8dcce4507acbf5b16164f85d12161c8038019f589e0117a02161dcf2fc01968983bde59dceda258e008e337a3af1c1127258b8877558918caa71355ca8d17be32b10d61e72a0391b6ed88327d1f6d030877fe893f777de0e0ec863f15a50b40d003a9a941182a0639674bd0b4f4f9716fb1c2e115a6465fa731759793b86a9bb70ae0bb18d0c5e53c120d192a71302d15fff0c2c76ad1f9e1281c42a659ed7b67c4f4d7c3fcd56a022bf8f043006c61f254a80184519935bbc805eefba13ed54234322506f28f362065d6a68c35473280d4b8196754a11604a901cfdea47dc6f442fa73ffc6fe5e59bece8741407a57fd5f36a5906951fe75bea732413200bb85053ad500ea6245bea8abccbf5e8927261f752c12a2765827ea9908f084b862ce41b11443f73f0ec6aa095db1bbce0b14bce8397b45da28c2ac2f33c8ecce00bdf34cd00aa95d181ea33e08b7c8a768a365c4279e0b5d9352eb62c628909cc4191e0ff81fd84cc4c371ffc000d8841a9ebe70574993579cfd0e35574ef6e4cc6edf42deb8cb1e38b55fead366238d8d7d83902c6da5ad2ee63843db90090d57eeebd90ec9b08a6ffffd6c60e0b017e0c22d08cf1e22e2e63df06b62e5e0cfcd7b9441d2ca09b4e96c3b61ed1459fc24d83301148940e554f4d78c453c7e2f262f09aebee218ec5a22f874768e4c1afa870262f2f67155c94b17a36475dd421eaee27632427ede8330b1d74d2cd1a2d0a7de694a7d87ede13b5ea664e89f3d872512581adc606cd841a2abd2ed34efe3ec8e4f03d1e38fadfd08cb1b65f4eac10c48894b6fda1440ddd5d22b06214dbd483a5da821c4f447cce31df27c40b14f4471abccd35e6673aaa17133e78a589f45331399d930534edae0402e811a411d557c184c44ebec37a4e146d8076a070cf1f967ba3341e4e8e0c8b4b4617ee2bf3e8ae478567137641b6f6bc1fafd0d15cfed74198646906b5b853c8206ebf1e7e46bd74ae848281c4d89c02057de523e7e3e75567811685c1be1d2f5a57ff5b32fb8ef19e44f25226701f1b6b66cac452620cb7529b411cd833e3b1ad07bc781be7cda26eeccdb57f44308e765e13f357356e3fb83dcb4994b369fd3ee6aa6e405da03703c0dbd0e47110533992fd2be5bde2cbf6f7e777082427189766afbe426e6014ec9d041e96bcc900d5bdf4be72142ed1ab4c1d88afe8408145e06ddd3c2820f5d928309b3ef77afdd500568d76eb99ebd6f4ab78d5e43aa61b8a0ec27e1f6475691183e19f9e43ef1e94f2656da3eb693921f13aee4d4140fc4d56ac5ff3ec97163915a028c1ed16c7d08e6862503b18283b30489507e35945197c22733dee593f1d20a53dc5a463d5b8a058fa555c220de3fe5252a83e10f163babc01ec11c2e2197491ebb06b43919320c7237c0e55cbf927e0b5aaadd81c0c4c49a30ff2f9426b32311cbf09e1bcbe75c89aec74cf848d1b2194760a6edc734aebac9b429ae0438c620d4ad23b42deb8f7f1806ee8db02261b1e6d35742b1c85602c8099c0ed85cd89969f7b9ffd5906483e788d9f8c01e998c000f3005ea9efef9ca977530999344093bd6d234e500d784b22ccc8de58065451196dc977d8e8c8deac7d47b1ddc23f82f09159796a883d8b530fa193a20c53c22c5ffa3e5d411329f6489266ea75ff184b7ff1b301293b3ff5de6eb3658d826e6aa114eac2e572bf7d0d085e1e927af2bc1b21d1eaa37075a4778bec44521e5341c89c7589ca85b0cbda1060bca778906705be8791e479cb9867b4f6f06802ae76fba15b8fbf14bfd1b393bcef6f7997ac66bd87fcdda9387a519b5dbb61f7f970772a406bdce40f48511344070ed00a20880fdcc19732df83f0ba1bf6c94e201a7a2c833239ebf380720d3ddd644c8b3d78a0eae5d0d7d22937fc5c3e9295cd7a412897b9c1123ffc1aec8c49c768ed008f795e62ad47250ad92f90d4d2c903fdba9c19f8ce5dd5eb69c099ba28eac5717c975c7504ce86b168744f9944ca63ba1938c02918ca9bfb77fc4e97c093108b3d35b8330bc32758c7f3ee746315e758ccb5e220de655350eba786e400bc89e958862541506c6e4958d3fd0987686f2d6236abd0bd118fea29e09d6025f1ac9730e72177ef28399c25134261f785b5e1b7f20bde4e347da83f8dfe0c9080d48b9dc371d9e81174faf9ebcefd3804718b05bbd6f41f40e726d390b87e60afbdadd45cd2f0c4d7495b6a6f074259518838317973877d991ef156d2d39098b50e8b6e1bbfb4096d5801d64e0655be19f7390594ad273f83e7c5128a579e6faf44c76bfdd70d726c0ea4cb9f69976b5beee76f5bec995e49d26795c9731d36d013d628fd7ac2f0bfde44c434d2bfc547480ae597b3e1e5214f108255fa0d22eb69df4a1691c6614743298af40e283090a4039b8bdf9822a86caeabd18d12c506d3448c1b15efa929881029ca0f8d4861d5f7a2d06f0e1a2f18db910ab1bf391a690086eb91341e38649f8bbd8299c3e81e0c816f34629b191e722e9bfdb8610fd135d36b0335198e2a4c06e2f37b9efeeb85a07896674c979e720347fa61782ac09cacd7967a7484e55ea2bfd50a9cb3e1863a59e6ad867593237bdb2baebaf9c88df6b91b5801393186a64dd33ba3472c0a3cb99b7ed8c93f1b95832d75df45c65df69d818ad0680e39606045c996691fcbf1bc69b3f171a46fc81fa66877758c76f73c1d83cc3dddd321b1c03c6b56fa9e02bc3fa4bef43050420202370c5074c0abd08d94c9b75a871cee948ca2e055ab07e1c062e8a1435e06073dc5911d91237ce9fe8cdf47a345de4ca65febc8f48de09603e44d7f14e1e0c37428680dd3428f0f4563dc90e0714fe0a40689acc472394704b9feba33ec9bca45533cd4635b3249a24025c271e6661d0060de48689debb58be19a6cef15f39dd6f42828d8440bc5b9e6d3aae0f745f05181c9d74832c358b8438bf46f0f4f302ffafc395b226d5bd1c5d5b011c846be3d133470db70800297699c8ee17104945a73cc77c2c9cdae9383904dc428f76480558a40c0dc19cd9190dbb78ed1da18eea6694406f428c4ad3e8b4add1ececf520fc9ffbdbde06ac39b2ceb2f24b6054268f179d258a9b260490216f6169e5867c050f3898a555907bd18b18c6d11748cf43bf7b7b1a8eeef32cee7560eed7faea9218ff4f08f69835cd6b1af390f4159ed300faf2d8b5b5904a42bb3e926b383496fb018c8da32e13a952bb172d749edc6e1e38c1e88db1d75f141d3bed099f275e3d0e7fed711d1c4e882612dc7f33fc567a19ce4a901a5350b128d08eff31b1f660e108b146ac3d415ec86820207bf9a9c32d7df1e648cc68bf093faccc1c9e3e31a45ec81a1ce6ceef43240543476ae1305a6beeb8337a0e7c6dae864081fe962b7fd63326415e01b2ebfc770f1c5f8704add7da3a0380625c1162191af137b6a5ada314e0f7233b41e6e58f9ea7e1cf9927da4770bc2d4c45e71d5728930f5a02d740f124521490231229b99cbce370627517017e6d3d82526faecdd573e135d5bc3b96e1292e0b473471e2e93e8162eadf6fc2caced5f9aa494d0eadf8dc5442a9da1d9caf007f8e47c05eb38fa8f99e480c49957c7bae1efb2ce516bd690b7379e83f0493df617449fd9c61e6f9393750464e8d59eb10c8bc84"}]}], "d53354e0f167b1d8f8ed2a0790c6f7186919d562ebcbf5ab"}}}}}}, 0xfce) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027000000000008000100150008000500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 356.491745ms ago: executing program 3 (id=6119): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendto(r0, &(0x7f0000000600)="1db4d479c5faee911d50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdff59fbb22bae1b2443011fd801251bcef8f165533aacd8c7556dd502000000000000002944de604d849a1e3b22905b0d26e9ff30b83f38a2ae8b1c6748ef8b87ef2a359249c3e294", 0x6f, 0x4c080, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000003c0)='}', 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 233.6938ms ago: executing program 3 (id=6120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002340)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5f8cc9b0}]}, 0x28}}, 0x0) 44.139363ms ago: executing program 3 (id=6121): r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x10000000000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 0s ago: executing program 3 (id=6122): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): ] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1624.172971][T17203] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1624.195517][ T5900] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1624.242789][T17203] usb 3-1: USB disconnect, device number 114 [ 1624.255072][ T5900] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1624.301881][ T5900] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1624.314703][T16285] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1624.496810][T16285] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1624.515985][T16285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1624.546756][T16285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1624.621002][T16285] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1624.634511][T16285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.642846][T16285] usb 2-1: Product: syz [ 1624.716510][T16285] usb 2-1: Manufacturer: syz [ 1624.721458][T16285] usb 2-1: SerialNumber: syz [ 1624.733479][T16285] usb 2-1: config 0 descriptor?? [ 1624.892616][ T5913] pwc: Warning: more than 1 configuration available. [ 1624.905069][ T5913] pwc: Failed to set LED on/off time (-71) [ 1624.911724][ T5913] pwc: send_video_command error -71 [ 1624.919390][ T5913] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1624.935581][ T5913] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1624.981203][ T5913] usb 7-1: USB disconnect, device number 49 [ 1625.002369][T24015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.024729][T24015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.306760][ T923] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1626.454948][ T923] usb 3-1: device descriptor read/64, error -71 [ 1626.489061][T17203] usb 4-1: USB disconnect, device number 3 [ 1626.881657][T10347] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1626.889909][ T923] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1627.074635][ T923] usb 3-1: device descriptor read/64, error -71 [ 1627.089715][T10347] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1627.099179][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.143913][T10347] usb 7-1: Product: syz [ 1627.148294][T10347] usb 7-1: Manufacturer: syz [ 1627.153291][T10347] usb 7-1: SerialNumber: syz [ 1627.176698][T10347] usb 7-1: config 0 descriptor?? [ 1627.217619][ T923] usb usb3-port1: attempt power cycle [ 1627.239500][T10347] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1627.660634][T24043] bridge1: entered promiscuous mode [ 1627.676299][T24043] bridge1: entered allmulticast mode [ 1627.690825][T24046] fuse: Unknown parameter 'fd0x000000000000000b' [ 1627.737458][T24043] team0: Port device bridge1 added [ 1627.854277][ T923] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1627.874764][ T923] usb 3-1: device descriptor read/8, error -71 [ 1628.174523][ T923] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1628.314770][T10347] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1628.322437][T10347] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 1628.560656][ T923] usb 3-1: device descriptor read/8, error -71 [ 1628.606946][T24054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4605'. [ 1628.616592][T24054] FAULT_INJECTION: forcing a failure. [ 1628.616592][T24054] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.634322][T24054] CPU: 1 UID: 0 PID: 24054 Comm: syz.3.4605 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1628.634357][T24054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1628.634371][T24054] Call Trace: [ 1628.634380][T24054] [ 1628.634390][T24054] dump_stack_lvl+0x189/0x250 [ 1628.634427][T24054] ? __pfx____ratelimit+0x10/0x10 [ 1628.634458][T24054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1628.634491][T24054] ? __pfx__printk+0x10/0x10 [ 1628.634517][T24054] ? __pfx___might_resched+0x10/0x10 [ 1628.634549][T24054] ? fs_reclaim_acquire+0x7d/0x100 [ 1628.634578][T24054] should_fail_ex+0x414/0x560 [ 1628.634609][T24054] should_failslab+0xa8/0x100 [ 1628.634633][T24054] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1628.634662][T24054] ? __request_module+0x2d1/0x5e0 [ 1628.634698][T24054] kstrdup+0x42/0x100 [ 1628.634726][T24054] __request_module+0x2d1/0x5e0 [ 1628.634755][T24054] ? __pfx___up_read+0x10/0x10 [ 1628.634781][T24054] ? __pfx___request_module+0x10/0x10 [ 1628.634815][T24054] ? __ib_get_global_client_nl_info+0x189/0x230 [ 1628.634855][T24054] ? __asan_memset+0x22/0x50 [ 1628.634885][T24054] ib_get_client_nl_info+0x9e/0x140 [ 1628.634913][T24054] nldev_get_chardev+0x628/0xa70 [ 1628.634943][T24054] ? __pfx_nldev_get_chardev+0x10/0x10 [ 1628.634964][T24054] ? __lock_acquire+0xab9/0xd20 [ 1628.635088][T24054] ? __lock_acquire+0xab9/0xd20 [ 1628.635134][T24054] ? kasan_save_track+0x4f/0x80 [ 1628.635175][T24054] ? down_read+0x1ad/0x2e0 [ 1628.635193][T24054] ? __pfx_nldev_get_chardev+0x10/0x10 [ 1628.635218][T24054] rdma_nl_rcv+0x6ab/0x980 [ 1628.635255][T24054] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1628.635277][T24054] ? __lock_acquire+0xab9/0xd20 [ 1628.635328][T24054] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.635351][T24054] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.635381][T24054] netlink_unicast+0x75b/0x8d0 [ 1628.635414][T24054] netlink_sendmsg+0x805/0xb30 [ 1628.635448][T24054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.635475][T24054] ? __import_iovec+0x5d4/0x7f0 [ 1628.635493][T24054] ? aa_sock_msg_perm+0x94/0x160 [ 1628.635521][T24054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1628.635548][T24054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.635573][T24054] __sock_sendmsg+0x21c/0x270 [ 1628.635608][T24054] ____sys_sendmsg+0x505/0x830 [ 1628.635646][T24054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.635690][T24054] ___sys_sendmsg+0x21f/0x2a0 [ 1628.635719][T24054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.635784][T24054] ? __fget_files+0x2a/0x420 [ 1628.635807][T24054] ? __fget_files+0x3a0/0x420 [ 1628.635842][T24054] __sys_sendmsg+0x164/0x220 [ 1628.635870][T24054] ? __pfx___sys_sendmsg+0x10/0x10 [ 1628.635911][T24054] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1628.635943][T24054] ? lockdep_hardirqs_on+0x9c/0x150 [ 1628.635975][T24054] __do_fast_syscall_32+0xb6/0x2b0 [ 1628.636008][T24054] ? lockdep_hardirqs_on+0x9c/0x150 [ 1628.636042][T24054] do_fast_syscall_32+0x34/0x80 [ 1628.636073][T24054] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1628.636099][T24054] RIP: 0023:0xf7fe4539 [ 1628.636117][T24054] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1628.636137][T24054] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1628.636160][T24054] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 1628.636175][T24054] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1628.636188][T24054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1628.636200][T24054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1628.636213][T24054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1628.636244][T24054] [ 1629.097579][ T923] usb usb3-port1: unable to enumerate USB device [ 1629.447749][ T5913] usb 7-1: USB disconnect, device number 50 [ 1631.294081][ T5913] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1631.458931][ T5913] usb 3-1: config 162 has an invalid interface number: 251 but max is 1 [ 1631.458964][ T5913] usb 3-1: config 162 has an invalid interface number: 209 but max is 1 [ 1631.458986][ T5913] usb 3-1: config 162 has no interface number 0 [ 1631.459004][ T5913] usb 3-1: config 162 has no interface number 1 [ 1631.459132][ T5913] usb 3-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1631.459172][ T5913] usb 3-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1631.459198][ T5913] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1631.459292][ T5913] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1631.459320][ T5913] usb 3-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1631.459347][ T5913] usb 3-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1631.459375][ T5913] usb 3-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1631.459472][ T5913] usb 3-1: config 162 interface 251 has no altsetting 0 [ 1631.459492][ T5913] usb 3-1: config 162 interface 209 has no altsetting 0 [ 1631.462631][ T5913] usb 3-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 1631.462654][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.462670][ T5913] usb 3-1: Product: syz [ 1631.462681][ T5913] usb 3-1: Manufacturer: syz [ 1631.462693][ T5913] usb 3-1: SerialNumber: syz [ 1631.680068][ T5913] io_edgeport 3-1:162.251: required endpoints missing [ 1631.883749][ T5913] io_edgeport 3-1:162.209: Edgeport 2 port adapter converter detected [ 1632.078049][T24090] netlink: zone id is out of range [ 1632.078097][T24090] netlink: zone id is out of range [ 1632.078114][T24090] netlink: zone id is out of range [ 1632.078209][T24090] netlink: zone id is out of range [ 1632.078220][T24090] netlink: zone id is out of range [ 1632.078231][T24090] netlink: zone id is out of range [ 1632.078241][T24090] netlink: zone id is out of range [ 1632.078252][T24090] netlink: zone id is out of range [ 1632.078262][T24090] netlink: zone id is out of range [ 1632.078311][T24090] netlink: zone id is out of range [ 1632.194421][T10347] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1632.291855][ T5913] usb 3-1: ê’« ä€ detected [ 1632.347451][T10347] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1632.362180][T10347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.397121][T10347] usb 6-1: config 0 descriptor?? [ 1632.521371][ T5913] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 1632.580203][ T5913] usb 3-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 1632.637832][T10347] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1632.928834][ T5900] usb 3-1: USB disconnect, device number 119 [ 1632.928919][ C1] usb 3-1: edge_interrupt_callback - Error -19 submitting control urb [ 1633.019677][T10347] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1633.030940][ T5900] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 1633.102335][ T5900] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 1633.112791][T10347] [drm] Initialized udl on minor 2 [ 1633.149096][T10347] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1633.178524][ T5900] io_edgeport 3-1:162.209: device disconnected [ 1633.198850][T10347] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1633.254474][ T5913] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1633.283363][ T5913] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1633.335114][T10347] usb 6-1: USB disconnect, device number 36 [ 1633.394517][T24095] vxcan1: entered allmulticast mode [ 1633.904377][T17203] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1633.995808][T10347] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1634.060347][T17203] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1634.079847][T17203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1634.107228][T17203] usb 7-1: Product: syz [ 1634.111468][T17203] usb 7-1: Manufacturer: syz [ 1634.131281][T17203] usb 7-1: SerialNumber: syz [ 1634.151360][T17203] usb 7-1: config 0 descriptor?? [ 1634.167394][T17203] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1634.183673][T10347] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1634.193558][T10347] usb 3-1: config 0 has no interface number 0 [ 1634.211128][T10347] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.224599][T10347] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.235308][T10347] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1634.244625][T10347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.265188][T10347] usb 3-1: config 0 descriptor?? [ 1634.461761][T24110] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1634.473572][T24110] [U] J"—e:ÀÆ" [ 1634.719732][T10347] prodikeys 0003:041E:2801.0056: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 1634.735494][T10347] hid_prodikeys: hid-prodikeys: failed to find output report [ 1634.735494][T10347] [ 1634.922599][T24102] fuse: Bad value for 'group_id' [ 1634.932292][T24102] fuse: Bad value for 'group_id' [ 1635.119310][T17203] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1635.139865][T17203] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 1635.495564][T16285] iguanair 2-1:0.0: failed to get version [ 1635.550688][ T5900] usb 3-1: USB disconnect, device number 120 [ 1635.598985][T16285] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 1635.629172][T16285] usb 2-1: USB disconnect, device number 119 [ 1636.065267][ T923] usb 7-1: USB disconnect, device number 51 [ 1636.088182][T16285] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1636.254258][T16285] usb 2-1: Using ep0 maxpacket: 16 [ 1636.272620][T16285] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1636.285701][T16285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.294551][T16285] usb 2-1: Product: syz [ 1636.308905][T16285] usb 2-1: Manufacturer: syz [ 1636.313561][T16285] usb 2-1: SerialNumber: syz [ 1636.340146][T16285] usb 2-1: config 0 descriptor?? [ 1636.374845][T16285] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1636.518926][T24139] loop7: detected capacity change from 0 to 16384 [ 1636.653746][T24145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.746730][T24145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1637.442333][ T1149] usb 2-1: Failed to submit usb control message: -110 [ 1637.503463][ T1149] usb 2-1: unable to send the bmi data to the device: -110 [ 1637.520544][ T1149] usb 2-1: unable to get target info from device [ 1637.527917][ T1149] usb 2-1: could not get target info (-110) [ 1637.537796][ T1149] usb 2-1: could not probe fw (-110) [ 1638.561979][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4636'. [ 1638.835099][T17203] usb 2-1: USB disconnect, device number 120 [ 1640.093261][T24198] sctp: [Deprecated]: syz.2.4641 (pid 24198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1640.093261][T24198] Use struct sctp_sack_info instead [ 1640.904013][ T923] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1641.099871][ T923] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1641.127206][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.151435][ T923] usb 2-1: Product: syz [ 1641.181674][ T923] usb 2-1: Manufacturer: syz [ 1641.202666][ T923] usb 2-1: SerialNumber: syz [ 1641.241838][ T923] usb 2-1: config 0 descriptor?? [ 1641.278421][ T923] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1641.514263][T10347] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1641.741752][T10347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1641.765964][T10347] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1641.801513][T10347] usb 3-1: can't read configurations, error -71 [ 1642.195025][ T923] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1642.202668][ T923] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1642.394568][T24219] sctp: [Deprecated]: syz.2.4645 (pid 24219) Use of int in maxseg socket option. [ 1642.394568][T24219] Use struct sctp_assoc_value instead [ 1642.607105][T24221] loop7: detected capacity change from 0 to 16384 [ 1642.983988][ T5900] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1643.025345][T24230] net_ratelimit: 33 callbacks suppressed [ 1643.025367][T24230] openvswitch: netlink: Key type 173 is out of range max 32 [ 1643.246150][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1643.258794][ T5900] usb 6-1: no configurations [ 1643.268764][ T5900] usb 6-1: can't read configurations, error -22 [ 1643.414005][ T5900] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1643.613971][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1643.647693][ T5900] usb 6-1: no configurations [ 1643.674272][ T5900] usb 6-1: can't read configurations, error -22 [ 1643.696654][ T5900] usb usb6-port1: attempt power cycle [ 1643.947645][T16285] usb 2-1: USB disconnect, device number 121 [ 1644.064049][ T5900] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1644.095035][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1644.100897][ T5900] usb 6-1: no configurations [ 1644.106279][ T5900] usb 6-1: can't read configurations, error -22 [ 1644.294289][ T5900] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1644.331252][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1644.349552][ T5900] usb 6-1: no configurations [ 1644.369707][ T5900] usb 6-1: can't read configurations, error -22 [ 1644.380828][ T5900] usb usb6-port1: unable to enumerate USB device [ 1645.294828][T24257] netlink: 'syz.3.4654': attribute type 12 has an invalid length. [ 1645.914196][T10347] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1646.219490][T10347] usb 4-1: config 0 has no interfaces? [ 1646.232834][T10347] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1646.274502][ T923] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1646.329092][T10347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.402767][T10347] usb 4-1: Product: syz [ 1646.419357][T10347] usb 4-1: Manufacturer: syz [ 1646.432028][T10347] usb 4-1: SerialNumber: syz [ 1646.456387][ T923] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1646.464960][ T923] usb 3-1: config 0 has no interface number 0 [ 1646.472926][ T923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.494320][T10347] usb 4-1: config 0 descriptor?? [ 1646.533904][ T923] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.565321][ T923] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1646.589656][ T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.645288][ T923] usb 3-1: config 0 descriptor?? [ 1647.328746][ T923] prodikeys 0003:041E:2801.0057: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 1647.362812][ T923] hid_prodikeys: hid-prodikeys: failed to find output report [ 1647.362812][ T923] [ 1647.417936][T24264] fuse: Bad value for 'group_id' [ 1647.423342][T24264] fuse: Bad value for 'group_id' [ 1647.433611][T24277] openvswitch: netlink: Key type 173 is out of range max 32 [ 1647.481966][T16285] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1647.655307][T16285] usb 2-1: Using ep0 maxpacket: 8 [ 1647.665399][T16285] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1647.678646][T16285] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1647.691339][T16285] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1648.185532][T16285] usb 2-1: Product: syz [ 1648.224221][T16285] usb 2-1: Manufacturer: syz [ 1648.233479][T17203] usb 3-1: USB disconnect, device number 123 [ 1648.239204][T16285] usb 2-1: SerialNumber: syz [ 1648.350055][T16285] usb 2-1: config 0 descriptor?? [ 1648.421944][T16285] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1648.763569][T24289] loop7: detected capacity change from 0 to 16384 [ 1649.527120][T17203] usb 4-1: USB disconnect, device number 4 [ 1649.693957][T16285] gspca_zc3xx: reg_w_i err -71 [ 1649.809751][T24284] delete_channel: no stack [ 1650.294001][T16285] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1650.317031][T16285] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1650.324390][T17203] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1650.344279][T16285] usb 2-1: USB disconnect, device number 122 [ 1650.511895][T17203] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1650.534985][T17203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.543110][T17203] usb 4-1: Product: syz [ 1650.551677][T17203] usb 4-1: Manufacturer: syz [ 1650.557404][T17203] usb 4-1: SerialNumber: syz [ 1650.579308][T17203] usb 4-1: config 0 descriptor?? [ 1650.590054][T17203] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1650.684148][T16285] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 1650.790330][T24312] loop7: detected capacity change from 0 to 16384 [ 1650.876974][T16285] usb 2-1: config 162 has an invalid interface number: 251 but max is 1 [ 1650.886980][T16285] usb 2-1: config 162 has an invalid interface number: 209 but max is 1 [ 1650.898101][T16285] usb 2-1: config 162 has no interface number 0 [ 1650.905963][T16285] usb 2-1: config 162 has no interface number 1 [ 1650.933079][T16285] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1650.965699][T16285] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1650.986264][T16285] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1651.000744][T16285] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1651.013992][T16285] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1651.026399][T16285] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1651.042043][T16285] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1651.055568][ T923] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1651.064552][T16285] usb 2-1: config 162 interface 251 has no altsetting 0 [ 1651.072419][T16285] usb 2-1: config 162 interface 209 has no altsetting 0 [ 1651.082832][T16285] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88 [ 1651.092635][T16285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.101151][T10347] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1651.109824][T16285] usb 2-1: Product: syz [ 1651.114990][T16285] usb 2-1: Manufacturer: syz [ 1651.119918][T16285] usb 2-1: SerialNumber: syz [ 1651.214295][ T923] usb 6-1: Using ep0 maxpacket: 8 [ 1651.225130][ T923] usb 6-1: no configurations [ 1651.242727][ T923] usb 6-1: can't read configurations, error -22 [ 1651.264234][T10347] usb 7-1: Using ep0 maxpacket: 16 [ 1651.270549][T10347] usb 7-1: too many configurations: 60, using maximum allowed: 8 [ 1651.310017][T10347] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1651.322436][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1651.335046][T10347] usb 7-1: Product: syz [ 1651.339396][T10347] usb 7-1: Manufacturer: syz [ 1651.363913][T10347] usb 7-1: SerialNumber: syz [ 1651.398432][ T923] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1651.419485][T10347] usb 7-1: config 0 descriptor?? [ 1651.429608][T16285] io_edgeport 2-1:162.251: required endpoints missing [ 1651.447811][T10347] pwc: Philips SPC 880NC USB webcam detected. [ 1651.508094][T17203] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1651.526246][T17203] sq905c 4-1:0.0: probe with driver sq905c failed with error -110 [ 1651.588243][ T923] usb 6-1: Using ep0 maxpacket: 8 [ 1651.624194][ T5900] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1651.640300][T16285] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected [ 1651.663533][ T923] usb 6-1: no configurations [ 1651.678134][T24310] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4666'. [ 1651.756368][ T923] usb 6-1: can't read configurations, error -22 [ 1651.791137][ T5900] usb 3-1: config 0 has no interfaces? [ 1651.800609][ T923] usb usb6-port1: attempt power cycle [ 1651.810337][ T5900] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1651.822670][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.835926][ T5900] usb 3-1: Product: syz [ 1651.852371][ T5900] usb 3-1: Manufacturer: syz [ 1651.867839][ T5900] usb 3-1: SerialNumber: syz [ 1651.898849][ T5900] usb 3-1: config 0 descriptor?? [ 1652.032342][T16285] usb 2-1: ê’« ä€ detected [ 1652.143590][T24317] misc userio: Invalid payload size [ 1652.149840][T24317] misc userio: The device must be registered before sending interrupts [ 1652.185411][ T5913] usb 4-1: USB disconnect, device number 5 [ 1652.289927][T16285] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 1652.305200][ T923] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1652.335231][ T923] usb 6-1: Using ep0 maxpacket: 8 [ 1652.350591][ T923] usb 6-1: no configurations [ 1652.356740][T16285] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 1652.369762][ T923] usb 6-1: can't read configurations, error -22 [ 1652.392428][T10347] pwc: Warning: more than 1 configuration available. [ 1652.407420][T10347] pwc: Failed to set LED on/off time (-71) [ 1652.437389][T10347] pwc: send_video_command error -71 [ 1652.443742][T10347] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1652.452252][T10347] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1652.466219][T16285] usb 2-1: USB disconnect, device number 123 [ 1652.472294][ C1] usb 2-1: edge_interrupt_callback - Error -19 submitting control urb [ 1652.496740][T10347] usb 7-1: USB disconnect, device number 52 [ 1652.536362][ T923] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1652.549431][T16285] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 1652.587351][ T923] usb 6-1: Using ep0 maxpacket: 8 [ 1652.600713][ T923] usb 6-1: no configurations [ 1652.626127][T16285] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 1652.664853][ T923] usb 6-1: can't read configurations, error -22 [ 1652.673177][ T923] usb usb6-port1: unable to enumerate USB device [ 1652.693473][T16285] io_edgeport 2-1:162.209: device disconnected [ 1653.317715][T24328] netlink: 'syz.1.4671': attribute type 10 has an invalid length. [ 1653.335290][T24328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4671'. [ 1653.359326][T24328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4671'. [ 1653.384289][ T5899] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1653.538115][ T5899] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1653.581210][ T5899] usb 7-1: config 0 has no interface number 0 [ 1653.597383][ T5899] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.637366][ T5899] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.663334][ T5899] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1653.686602][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.715253][ T5899] usb 7-1: config 0 descriptor?? [ 1654.149557][ T5899] prodikeys 0003:041E:2801.0058: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.6-1/input1 [ 1654.169419][ T5899] hid_prodikeys: hid-prodikeys: failed to find output report [ 1654.169419][ T5899] [ 1654.270380][T24348] openvswitch: netlink: Key type 173 is out of range max 32 [ 1654.371926][T24326] fuse: Bad value for 'group_id' [ 1654.378549][T24326] fuse: Bad value for 'group_id' [ 1654.402840][T16285] usb 3-1: USB disconnect, device number 124 [ 1654.974482][T16285] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1655.042955][ T5899] usb 7-1: USB disconnect, device number 53 [ 1655.149220][T16285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.162600][T16285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.176777][T16285] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1655.213187][T16285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.235053][T16285] usb 3-1: config 0 descriptor?? [ 1655.644325][T10347] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1655.682907][T16285] hid-steam 0003:28DE:1142.0059: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1655.822380][T10347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.834122][T10347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.854000][T10347] usb 7-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1655.919865][T10347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.934876][T10347] usb 7-1: config 0 descriptor?? [ 1656.489454][T10347] hid-steam 0003:28DE:1142.005A: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.6-1/input0 [ 1657.505465][T10347] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1657.738519][ T5899] usb 3-1: USB disconnect, device number 125 [ 1657.784894][T10347] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1657.811512][T10347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.876033][T10347] usb 2-1: Product: syz [ 1657.898821][T10347] usb 2-1: Manufacturer: syz [ 1657.911185][T10347] usb 2-1: SerialNumber: syz [ 1657.938141][T10347] usb 2-1: config 0 descriptor?? [ 1657.967371][T24376] vivid-000: disconnect [ 1657.968175][T10347] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1657.981595][T24373] vivid-000: reconnect [ 1658.340587][T24386] netlink: 'syz.3.4684': attribute type 3 has an invalid length. [ 1658.444433][T16285] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1658.614014][T16285] usb 6-1: Using ep0 maxpacket: 8 [ 1658.620109][T16285] usb 6-1: no configurations [ 1658.638662][T16285] usb 6-1: can't read configurations, error -22 [ 1658.804003][T16285] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1658.874271][T10347] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1658.881958][T10347] sq905c 2-1:0.0: probe with driver sq905c failed with error -110 [ 1658.994246][T16285] usb 6-1: Using ep0 maxpacket: 8 [ 1659.011946][T16285] usb 6-1: no configurations [ 1659.023162][T16285] usb 6-1: can't read configurations, error -22 [ 1659.044441][T16285] usb usb6-port1: attempt power cycle [ 1659.206461][T10347] usb 7-1: USB disconnect, device number 54 [ 1659.331600][ T5900] usb 2-1: USB disconnect, device number 124 [ 1659.454528][T16285] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1659.474665][T16285] usb 6-1: Using ep0 maxpacket: 8 [ 1659.480410][T16285] usb 6-1: no configurations [ 1659.486005][T16285] usb 6-1: can't read configurations, error -22 [ 1659.554335][ T5899] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1659.613977][T16285] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1659.634785][T16285] usb 6-1: Using ep0 maxpacket: 8 [ 1659.640388][T16285] usb 6-1: no configurations [ 1659.646755][T16285] usb 6-1: can't read configurations, error -22 [ 1659.653313][T16285] usb usb6-port1: unable to enumerate USB device [ 1659.684191][T10347] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1659.703955][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 1659.710770][ T5899] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1659.719098][ T5899] usb 4-1: config 0 has no interface number 0 [ 1659.725769][ T5899] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1659.736198][ T5899] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1659.745584][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.753723][ T5899] usb 4-1: Product: syz [ 1659.758413][ T5899] usb 4-1: Manufacturer: syz [ 1659.763051][ T5899] usb 4-1: SerialNumber: syz [ 1659.770132][ T5899] usb 4-1: config 0 descriptor?? [ 1659.834039][T10347] usb 7-1: Using ep0 maxpacket: 32 [ 1659.841328][T10347] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1659.849920][T10347] usb 7-1: config 0 has no interface number 0 [ 1659.856947][T10347] usb 7-1: config 0 interface 132 has no altsetting 0 [ 1659.866855][T10347] usb 7-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 1659.876222][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.884992][T10347] usb 7-1: Product: syz [ 1659.889209][T10347] usb 7-1: Manufacturer: syz [ 1659.894419][T10347] usb 7-1: SerialNumber: syz [ 1659.907035][T10347] usb 7-1: config 0 descriptor?? [ 1660.001141][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4688'. [ 1660.029778][T24400] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1660.039698][T24400] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1660.170744][T10347] cdc_subset 7-1:0.132: probe with driver cdc_subset failed with error -71 [ 1660.204794][T10347] usb 7-1: USB disconnect, device number 55 [ 1660.220615][T14299] udevd[14299]: setting mode of /dev/bus/usb/007/055 to 020664 failed: No such file or directory [ 1660.231772][T14299] udevd[14299]: setting owner of /dev/bus/usb/007/055 to uid=0, gid=0 failed: No such file or directory [ 1660.599525][T24396] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1660.824899][T24396] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4686'. [ 1660.900795][T24408] openvswitch: netlink: Key type 173 is out of range max 32 [ 1661.040351][T24396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.057145][T24396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.094542][T24396] netlink: 'syz.3.4686': attribute type 1 has an invalid length. [ 1661.344775][ T5899] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1661.356390][ T5899] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1661.391309][ T5899] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1661.399557][ T5899] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1661.587076][ T5899] usb 4-1: USB disconnect, device number 6 [ 1661.604854][T17203] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1661.716474][T24414] netlink: zone id is out of range [ 1661.846052][T17203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.894360][T17203] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.925210][T17203] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1661.951195][T17203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.984382][ T5900] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1662.058058][T17203] usb 2-1: config 0 descriptor?? [ 1662.222262][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1662.233148][ T5900] usb 6-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.264432][T16285] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1662.295085][ T5900] usb 6-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 1662.319640][ T5900] usb 6-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1662.366373][ T5900] usb 6-1: config 66 interface 0 has no altsetting 0 [ 1662.499826][T16285] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1662.521505][T16285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.567260][T16285] usb 3-1: Product: syz [ 1662.582012][T16285] usb 3-1: Manufacturer: syz [ 1662.621443][T16285] usb 3-1: SerialNumber: syz [ 1662.646807][ T5900] usb 6-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 1662.656101][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.673983][ T5900] usb 6-1: Product: syz [ 1662.681400][ T5900] usb 6-1: Manufacturer: syz [ 1662.691880][ T5900] usb 6-1: SerialNumber: syz [ 1662.731460][T16285] usb 3-1: config 0 descriptor?? [ 1662.776315][T16285] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 126 [ 1663.176486][T16285] (null): failure reading functionality [ 1663.186815][T16285] i2c i2c-1: failure reading functionality [ 1663.217264][T16285] i2c i2c-1: connected i2c-tiny-usb device [ 1663.240499][ T5900] ati_remote2 6-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1 [ 1663.272276][T16285] usb 3-1: USB disconnect, device number 126 [ 1663.309439][ T5900] usb 6-1: USB disconnect, device number 49 [ 1664.164042][T10347] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1664.284056][T16285] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1664.320796][T10347] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1664.330946][T10347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.344552][T10347] usb 3-1: config 0 descriptor?? [ 1664.359354][T10347] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1664.444549][T16285] usb 4-1: Using ep0 maxpacket: 32 [ 1664.453051][T16285] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1664.462244][T16285] usb 4-1: config 0 has no interface number 0 [ 1664.469059][T16285] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1664.481279][T16285] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1664.491619][T16285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.500327][T16285] usb 4-1: Product: syz [ 1664.513012][T16285] usb 4-1: Manufacturer: syz [ 1664.519288][T16285] usb 4-1: SerialNumber: syz [ 1664.588762][T16285] usb 4-1: config 0 descriptor?? [ 1664.683949][T17203] usbhid 2-1:0.0: can't add hid device: -71 [ 1664.690012][T17203] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1664.749773][T17203] usb 2-1: USB disconnect, device number 125 [ 1664.766835][T24428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1664.810707][T24428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.152084][T24448] overlayfs: missing 'lowerdir' [ 1665.234288][T17203] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1665.344707][T10347] gspca_vc032x: reg_w err -110 [ 1665.353752][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.360001][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.366612][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.372092][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.378673][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.386235][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.391734][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.397930][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.403490][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.410902][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.414229][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 1665.422605][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.428417][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.430409][T17203] usb 7-1: no configurations [ 1665.435486][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.453241][T24433] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1665.468067][T17203] usb 7-1: can't read configurations, error -22 [ 1665.479298][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.503409][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.510467][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.521171][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.528260][T10347] gspca_vc032x: I2c Bus Busy Wait 00 [ 1665.536865][T10347] gspca_vc032x: Unknown sensor... [ 1665.542346][T10347] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1665.616378][T17203] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1665.679048][T24433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4699'. [ 1665.775032][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 1665.783180][T17203] usb 7-1: no configurations [ 1665.793923][T17203] usb 7-1: can't read configurations, error -22 [ 1665.808852][T17203] usb usb7-port1: attempt power cycle [ 1665.891364][T24433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1665.901347][T24433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1665.920357][T24433] netlink: 'syz.3.4699': attribute type 1 has an invalid length. [ 1666.154375][T17203] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1666.180276][T16285] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1666.194878][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 1666.194919][T16285] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1666.205341][T17203] usb 7-1: no configurations [ 1666.217727][T24459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1666.227035][T17203] usb 7-1: can't read configurations, error -22 [ 1666.233613][T16285] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1666.245965][T16285] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1666.266757][T16285] usb 4-1: USB disconnect, device number 7 [ 1666.364339][T17203] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1666.394584][T17203] usb 7-1: Using ep0 maxpacket: 8 [ 1666.408557][T17203] usb 7-1: no configurations [ 1666.418133][T17203] usb 7-1: can't read configurations, error -22 [ 1666.429990][T17203] usb usb7-port1: unable to enumerate USB device [ 1666.929656][T24468] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x30314142, 8, 0, 0, 0) [ 1666.986226][T24470] openvswitch: netlink: Key type 173 is out of range max 32 [ 1667.108055][T17203] usb 3-1: USB disconnect, device number 127 [ 1668.258190][ T5899] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1668.435509][T10347] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1668.455548][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.470193][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.500682][ T5899] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1668.530862][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.558663][ T5899] usb 4-1: config 0 descriptor?? [ 1668.567316][T24491] sctp: [Deprecated]: syz.1.4711 (pid 24491) Use of int in maxseg socket option. [ 1668.567316][T24491] Use struct sctp_assoc_value instead [ 1668.665660][T10347] usb 7-1: Using ep0 maxpacket: 32 [ 1668.683641][T10347] usb 7-1: config 7 has an invalid interface number: 98 but max is 1 [ 1668.728266][T10347] usb 7-1: config 7 has an invalid interface number: 224 but max is 1 [ 1668.749282][T10347] usb 7-1: config 7 has no interface number 0 [ 1668.756017][T10347] usb 7-1: config 7 has no interface number 1 [ 1668.763194][T10347] usb 7-1: config 7 interface 224 has no altsetting 0 [ 1668.776287][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.782611][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.798539][T10347] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55 [ 1668.808441][T10347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.816695][T10347] usb 7-1: Product: syz [ 1668.820897][T10347] usb 7-1: Manufacturer: syz [ 1668.825737][T10347] usb 7-1: SerialNumber: syz [ 1669.214740][T24489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1669.284965][T24489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1669.603693][T10347] usb 7-1: USB disconnect, device number 60 [ 1669.779504][T24496] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1669.871452][T12675] udevd[12675]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:7.224/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1670.054395][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1670.407630][ T5900] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.418255][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1670.449197][T24501] sctp: [Deprecated]: syz.6.4715 (pid 24501) Use of int in maxseg socket option. [ 1670.449197][T24501] Use struct sctp_assoc_value instead [ 1670.514340][ T5900] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1670.588362][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.661177][ T5900] usb 3-1: config 0 descriptor?? [ 1670.971196][T24506] FAULT_INJECTION: forcing a failure. [ 1670.971196][T24506] name failslab, interval 1, probability 0, space 0, times 0 [ 1671.032853][T24506] CPU: 1 UID: 0 PID: 24506 Comm: syz.1.4717 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1671.032886][T24506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1671.032899][T24506] Call Trace: [ 1671.032908][T24506] [ 1671.032919][T24506] dump_stack_lvl+0x189/0x250 [ 1671.032958][T24506] ? __pfx____ratelimit+0x10/0x10 [ 1671.032988][T24506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1671.033020][T24506] ? __pfx__printk+0x10/0x10 [ 1671.033049][T24506] ? __pfx___might_resched+0x10/0x10 [ 1671.033081][T24506] ? fs_reclaim_acquire+0x7d/0x100 [ 1671.033111][T24506] should_fail_ex+0x414/0x560 [ 1671.033141][T24506] should_failslab+0xa8/0x100 [ 1671.033184][T24506] __kmalloc_cache_noprof+0x70/0x3d0 [ 1671.033205][T24506] ? macvlan_common_newlink+0x5a3/0x1980 [ 1671.033234][T24506] macvlan_common_newlink+0x5a3/0x1980 [ 1671.033256][T24506] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 1671.033295][T24506] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1671.033323][T24506] ? __pfx_macvlan_newlink+0x10/0x10 [ 1671.033350][T24506] rtnl_newlink_create+0x310/0xb00 [ 1671.033384][T24506] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1671.033413][T24506] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1671.033434][T24506] ? rtnl_newlink+0x8db/0x1c70 [ 1671.033457][T24506] ? __pfx___mutex_lock+0x10/0x10 [ 1671.033499][T24506] ? ns_capable+0x8a/0xf0 [ 1671.033535][T24506] rtnl_newlink+0x16d6/0x1c70 [ 1671.033557][T24506] ? netlink_sendmsg+0x805/0xb30 [ 1671.033595][T24506] ? __pfx_rtnl_newlink+0x10/0x10 [ 1671.033641][T24506] ? kasan_quarantine_put+0xdd/0x220 [ 1671.033671][T24506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1671.033707][T24506] ? nlmon_xmit+0xb0/0x100 [ 1671.033733][T24506] ? kmem_cache_free+0x18f/0x400 [ 1671.033762][T24506] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1671.033793][T24506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1671.033826][T24506] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1671.033856][T24506] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1671.033889][T24506] ? __dev_queue_xmit+0x27e/0x3a70 [ 1671.033929][T24506] ? __lock_acquire+0xab9/0xd20 [ 1671.033985][T24506] ? __pfx_rtnl_newlink+0x10/0x10 [ 1671.034005][T24506] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1671.034030][T24506] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1671.034048][T24506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1671.034067][T24506] ? ref_tracker_free+0x63a/0x7d0 [ 1671.034091][T24506] ? __copy_skb_header+0xa7/0x550 [ 1671.034119][T24506] ? __pfx_ref_tracker_free+0x10/0x10 [ 1671.034145][T24506] ? __skb_clone+0x63/0x7a0 [ 1671.034185][T24506] netlink_rcv_skb+0x208/0x470 [ 1671.034209][T24506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1671.034231][T24506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1671.034268][T24506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.034290][T24506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1671.034319][T24506] netlink_unicast+0x75b/0x8d0 [ 1671.034351][T24506] netlink_sendmsg+0x805/0xb30 [ 1671.034386][T24506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.034413][T24506] ? __import_iovec+0x5d4/0x7f0 [ 1671.034430][T24506] ? aa_sock_msg_perm+0x94/0x160 [ 1671.034458][T24506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1671.034484][T24506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1671.034509][T24506] __sock_sendmsg+0x21c/0x270 [ 1671.034543][T24506] ____sys_sendmsg+0x505/0x830 [ 1671.034575][T24506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1671.034619][T24506] ___sys_sendmsg+0x21f/0x2a0 [ 1671.034646][T24506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1671.034711][T24506] ? __fget_files+0x2a/0x420 [ 1671.034734][T24506] ? __fget_files+0x3a0/0x420 [ 1671.034769][T24506] __sys_sendmsg+0x164/0x220 [ 1671.034796][T24506] ? __pfx___sys_sendmsg+0x10/0x10 [ 1671.034838][T24506] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1671.034870][T24506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1671.034901][T24506] __do_fast_syscall_32+0xb6/0x2b0 [ 1671.034933][T24506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1671.034966][T24506] do_fast_syscall_32+0x34/0x80 [ 1671.034997][T24506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1671.035023][T24506] RIP: 0023:0xf708e539 [ 1671.035041][T24506] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1671.035060][T24506] RSP: 002b:00000000f507e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1671.035081][T24506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1671.035097][T24506] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1671.035109][T24506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1671.035121][T24506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1671.035134][T24506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1671.035172][T24506] [ 1671.651996][T24508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4718'. [ 1671.904667][ T5899] usbhid 4-1:0.0: can't add hid device: -71 [ 1671.934589][T24508] netlink: 39 bytes leftover after parsing attributes in process `syz.5.4718'. [ 1671.944211][ T5899] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1672.014273][ T5899] usb 4-1: USB disconnect, device number 8 [ 1672.063408][ T5900] usb 3-1: string descriptor 0 read error: -71 [ 1672.073467][ T5900] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1672.110728][ T5900] usb 3-1: USB disconnect, device number 2 [ 1672.184493][T10347] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 1672.285464][T24520] openvswitch: netlink: Key type 173 is out of range max 32 [ 1672.537326][T10347] usb 6-1: config 0 has an invalid interface number: 113 but max is 0 [ 1672.552334][T10347] usb 6-1: config 0 has no interface number 0 [ 1672.577160][T10347] usb 6-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1672.597774][T10347] usb 6-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1672.626894][T10347] usb 6-1: config 0 interface 113 has no altsetting 0 [ 1672.662623][T10347] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1672.675630][T10347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.691458][T10347] usb 6-1: Product: syz [ 1672.696247][T10347] usb 6-1: Manufacturer: syz [ 1672.711021][T10347] usb 6-1: SerialNumber: syz [ 1672.748441][T10347] usb 6-1: config 0 descriptor?? [ 1672.766113][T10347] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1672.824855][T16285] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1672.970547][T24508] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4718'. [ 1673.010222][T24522] ptrace attach of "./syz-executor exec"[18375] was attempted by "./syz-executor exec"[24522] [ 1673.021703][T16285] usb 7-1: Using ep0 maxpacket: 8 [ 1673.065741][T16285] usb 7-1: no configurations [ 1673.070411][T16285] usb 7-1: can't read configurations, error -22 [ 1673.121159][ T5900] usb 6-1: USB disconnect, device number 50 [ 1673.223987][T16285] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1673.384167][T16285] usb 7-1: Using ep0 maxpacket: 8 [ 1673.390160][T16285] usb 7-1: no configurations [ 1673.395632][T16285] usb 7-1: can't read configurations, error -22 [ 1673.402660][T16285] usb usb7-port1: attempt power cycle [ 1673.515212][T24527] : renamed from bond0 [ 1673.524643][T24527] FAULT_INJECTION: forcing a failure. [ 1673.524643][T24527] name failslab, interval 1, probability 0, space 0, times 0 [ 1673.550129][T24527] CPU: 0 UID: 0 PID: 24527 Comm: syz.2.4724 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1673.550159][T24527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1673.550172][T24527] Call Trace: [ 1673.550181][T24527] [ 1673.550190][T24527] dump_stack_lvl+0x189/0x250 [ 1673.550228][T24527] ? __pfx____ratelimit+0x10/0x10 [ 1673.550258][T24527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1673.550289][T24527] ? __pfx__printk+0x10/0x10 [ 1673.550317][T24527] ? __pfx___might_resched+0x10/0x10 [ 1673.550347][T24527] ? fs_reclaim_acquire+0x7d/0x100 [ 1673.550376][T24527] should_fail_ex+0x414/0x560 [ 1673.550406][T24527] should_failslab+0xa8/0x100 [ 1673.550429][T24527] __kmalloc_noprof+0xcb/0x4f0 [ 1673.550448][T24527] ? kobject_rename+0xf9/0x420 [ 1673.550482][T24527] kobject_rename+0xf9/0x420 [ 1673.550520][T24527] ? __pfx_kobject_rename+0x10/0x10 [ 1673.550555][T24527] ? sysfs_rename_link_ns+0x178/0x1b0 [ 1673.550583][T24527] device_rename+0x15d/0x1f0 [ 1673.550610][T24527] netif_change_name+0x28c/0x960 [ 1673.550643][T24527] ? __mutex_lock+0x330/0xe80 [ 1673.550687][T24527] ? dev_change_name+0x125/0x260 [ 1673.550727][T24527] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1673.550753][T24527] ? __pfx_netif_change_name+0x10/0x10 [ 1673.550786][T24527] ? netdev_name_node_lookup+0xdf/0x120 [ 1673.550823][T24527] dev_change_name+0x125/0x260 [ 1673.550849][T24527] dev_ioctl+0x5ec/0x1150 [ 1673.550874][T24527] sock_do_ioctl+0x22c/0x300 [ 1673.550906][T24527] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1673.550952][T24527] compat_sock_ioctl+0xb8d/0xc80 [ 1673.550994][T24527] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1673.551026][T24527] ? __fget_files+0x3a0/0x420 [ 1673.551048][T24527] ? __fget_files+0x2a/0x420 [ 1673.551073][T24527] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1673.551107][T24527] __ia32_compat_sys_ioctl+0x543/0x840 [ 1673.551141][T24527] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1673.551172][T24527] ? __fget_files+0x3a0/0x420 [ 1673.551201][T24527] ? fput+0xa0/0xd0 [ 1673.551227][T24527] ? ksys_write+0x22a/0x250 [ 1673.551254][T24527] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1673.551284][T24527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.551315][T24527] __do_fast_syscall_32+0xb6/0x2b0 [ 1673.551346][T24527] ? lockdep_hardirqs_on+0x9c/0x150 [ 1673.551379][T24527] do_fast_syscall_32+0x34/0x80 [ 1673.551409][T24527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1673.551434][T24527] RIP: 0023:0xf70fe539 [ 1673.551452][T24527] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1673.551469][T24527] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1673.551491][T24527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008923 [ 1673.551506][T24527] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1673.551518][T24527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1673.551530][T24527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1673.551542][T24527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1673.551572][T24527] [ 1673.859304][ C0] vkms_vblank_simulate: vblank timer overrun [ 1674.087981][T24531] netlink: 'syz.2.4726': attribute type 9 has an invalid length. [ 1674.196509][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4725'. [ 1674.284340][T16285] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1674.314899][T16285] usb 7-1: Using ep0 maxpacket: 8 [ 1674.333675][T16285] usb 7-1: no configurations [ 1674.359888][T16285] usb 7-1: can't read configurations, error -22 [ 1674.414059][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1674.504219][T16285] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1674.524940][T16285] usb 7-1: Using ep0 maxpacket: 8 [ 1674.538807][T16285] usb 7-1: no configurations [ 1674.552181][T16285] usb 7-1: can't read configurations, error -22 [ 1674.564541][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 1674.579568][ T5900] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1674.600594][T16285] usb usb7-port1: unable to enumerate USB device [ 1674.634485][ T5900] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1674.643516][ T5900] usb 3-1: config 0 has no interface number 0 [ 1674.657937][ T5900] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1674.677244][ T5900] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1674.692017][ T5900] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1674.711491][ T5900] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1674.735249][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1674.752674][ T5900] usb 3-1: Product: syz [ 1674.770549][ T5900] usb 3-1: config 0 descriptor?? [ 1674.787096][T24533] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1675.380220][ T5900] usb 3-1: USB disconnect, device number 3 [ 1675.504909][T24554] openvswitch: netlink: Key type 173 is out of range max 32 [ 1675.614314][T16285] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1675.812277][T16285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.869061][T16285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.017470][T16285] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1676.069762][T16285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.117877][T16285] usb 4-1: config 0 descriptor?? [ 1677.552760][ T5900] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1677.767171][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 1677.869923][ T5900] usb 3-1: config 4 has an invalid interface number: 156 but max is 0 [ 1677.938081][ T5900] usb 3-1: config 4 has no interface number 0 [ 1677.957339][ T5900] usb 3-1: config 4 interface 156 has no altsetting 0 [ 1677.980773][ T5900] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1677.990610][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.035037][ T5900] usb 3-1: Product: syz [ 1678.071386][ T5900] usb 3-1: Manufacturer: syz [ 1678.084642][ T5900] usb 3-1: SerialNumber: syz [ 1678.138276][ T5900] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1678.157531][ T5900] usb 3-1: setting power ON [ 1678.189731][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 1678.240345][ T5900] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1678.479013][ T5900] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 1678.501003][ T5900] usb 3-1: media controller created [ 1678.649897][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1678.750964][ T5900] cxusb: set interface failed [ 1678.773540][T24581] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1678.781130][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 1678.815927][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1678.825130][T24581] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1678.854287][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1678.872081][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1678.882123][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1678.927902][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1678.964249][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1678.973935][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1678.979734][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1679.066645][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1679.123394][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1679.139321][ T5900] dvb-usb: bulk message failed: -22 (5/0) [ 1679.169639][ T5900] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1679.408275][T16285] usbhid 4-1:0.0: can't add hid device: -71 [ 1679.451744][T16285] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1679.510813][ T5900] DVB: Unable to find symbol mt352_attach() [ 1679.522537][T16285] usb 4-1: USB disconnect, device number 9 [ 1679.544057][ T5900] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 1679.853139][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4738'. [ 1679.855743][ T5900] rc_core: IR keymap rc-dvico-portable not found [ 1679.917432][ T5900] Registered IR keymap rc-empty [ 1679.957423][ T5900] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1680.047078][ T5900] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input157 [ 1680.312332][ T5900] dvb-usb: schedule remote query interval to 100 msecs. [ 1680.317257][T24605] openvswitch: netlink: Key type 173 is out of range max 32 [ 1680.336425][ T5900] usb 3-1: setting power OFF [ 1680.341255][ T5900] dvb-usb: bulk message failed: -22 (2/0) [ 1680.344425][T16285] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1680.351701][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 1680.361018][ T5900] usb 3-1: bluebird_gpio_write failed. [ 1680.371250][ T5900] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 1680.413308][ T5900] usb 3-1: USB disconnect, device number 4 [ 1680.529398][T16285] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1680.538725][ T5900] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 1680.576018][T16285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.602435][T16285] usb 7-1: Product: syz [ 1680.614520][T16285] usb 7-1: Manufacturer: syz [ 1680.620659][T16285] usb 7-1: SerialNumber: syz [ 1680.633370][T16285] usb 7-1: config 0 descriptor?? [ 1680.649958][T16285] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1681.051314][T24625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1681.063798][T24626] sctp: [Deprecated]: syz.2.4742 (pid 24626) Use of int in maxseg socket option. [ 1681.063798][T24626] Use struct sctp_assoc_value instead [ 1681.110390][T24625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4744'. [ 1681.144195][ T5900] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1681.309353][ T5900] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1681.323778][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.333678][ T5900] usb 2-1: Product: syz [ 1681.348873][ T5900] usb 2-1: Manufacturer: syz [ 1681.363730][ T5900] usb 2-1: SerialNumber: syz [ 1681.382107][ T5900] usb 2-1: config 0 descriptor?? [ 1681.554248][T16285] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1681.573704][T16285] sq905c 7-1:0.0: probe with driver sq905c failed with error -110 [ 1682.145489][T16285] usb 7-1: USB disconnect, device number 65 [ 1682.368558][ T5900] mos7840 2-1:0.0: required endpoints missing [ 1682.384307][ T5900] usb 2-1: USB disconnect, device number 126 [ 1682.622727][T24644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1683.084181][T16285] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1683.215421][ T5900] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1683.250882][T16285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1683.265043][T16285] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1683.277064][T16285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1683.291157][T16285] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1683.300659][T16285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.309171][T16285] usb 3-1: Product: syz [ 1683.313683][T16285] usb 3-1: Manufacturer: syz [ 1683.344016][T16285] usb 3-1: SerialNumber: syz [ 1683.351682][T16285] usb 3-1: config 0 descriptor?? [ 1683.363057][T24650] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1683.374418][T24650] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1683.394576][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1683.396166][T16285] usb 3-1: ucan: probing device on interface #0 [ 1683.429492][ T5900] usb 2-1: no configurations [ 1683.436127][ T5900] usb 2-1: can't read configurations, error -22 [ 1683.605027][T16285] usb 3-1: ucan: could not read protocol version, ret=-71 [ 1683.627086][T16285] usb 3-1: ucan: probe failed; try to update the device firmware [ 1683.668993][T16285] usb 3-1: USB disconnect, device number 5 [ 1683.745302][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1683.904391][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1683.914424][ T5900] usb 2-1: no configurations [ 1683.923071][ T5900] usb 2-1: can't read configurations, error -22 [ 1683.951744][ T5900] usb usb2-port1: attempt power cycle [ 1684.244501][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1684.356590][ T5900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1684.385212][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1684.391109][ T5900] usb 2-1: no configurations [ 1684.399523][ T5900] usb 2-1: can't read configurations, error -22 [ 1684.470126][ T5899] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1684.488584][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.489025][T24680] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4761'. [ 1684.532602][ T5899] usb 4-1: Product: syz [ 1684.537614][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1684.567274][ T5899] usb 4-1: Manufacturer: syz [ 1684.583872][ T5899] usb 4-1: SerialNumber: syz [ 1684.594806][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1684.604688][ T5900] usb 2-1: no configurations [ 1684.609353][ T5900] usb 2-1: can't read configurations, error -22 [ 1684.629692][ T5899] usb 4-1: config 0 descriptor?? [ 1684.646092][ T5900] usb usb2-port1: unable to enumerate USB device [ 1685.546401][ T923] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1685.554150][ T5899] mos7840 4-1:0.0: required endpoints missing [ 1685.557914][ T5899] usb 4-1: USB disconnect, device number 10 [ 1685.728195][ T923] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1685.737304][ T923] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1685.749050][ T923] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1685.758239][ T923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.766813][ T923] usb 6-1: Product: syz [ 1685.771013][ T923] usb 6-1: Manufacturer: syz [ 1685.775747][ T923] usb 6-1: SerialNumber: syz [ 1685.782757][ T923] usb 6-1: config 0 descriptor?? [ 1685.986712][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1686.184709][ T5899] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1686.229894][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.238853][ T5899] usb 4-1: Product: syz [ 1686.243075][ T5899] usb 4-1: Manufacturer: syz [ 1686.248316][ T5899] usb 4-1: SerialNumber: syz [ 1686.258662][ T5899] usb 4-1: config 0 descriptor?? [ 1686.280286][ T5899] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1686.473390][ T923] mos7840 6-1:0.0: required endpoints missing [ 1686.488431][ T923] usb 6-1: USB disconnect, device number 51 [ 1687.264202][ T923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1687.332034][ T5899] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1687.340438][ T5899] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 1687.371108][ T5899] usb 4-1: USB disconnect, device number 11 [ 1687.434241][ T923] usb 2-1: Using ep0 maxpacket: 16 [ 1687.440312][ T923] usb 2-1: too many configurations: 60, using maximum allowed: 8 [ 1687.458645][ T923] usb 2-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 1687.469292][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 1687.480435][ T923] usb 2-1: Product: syz [ 1687.484979][ T923] usb 2-1: Manufacturer: syz [ 1687.489665][ T923] usb 2-1: SerialNumber: syz [ 1687.494226][ T5929] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1687.504858][ T923] usb 2-1: config 0 descriptor?? [ 1687.518308][ T923] pwc: Philips SPC 880NC USB webcam detected. [ 1687.644508][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 1687.651613][ T5929] usb 6-1: config 4 has an invalid interface number: 156 but max is 0 [ 1687.661548][ T5929] usb 6-1: config 4 has no interface number 0 [ 1687.668115][ T5929] usb 6-1: config 4 interface 156 has no altsetting 0 [ 1687.678729][ T5929] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 1687.688934][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.697567][ T5929] usb 6-1: Product: syz [ 1687.701864][ T5929] usb 6-1: Manufacturer: syz [ 1687.706600][ T5929] usb 6-1: SerialNumber: syz [ 1687.721112][ T5929] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 1687.730264][T24715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4766'. [ 1687.739434][ T5929] usb 6-1: setting power ON [ 1687.744402][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 1687.763007][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1687.793371][ T5929] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 1687.813878][ T5929] usb 6-1: media controller created [ 1687.848133][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1687.874534][ T5929] cxusb: set interface failed [ 1687.895770][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 1687.907412][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1687.923590][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1687.944386][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1687.964487][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1687.994251][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1688.000950][ T923] pwc: Warning: more than 1 configuration available. [ 1688.008430][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1688.008457][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1688.022349][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1688.044329][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1688.050138][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1688.056032][ T5929] dvb-usb: bulk message failed: -22 (5/0) [ 1688.063106][ T5929] zl10353_read_register: readreg error (reg=127, ret==-121) [ 1688.063191][ T923] pwc: Failed to set LED on/off time (-71) [ 1688.082292][ T923] pwc: send_video_command error -71 [ 1688.114109][T24721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.123145][T24721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.148122][ T923] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1688.172038][ T923] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1688.201861][ T923] usb 2-1: USB disconnect, device number 5 [ 1688.220088][ T5929] DVB: Unable to find symbol mt352_attach() [ 1688.253201][ T5929] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 1688.280755][T16285] hid-generic 0000:0000:0000.005B: unknown main item tag 0x0 [ 1688.316162][T16285] hid-generic 0000:0000:0000.005B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1688.456783][ T5929] rc_core: IR keymap rc-dvico-portable not found [ 1688.475319][ T5929] Registered IR keymap rc-empty [ 1688.485971][ T5929] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1688.537642][ T5929] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input158 [ 1688.571831][ T5929] dvb-usb: schedule remote query interval to 100 msecs. [ 1688.600401][ T5929] usb 6-1: setting power OFF [ 1688.619429][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 1688.624635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888064110800: rx timeout, send abort [ 1688.636812][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888064110800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1688.643526][ T5929] dvb-usb: bulk message failed: -22 (3/0) [ 1688.685830][ T5929] usb 6-1: bluebird_gpio_write failed. [ 1688.697461][ T5929] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 1688.710983][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 1688.731438][ T5929] usb 6-1: USB disconnect, device number 52 [ 1688.809404][ T5929] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 1688.825634][T24741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4771'. [ 1688.837449][T16285] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1688.978603][T24748] openvswitch: netlink: Key type 173 is out of range max 32 [ 1689.027620][T16285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.038280][T16285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1689.050567][T16285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1689.297836][T16285] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1689.317397][T16285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.343962][T16285] usb 3-1: Product: syz [ 1689.348193][T16285] usb 3-1: Manufacturer: syz [ 1689.589612][T16285] usb 3-1: SerialNumber: syz [ 1689.652111][T16285] usb 3-1: config 0 descriptor?? [ 1689.711499][T16285] usb 3-1: ucan: probing device on interface #0 [ 1689.734370][T16285] usb 3-1: ucan: invalid EP count (1) [ 1689.750015][T16285] usb 3-1: ucan: probe failed; try to update the device firmware [ 1689.946373][T16285] usb 3-1: USB disconnect, device number 6 [ 1690.949554][T24771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4778'. [ 1690.999455][ T5913] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1691.194420][ T5913] usb 3-1: no configurations [ 1691.202324][ T5913] usb 3-1: can't read configurations, error -22 [ 1691.241420][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4780'. [ 1691.284439][ T5899] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1691.405676][ T5913] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1691.456636][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.479482][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.534618][ T5899] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1691.592333][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.594782][ T5913] usb 3-1: no configurations [ 1691.621182][ T5899] usb 4-1: config 0 descriptor?? [ 1691.664340][ T5913] usb 3-1: can't read configurations, error -22 [ 1691.726807][ T5913] usb usb3-port1: attempt power cycle [ 1692.084727][ T5899] samsung 0003:0419:0600.005C: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 1692.130182][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1692.199618][ T5913] usb 3-1: no configurations [ 1692.204715][ T5913] usb 3-1: can't read configurations, error -22 [ 1692.264413][T24773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1692.277477][T24773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.312542][T16285] usb 4-1: USB disconnect, device number 12 [ 1692.365035][ T5913] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1692.405164][ T5913] usb 3-1: no configurations [ 1692.409845][ T5913] usb 3-1: can't read configurations, error -22 [ 1692.432796][ T5913] usb usb3-port1: unable to enumerate USB device [ 1692.503393][T24793] vxcan1: tx address claim with different name [ 1692.729021][T24801] ipvlan3: entered allmulticast mode [ 1692.739812][T24801] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 1693.297190][T24829] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1693.317710][T24828] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1693.830733][T24841] netlink: 'syz.5.4808': attribute type 39 has an invalid length. [ 1693.985435][T24845] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1694.025196][T24845] team0: Port device batadv1 added [ 1694.379852][T24859] tipc: Started in network mode [ 1694.413300][T24859] tipc: Node identity ded60c4255ea, cluster identity 4711 [ 1694.456864][T24859] tipc: Enabled bearer , priority 0 [ 1694.470306][T24863] syzkaller0: entered promiscuous mode [ 1694.505306][T24863] syzkaller0: entered allmulticast mode [ 1694.584230][T24859] tipc: Resetting bearer [ 1694.617332][T24857] tipc: Resetting bearer [ 1694.713349][T24857] tipc: Disabling bearer [ 1694.959464][T24886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1695.433625][T24905] netlink: 'syz.6.4837': attribute type 9 has an invalid length. [ 1695.452143][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4837'. [ 1696.083059][T24914] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4841'. [ 1697.913719][T24907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4838'. [ 1698.120906][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1698.315821][T24945] sctp: [Deprecated]: syz.1.4853 (pid 24945) Use of int in max_burst socket option deprecated. [ 1698.315821][T24945] Use struct sctp_assoc_value instead [ 1698.398435][T24946] pim6reg1: entered promiscuous mode [ 1698.403790][T24946] pim6reg1: entered allmulticast mode [ 1698.961943][T24972] netlink: 'syz.5.4863': attribute type 10 has an invalid length. [ 1699.058581][T24932] netlink: 'syz.6.4851': attribute type 12 has an invalid length. [ 1699.137219][T24972] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1699.172846][T24973] tipc: Enabled bearer , priority 0 [ 1699.204755][T24976] syzkaller0: entered promiscuous mode [ 1699.210308][T24976] syzkaller0: entered allmulticast mode [ 1699.497855][T24970] tipc: Resetting bearer [ 1699.564238][T24964] tipc: Resetting bearer [ 1699.705339][T24964] tipc: Disabling bearer [ 1699.799825][T24995] syzkaller1: entered promiscuous mode [ 1699.825713][T24995] syzkaller1: entered allmulticast mode [ 1700.157274][T25014] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4883'. [ 1700.817670][T25040] tipc: Enabled bearer , priority 0 [ 1700.842564][T25040] syzkaller0: entered promiscuous mode [ 1700.853166][T25047] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1700.861073][T25040] syzkaller0: entered allmulticast mode [ 1700.868115][T25047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1700.931402][T25040] tipc: Resetting bearer [ 1700.972923][T25039] tipc: Resetting bearer [ 1701.026071][T25051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4900'. [ 1701.064387][T25039] tipc: Disabling bearer [ 1701.075940][T25051] hsr_slave_0: left promiscuous mode [ 1701.082086][T25051] hsr_slave_1: left promiscuous mode [ 1702.813293][T25116] gretap1: entered promiscuous mode [ 1702.823922][T25116] gretap1: entered allmulticast mode [ 1703.375912][T25135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1703.766714][T25152] netlink: 'syz.6.4946': attribute type 10 has an invalid length. [ 1703.794522][T25152] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4946'. [ 1703.817875][T25152] dummy0: entered promiscuous mode [ 1703.830330][T25152] bridge0: port 4(dummy0) entered blocking state [ 1703.845907][T25152] bridge0: port 4(dummy0) entered disabled state [ 1703.871019][T25152] dummy0: entered allmulticast mode [ 1703.901730][T25152] bridge0: port 4(dummy0) entered blocking state [ 1703.908376][T25152] bridge0: port 4(dummy0) entered forwarding state [ 1704.207994][T25168] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1705.061793][T25202] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4970'. [ 1705.439552][T25222] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1705.816439][T25232] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4984'. [ 1705.818121][T25234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1705.838261][T25232] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4984'. [ 1705.855778][T25232] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1706.207085][T25247] tipc: Enabled bearer , priority 0 [ 1706.254945][T25247] syzkaller0: entered promiscuous mode [ 1706.260488][T25247] syzkaller0: entered allmulticast mode [ 1706.339284][T25247] tipc: Resetting bearer [ 1706.361001][T25257] openvswitch: netlink: Message has 4 unknown bytes. [ 1706.390155][T25246] tipc: Resetting bearer [ 1706.497085][T25261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1706.511213][T25246] tipc: Disabling bearer [ 1706.831193][T25278] pim6reg1: entered promiscuous mode [ 1706.850231][T25278] pim6reg1: entered allmulticast mode [ 1707.295824][T25301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.753483][T25320] sctp: [Deprecated]: syz.1.5026 (pid 25320) Use of int in maxseg socket option. [ 1707.753483][T25320] Use struct sctp_assoc_value instead [ 1707.891423][T25329] tipc: Started in network mode [ 1707.896768][T25329] tipc: Node identity ded05af54e23, cluster identity 4711 [ 1707.905490][T25329] tipc: Enabled bearer , priority 0 [ 1707.915487][T25329] syzkaller0: entered promiscuous mode [ 1707.927989][T25329] syzkaller0: entered allmulticast mode [ 1707.943476][T25329] tipc: Resetting bearer [ 1707.957830][T25327] tipc: Resetting bearer [ 1707.972851][T25331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.983196][T25327] tipc: Disabling bearer [ 1708.062900][T25333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5032'. [ 1708.457692][T25342] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5036'. [ 1708.771669][T25354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1709.017455][T25368] netlink: 'syz.3.5049': attribute type 10 has an invalid length. [ 1709.028884][T25368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5049'. [ 1709.356207][T25379] tipc: Enabled bearer , priority 0 [ 1709.374664][T25379] syzkaller0: entered promiscuous mode [ 1709.380264][T25379] syzkaller0: entered allmulticast mode [ 1709.410291][T25379] tipc: Resetting bearer [ 1709.433029][T25377] tipc: Resetting bearer [ 1709.434070][T25384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1709.483128][T25377] tipc: Disabling bearer [ 1709.693173][T25394] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1709.966802][T25404] batadv_slave_0: entered promiscuous mode [ 1709.971542][T25407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1710.094771][T25411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.376106][T25424] tipc: Enabled bearer , priority 0 [ 1710.395144][T25424] syzkaller0: entered promiscuous mode [ 1710.400699][T25424] syzkaller0: entered allmulticast mode [ 1710.450847][T25424] tipc: Resetting bearer [ 1710.482436][T25420] tipc: Resetting bearer [ 1710.556021][T25420] tipc: Disabling bearer [ 1710.731076][T25439] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1710.778512][T25439] team0: Port device batadv1 added [ 1710.791848][T25443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1711.015669][T25451] netlink: 'syz.1.5086': attribute type 21 has an invalid length. [ 1711.047479][T25451] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1711.067500][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1711.078989][T25451] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5086'. [ 1711.393224][T25464] tipc: Enabled bearer , priority 0 [ 1711.403259][T25464] syzkaller0: entered promiscuous mode [ 1711.409533][T25464] syzkaller0: entered allmulticast mode [ 1711.423517][T25464] tipc: Resetting bearer [ 1711.440454][T25463] tipc: Resetting bearer [ 1711.492998][T25463] tipc: Disabling bearer [ 1711.948871][T25491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5103'. [ 1712.132783][T25486] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1712.157840][T25486] bridge0: port 1(batadv0) entered disabled state [ 1712.473630][T25509] tipc: Started in network mode [ 1712.494135][T25509] tipc: Node identity 5278419d96b8, cluster identity 4711 [ 1712.502252][T25509] tipc: Enabled bearer , priority 0 [ 1712.511807][T25509] syzkaller0: entered promiscuous mode [ 1712.518601][T25509] syzkaller0: entered allmulticast mode [ 1712.633449][T25509] tipc: Resetting bearer [ 1712.677333][T25508] tipc: Resetting bearer [ 1712.724573][T25508] tipc: Disabling bearer [ 1712.752355][T25520] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5115'. [ 1712.782313][T25519] tipc: Enabled bearer , priority 0 [ 1712.805834][T25519] syzkaller0: entered promiscuous mode [ 1712.821690][T25519] syzkaller0: entered allmulticast mode [ 1712.899450][T25519] tipc: Resetting bearer [ 1712.935308][T25517] tipc: Resetting bearer [ 1713.005418][T25517] tipc: Disabling bearer [ 1713.119028][T25535] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5123'. [ 1713.488982][T25550] tipc: Enabled bearer , priority 0 [ 1713.547991][T25550] syzkaller0: entered promiscuous mode [ 1713.553637][T25550] syzkaller0: entered allmulticast mode [ 1713.629682][T25555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5131'. [ 1713.639044][T25557] tipc: Enabled bearer , priority 0 [ 1713.648622][T25550] tipc: Resetting bearer [ 1713.667673][T25553] syzkaller0: entered promiscuous mode [ 1713.673258][T25553] syzkaller0: entered allmulticast mode [ 1713.700433][T25549] tipc: Resetting bearer [ 1713.739452][T25549] tipc: Disabling bearer [ 1713.797906][T25553] tipc: Resetting bearer [ 1713.824689][T25552] tipc: Resetting bearer [ 1713.945371][T25552] tipc: Disabling bearer [ 1713.999014][T25570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 1714.267561][T25578] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5140'. [ 1714.596430][T25596] tipc: Enabled bearer , priority 0 [ 1714.612108][T25596] syzkaller0: entered promiscuous mode [ 1714.619301][T25596] syzkaller0: entered allmulticast mode [ 1714.662129][T25596] tipc: Resetting bearer [ 1714.671046][T25594] tipc: Resetting bearer [ 1714.707889][T25594] tipc: Disabling bearer [ 1714.932744][T25609] vxcan1: tx address claim with different name [ 1715.476560][T25625] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1715.495278][T25625] team0: Port device batadv2 added [ 1715.521763][T25628] bridge2: entered allmulticast mode [ 1715.580603][T25635] syz_tun: entered allmulticast mode [ 1715.607907][T25630] tipc: Enabled bearer , priority 0 [ 1715.624856][T25635] syz_tun: left allmulticast mode [ 1715.635225][T25630] syzkaller0: entered promiscuous mode [ 1715.640745][T25630] syzkaller0: entered allmulticast mode [ 1715.696081][T25630] tipc: Resetting bearer [ 1715.742314][T25629] tipc: Resetting bearer [ 1715.799672][T25629] tipc: Disabling bearer [ 1715.912062][T25645] netlink: 204 bytes leftover after parsing attributes in process `syz.5.5171'. [ 1715.942270][T25645] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5171'. [ 1716.210077][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 1716.544641][T25670] tipc: Enabled bearer , priority 0 [ 1716.574628][T25670] syzkaller0: entered promiscuous mode [ 1716.580176][T25670] syzkaller0: entered allmulticast mode [ 1716.660247][T25669] tipc: Resetting bearer [ 1716.725127][T25669] tipc: Disabling bearer [ 1716.829570][T25683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1717.283230][T25702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1717.311827][T25702] team0: Port device batadv1 added [ 1717.668098][T25712] tipc: Enabled bearer , priority 0 [ 1717.692816][T25712] syzkaller0: entered promiscuous mode [ 1717.700340][T25715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1717.713046][T25712] syzkaller0: entered allmulticast mode [ 1717.838288][T25710] tipc: Resetting bearer [ 1717.939733][T25710] tipc: Disabling bearer [ 1718.252365][T25736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5210'. [ 1718.438934][T25743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1718.485364][T25740] tipc: Enabled bearer , priority 0 [ 1718.493275][T25740] syzkaller0: entered promiscuous mode [ 1718.502395][T25740] syzkaller0: entered allmulticast mode [ 1718.590852][T25740] tipc: Resetting bearer [ 1718.644380][T25739] tipc: Resetting bearer [ 1718.733637][T25739] tipc: Disabling bearer [ 1718.784700][T25755] tipc: Enabled bearer , priority 0 [ 1718.856627][T25753] gretap1: entered promiscuous mode [ 1718.869370][T25753] gretap1: entered allmulticast mode [ 1718.890042][T25755] syzkaller0: entered promiscuous mode [ 1718.909520][T25755] syzkaller0: entered allmulticast mode [ 1719.066077][T25754] tipc: Resetting bearer [ 1719.156818][T25754] tipc: Disabling bearer [ 1719.843068][T25793] bridge0: entered allmulticast mode [ 1720.025679][T25802] tipc: Enabled bearer , priority 0 [ 1720.063097][T25802] syzkaller0: entered promiscuous mode [ 1720.082075][T25802] syzkaller0: entered allmulticast mode [ 1720.132859][T25798] tipc: Resetting bearer [ 1720.278598][T25798] tipc: Disabling bearer [ 1720.316864][T25809] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1720.343704][T25809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1720.681867][T25827] syzkaller1: entered promiscuous mode [ 1720.697322][T25827] syzkaller1: entered allmulticast mode [ 1720.906946][T25829] netlink: 'syz.3.5255': attribute type 3 has an invalid length. [ 1721.125338][T25843] gretap1: entered promiscuous mode [ 1721.136737][T25843] gretap1: entered allmulticast mode [ 1721.152816][T25841] tipc: Enabled bearer , priority 0 [ 1721.172854][T25841] syzkaller0: entered promiscuous mode [ 1721.182220][T25841] syzkaller0: entered allmulticast mode [ 1721.258002][T25840] tipc: Resetting bearer [ 1721.376148][T25840] tipc: Disabling bearer [ 1721.587089][T25861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5268'. [ 1722.251384][T25890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5279'. [ 1722.503733][T25894] tipc: Enabled bearer , priority 0 [ 1722.512425][T25894] syzkaller0: entered promiscuous mode [ 1722.544252][T25894] syzkaller0: entered allmulticast mode [ 1722.562554][T25900] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 1722.624040][T25893] tipc: Resetting bearer [ 1722.697187][T25893] tipc: Disabling bearer [ 1723.248731][T25930] gretap1: entered promiscuous mode [ 1723.284422][T25930] gretap1: entered allmulticast mode [ 1723.455666][T25935] tipc: Enabled bearer , priority 0 [ 1723.475600][T25935] tipc: Resetting bearer [ 1723.526578][T25934] tipc: Disabling bearer [ 1724.081847][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5315'. [ 1724.128891][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5316'. [ 1724.336516][T25973] tipc: Enabled bearer , priority 0 [ 1724.364578][T25973] syzkaller0: entered promiscuous mode [ 1724.370113][T25973] syzkaller0: entered allmulticast mode [ 1724.405704][T25977] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5321'. [ 1724.511982][T25981] tipc: Resetting bearer [ 1724.541731][T25970] tipc: Resetting bearer [ 1724.604755][T25970] tipc: Disabling bearer [ 1724.854891][T25996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5339'. [ 1725.038668][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5331'. [ 1725.050749][T26007] bridge4: entered allmulticast mode [ 1727.429482][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5336'. [ 1727.526482][T26024] tipc: Enabled bearer , priority 0 [ 1727.554996][T26024] syzkaller0: entered promiscuous mode [ 1727.560534][T26024] syzkaller0: entered allmulticast mode [ 1727.606779][T26028] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1727.634052][T26028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1727.674305][T26033] tipc: Resetting bearer [ 1727.697976][T26023] tipc: Resetting bearer [ 1727.787805][T26023] tipc: Disabling bearer [ 1728.057998][T26043] bridge2: entered allmulticast mode [ 1728.154682][T26051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5353'. [ 1728.250289][T26054] vxcan1: tx address claim with dest, not broadcast [ 1728.576723][T26065] tipc: Enabled bearer , priority 0 [ 1728.612262][T26065] syzkaller0: entered promiscuous mode [ 1728.633234][T26065] syzkaller0: entered allmulticast mode [ 1728.806668][T26073] tipc: Resetting bearer [ 1728.906105][T26064] tipc: Resetting bearer [ 1729.007855][T26064] tipc: Disabling bearer [ 1729.038249][T26089] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5371'. [ 1729.510067][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1729.798617][T26116] bridge3: entered allmulticast mode [ 1729.882997][T26122] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1729.902905][T26122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1730.058026][T26128] tipc: Enabled bearer , priority 0 [ 1730.087371][T26128] syzkaller0: entered promiscuous mode [ 1730.093033][T26128] syzkaller0: entered allmulticast mode [ 1730.183368][T26137] tipc: Resetting bearer [ 1730.215581][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.221969][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.254256][T26127] tipc: Resetting bearer [ 1730.364869][T26127] tipc: Disabling bearer [ 1730.411187][T26146] vxcan1: tx address claim with dest, not broadcast [ 1730.613357][T26154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5401'. [ 1730.976229][T26166] gretap1: entered promiscuous mode [ 1730.981526][T26166] gretap1: entered allmulticast mode [ 1731.260613][T26181] vxcan1: tx address claim with dest, not broadcast [ 1731.267990][T26178] bridge3: entered allmulticast mode [ 1731.747995][T26197] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5422'. [ 1731.842239][T26206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5425'. [ 1733.465037][T26273] tipc: Enabled bearer , priority 0 [ 1733.525496][T26273] tipc: Resetting bearer [ 1733.547768][T26272] tipc: Disabling bearer [ 1733.680233][T26282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5460'. [ 1734.012363][T26296] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5467'. [ 1734.290343][T26305] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5471'. [ 1734.308429][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5473'. [ 1734.859569][T26329] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1734.897218][T26329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.038877][T26337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5486'. [ 1735.155465][T26340] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5488'. [ 1735.171921][T26340] bridge0: left allmulticast mode [ 1735.290133][T26342] tipc: Enabled bearer , priority 0 [ 1735.298203][T26342] syzkaller0: entered promiscuous mode [ 1735.305724][T26342] syzkaller0: entered allmulticast mode [ 1735.318640][T26342] tipc: Resetting bearer [ 1735.328815][T26341] tipc: Resetting bearer [ 1735.377032][T26341] tipc: Disabling bearer [ 1735.539490][T26350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 1735.732463][T26358] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1735.745516][T26358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1735.910039][T26365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5500'. [ 1736.069347][T26369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5503'. [ 1736.299578][T26378] tipc: Enabled bearer , priority 0 [ 1736.334262][T26378] tipc: Resetting bearer [ 1736.359384][T26377] tipc: Disabling bearer [ 1736.740361][T26398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 1737.360211][T26419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1737.400814][T26419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5527'. [ 1737.564538][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5531'. [ 1738.172343][T26459] netlink: 392 bytes leftover after parsing attributes in process `syz.6.5544'. [ 1738.259921][T26463] tipc: Enabled bearer , priority 0 [ 1738.298518][T26463] syzkaller0: entered promiscuous mode [ 1738.344123][T26463] syzkaller0: entered allmulticast mode [ 1738.412250][T26463] tipc: Resetting bearer [ 1738.464122][T26462] tipc: Resetting bearer [ 1738.568263][T26462] tipc: Disabling bearer [ 1738.640992][T26479] tipc: Enabled bearer , priority 0 [ 1738.664528][T26479] syzkaller0: entered promiscuous mode [ 1738.692439][T26479] syzkaller0: entered allmulticast mode [ 1738.808222][T26479] tipc: Resetting bearer [ 1738.815722][T26485] tipc: Enabled bearer , priority 0 [ 1738.856856][T26476] tipc: Resetting bearer [ 1738.941825][T26476] tipc: Disabling bearer [ 1738.996887][T26485] tipc: Resetting bearer [ 1739.037343][T26483] tipc: Disabling bearer [ 1739.507179][T26512] tipc: Enabled bearer , priority 0 [ 1739.524214][T26512] syzkaller0: entered promiscuous mode [ 1739.536898][T26512] syzkaller0: entered allmulticast mode [ 1739.577894][T26512] tipc: Resetting bearer [ 1739.628944][T26511] tipc: Resetting bearer [ 1739.735034][T26511] tipc: Disabling bearer [ 1739.777925][T26527] bridge5: entered allmulticast mode [ 1739.984418][T26531] wireguard0: entered promiscuous mode [ 1740.005643][T26531] wireguard0: entered allmulticast mode [ 1740.540364][T26560] __nla_validate_parse: 5 callbacks suppressed [ 1740.540379][T26560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5587'. [ 1740.690194][T26565] bridge2: entered allmulticast mode [ 1740.965876][T26573] tipc: Enabled bearer , priority 0 [ 1740.984342][T26573] syzkaller0: entered promiscuous mode [ 1740.989886][T26573] syzkaller0: entered allmulticast mode [ 1741.022380][T26573] tipc: Resetting bearer [ 1741.064547][T26572] tipc: Resetting bearer [ 1741.145074][T26572] tipc: Disabling bearer [ 1741.511501][T26599] tipc: Enabled bearer , priority 0 [ 1741.523760][T26599] tipc: Resetting bearer [ 1741.557453][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1741.630184][T26593] tipc: Disabling bearer [ 1741.781753][T26610] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5609'. [ 1741.858562][T26612] tipc: Enabling of bearer rejected, failed to enable media [ 1741.950478][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5611'. [ 1742.329469][T26632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1742.503188][T26636] tipc: Enabling of bearer rejected, failed to enable media [ 1742.541026][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5623'. [ 1742.598641][T26641] tipc: Enabling of bearer rejected, failed to enable media [ 1742.733718][T26648] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5626'. [ 1743.087513][T26663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5634'. [ 1743.321647][T26673] tipc: Enabling of bearer rejected, failed to enable media [ 1743.846307][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5650'. [ 1743.950024][T26699] tipc: Enabled bearer , priority 0 [ 1743.983748][T26699] syzkaller0: entered promiscuous mode [ 1744.002298][T26699] syzkaller0: entered allmulticast mode [ 1744.027686][T26702] tipc: Enabling of bearer rejected, failed to enable media [ 1744.129722][T26698] tipc: Resetting bearer [ 1744.212386][T26698] tipc: Disabling bearer [ 1744.330902][T26715] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5657'. [ 1744.766240][T26732] tipc: Enabling of bearer rejected, failed to enable media [ 1745.556821][T26765] tipc: Enabling of bearer rejected, failed to enable media [ 1745.578386][T26767] __nla_validate_parse: 3 callbacks suppressed [ 1745.578408][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5681'. [ 1746.300127][T26791] tipc: Enabled bearer , priority 0 [ 1746.322095][T26791] syzkaller0: entered promiscuous mode [ 1746.342429][T26791] syzkaller0: entered allmulticast mode [ 1746.492527][T26790] tipc: Resetting bearer [ 1746.556717][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5696'. [ 1746.573001][T26790] tipc: Disabling bearer [ 1746.667348][T26802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5698'. [ 1746.668086][T26805] tipc: Enabling of bearer rejected, failed to enable media [ 1747.389650][T26834] tipc: Enabling of bearer rejected, failed to enable media [ 1747.518991][T26836] bridge5: entered allmulticast mode [ 1747.675466][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5715'. [ 1748.182912][T26867] tipc: Enabled bearer , priority 0 [ 1748.194820][T26867] syzkaller0: entered promiscuous mode [ 1748.200365][T26867] syzkaller0: entered allmulticast mode [ 1748.269435][T26866] tipc: Resetting bearer [ 1748.327916][T26866] tipc: Disabling bearer [ 1748.383494][T26870] bridge4: entered allmulticast mode [ 1748.654711][T26884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5733'. [ 1749.051352][T26901] tipc: Enabled bearer , priority 0 [ 1749.083410][T26901] tipc: Resetting bearer [ 1749.112385][T26900] tipc: Disabling bearer [ 1749.169330][T26903] tipc: Enabled bearer , priority 0 [ 1749.189761][T26903] tipc: Resetting bearer [ 1749.247692][T26902] tipc: Disabling bearer [ 1749.768494][T26927] tipc: Enabled bearer , priority 0 [ 1749.805336][T26927] syzkaller0: entered promiscuous mode [ 1749.824631][T26927] syzkaller0: entered allmulticast mode [ 1749.997645][T26926] tipc: Resetting bearer [ 1750.101896][T26926] tipc: Disabling bearer [ 1750.184603][T26943] tipc: Enabled bearer , priority 0 [ 1750.238331][T26937] tipc: Resetting bearer [ 1750.281431][T26936] tipc: Disabling bearer [ 1750.634909][T26949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5761'. [ 1751.020074][T26973] tipc: Enabled bearer , priority 0 [ 1751.051563][T26973] syzkaller0: entered promiscuous mode [ 1751.071100][T26973] syzkaller0: entered allmulticast mode [ 1751.193047][T26972] tipc: Resetting bearer [ 1751.265353][T26972] tipc: Disabling bearer [ 1751.346952][T26985] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5774'. [ 1751.401063][T26987] bridge4: entered allmulticast mode [ 1752.150445][T27018] tipc: Enabled bearer , priority 0 [ 1752.173345][T27018] tipc: Resetting bearer [ 1752.268851][T27017] tipc: Disabling bearer [ 1752.783087][T27036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 1752.876620][T27044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5790'. [ 1753.316821][T27053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5803'. [ 1753.353955][T27053] openvswitch: netlink: Flow actions attr not present in new flow. [ 1753.523344][T27058] bridge5: entered allmulticast mode [ 1753.799774][T27068] tipc: Enabled bearer , priority 0 [ 1753.847427][T27068] tipc: Resetting bearer [ 1753.896579][T27065] tipc: Disabling bearer [ 1754.153201][T27085] openvswitch: netlink: Flow actions attr not present in new flow. [ 1754.325763][T27094] bridge6: entered allmulticast mode [ 1754.343637][T27090] syzkaller0: entered promiscuous mode [ 1754.350095][T27090] syzkaller0: entered allmulticast mode [ 1754.513529][T27100] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5823'. [ 1754.644961][T27105] netlink: 'syz.5.5825': attribute type 9 has an invalid length. [ 1754.653013][T27105] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5825'. [ 1754.913255][T27115] openvswitch: netlink: Flow actions attr not present in new flow. [ 1755.064425][T27118] netlink: 'syz.3.5832': attribute type 11 has an invalid length. [ 1755.120323][T27124] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1755.146508][T27123] syzkaller0: entered promiscuous mode [ 1755.165435][T27123] syzkaller0: entered allmulticast mode [ 1755.370131][T27132] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5839'. [ 1755.567724][T27137] openvswitch: netlink: Flow actions attr not present in new flow. [ 1755.816707][T27150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5848'. [ 1755.967671][T27156] syzkaller0: entered promiscuous mode [ 1755.982677][T27156] syzkaller0: entered allmulticast mode [ 1756.342029][T27165] openvswitch: netlink: Message has 24 unknown bytes. [ 1756.358863][T27165] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1756.501764][T27169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5856'. [ 1756.559643][T27172] syzkaller0: entered promiscuous mode [ 1756.573914][T27172] syzkaller0: entered allmulticast mode [ 1756.660984][T27177] netlink: 'syz.5.5859': attribute type 9 has an invalid length. [ 1756.679247][T27177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1757.195989][T27184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1757.309658][T27188] bridge10: entered allmulticast mode [ 1757.638835][T27197] syzkaller0: entered promiscuous mode [ 1757.684064][T27197] syzkaller0: entered allmulticast mode [ 1757.897418][T27200] syzkaller0: entered promiscuous mode [ 1757.903330][T27200] syzkaller0: entered allmulticast mode [ 1758.093515][T27207] netlink: 'syz.5.5871': attribute type 9 has an invalid length. [ 1758.116455][T27207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5871'. [ 1758.172173][T27209] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5872'. [ 1758.337674][T27213] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5875'. [ 1758.729996][T27233] syzkaller0: entered promiscuous mode [ 1758.749635][T27233] syzkaller0: entered allmulticast mode [ 1758.923754][T27239] netlink: 'syz.3.5885': attribute type 9 has an invalid length. [ 1758.936661][T27239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 1759.035886][T27243] openvswitch: netlink: Message has 24 unknown bytes. [ 1759.042777][T27243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.192809][T27246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5888'. [ 1759.616379][T27259] bridge6: entered allmulticast mode [ 1759.872036][T27269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5897'. [ 1760.060457][T27275] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1760.104395][T27275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1760.461595][T27294] syzkaller0: entered promiscuous mode [ 1760.489012][T27294] syzkaller0: entered allmulticast mode [ 1760.902096][T27314] syzkaller0: entered promiscuous mode [ 1760.907964][T27314] syzkaller0: entered allmulticast mode [ 1760.979691][T27318] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5917'. [ 1760.995156][T27317] syzkaller0: entered promiscuous mode [ 1761.000705][T27317] syzkaller0: entered allmulticast mode [ 1761.175887][ T5831] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1761.308840][T27327] syzkaller0: entered promiscuous mode [ 1761.333971][T27327] syzkaller0: entered allmulticast mode [ 1761.684877][ T923] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1761.843908][ T923] usb 2-1: Using ep0 maxpacket: 32 [ 1761.888324][ T923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1761.912213][ T923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1761.930467][ T923] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1761.939783][ T923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.951481][ T923] usb 2-1: config 0 descriptor?? [ 1761.992627][ T923] hub 2-1:0.0: USB hub found [ 1762.196333][ T923] hub 2-1:0.0: 1 port detected [ 1762.683614][T27360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1762.805089][ T923] hub 2-1:0.0: activate --> -90 [ 1762.821289][T27364] syzkaller0: entered promiscuous mode [ 1762.827350][T27364] syzkaller0: entered allmulticast mode [ 1763.017396][T16285] usb 2-1: USB disconnect, device number 6 [ 1763.028164][ T923] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1763.706808][T27390] syzkaller0: entered promiscuous mode [ 1763.722169][T27390] syzkaller0: entered allmulticast mode [ 1764.034497][T16285] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1764.186264][T16285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1764.206432][T16285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1764.230478][T16285] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1764.251209][T16285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.268332][T16285] usb 2-1: config 0 descriptor?? [ 1764.296667][T27398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1764.749004][T16285] apple 0003:05AC:0264.005D: hidraw0: USB HID vff.fa Device [HID 05ac:0264] on usb-dummy_hcd.1-1/input0 [ 1764.967707][ T5899] usb 2-1: USB disconnect, device number 7 [ 1765.039532][T27417] openvswitch: netlink: Message has 12 unknown bytes. [ 1765.061898][T27417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1765.246434][ T5831] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1765.258926][ T5831] Bluetooth: hci3: Injecting HCI hardware error event [ 1765.268569][ T5831] Bluetooth: hci3: hardware error 0x00 [ 1765.624852][T27433] syzkaller0: entered promiscuous mode [ 1765.641029][T27433] syzkaller0: entered allmulticast mode [ 1765.954160][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5970'. [ 1765.982172][T27443] netlink: 'syz.6.5971': attribute type 9 has an invalid length. [ 1766.041415][T27443] netlink: 'syz.6.5971': attribute type 6 has an invalid length. [ 1766.296275][T27423] Bluetooth: hci3: unexpected cc 0x0402 length: 4 > 1 [ 1766.303143][T27423] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 1766.918587][T27470] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5984'. [ 1767.024267][T27472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1767.324634][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1768.775584][T27516] tipc: Enabled bearer , priority 0 [ 1768.808137][T27516] tipc: Resetting bearer [ 1768.873754][T27513] tipc: Disabling bearer [ 1769.172763][T27534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6011'. [ 1769.197333][T27538] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1769.434064][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1769.613944][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1769.629868][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.645078][ T5900] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1769.692412][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.720866][ T5900] usb 2-1: config 0 descriptor?? [ 1770.150152][ T5900] usbhid 2-1:0.0: can't add hid device: -71 [ 1770.165532][T27570] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6027'. [ 1770.166186][ T5900] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1770.197960][ T5900] usb 2-1: USB disconnect, device number 8 [ 1770.708346][T27587] syzkaller0: entered promiscuous mode [ 1770.728212][T27587] syzkaller0: entered allmulticast mode [ 1770.762098][T27590] netlink: 'syz.3.6038': attribute type 29 has an invalid length. [ 1770.943549][T27596] tipc: Enabled bearer , priority 0 [ 1770.959481][T27598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6040'. [ 1770.980106][T27593] tipc: Resetting bearer [ 1771.060562][T27602] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6042'. [ 1771.073249][T27592] tipc: Disabling bearer [ 1771.524681][T27614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1771.607482][T27623] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1771.728534][T27625] tipc: Enabled bearer , priority 0 [ 1771.764376][T27625] tipc: Resetting bearer [ 1771.820009][T27624] tipc: Disabling bearer [ 1771.843641][T27627] syzkaller0: entered promiscuous mode [ 1771.850655][T27627] syzkaller0: entered allmulticast mode [ 1771.879182][T27633] tipc: Enabled bearer , priority 0 [ 1771.939253][T27633] tipc: Resetting bearer [ 1772.050835][T17203] hid-generic 0000:0000:0000.005E: unknown main item tag 0x0 [ 1772.082947][T17203] hid-generic 0000:0000:0000.005E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1772.114927][T27631] tipc: Disabling bearer [ 1772.447737][T27647] tap0: tun_chr_ioctl cmd 1074025677 [ 1772.462979][T27647] tap0: linktype set to 0 [ 1772.601176][T27655] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6065'. [ 1772.766359][T27661] tipc: Enabled bearer , priority 0 [ 1772.786211][T27661] tipc: Resetting bearer [ 1772.834943][T27659] tipc: Disabling bearer [ 1773.175009][T27671] tipc: Enabling of bearer rejected, failed to enable media [ 1773.414898][T27681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6077'. [ 1773.446110][T27680] syzkaller0: entered promiscuous mode [ 1773.451651][T27680] syzkaller0: entered allmulticast mode [ 1773.925789][T27690] tipc: Enabled bearer , priority 0 [ 1773.960888][T27690] tipc: Resetting bearer [ 1774.059652][T27689] tipc: Disabling bearer [ 1774.303328][T27423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1774.312984][T27423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1774.322345][T27423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1774.340741][T27423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1774.349752][T27423] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1774.504495][T27704] tipc: Enabling of bearer rejected, failed to enable media [ 1774.753823][ T30] audit: type=1326 audit(1751514045.131:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1774.885521][ T30] audit: type=1326 audit(1751514045.181:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1774.964010][T27713] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1775.021885][ T30] audit: type=1326 audit(1751514045.181:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.154379][ T5900] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1775.172841][ T30] audit: type=1326 audit(1751514045.181:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.247295][ T30] audit: type=1326 audit(1751514045.181:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.302775][ T30] audit: type=1326 audit(1751514045.181:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.304304][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1775.360688][T27702] chnl_net:caif_netlink_parms(): no params data found [ 1775.373947][ T30] audit: type=1326 audit(1751514045.181:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.407315][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.443941][ T30] audit: type=1326 audit(1751514045.181:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.464275][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.506686][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1775.532664][ T30] audit: type=1326 audit(1751514045.191:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.556116][ T30] audit: type=1326 audit(1751514045.321:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27708 comm="syz.5.6089" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 1775.577227][ T5900] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1775.614901][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.637717][ T5900] usb 6-1: config 0 descriptor?? [ 1775.652365][T27721] syzkaller0: entered promiscuous mode [ 1775.659006][T27721] syzkaller0: entered allmulticast mode [ 1775.676717][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6094'. [ 1775.869886][T27702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.878131][T27702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.889750][T27702] bridge_slave_0: entered allmulticast mode [ 1775.899692][T27702] bridge_slave_0: entered promiscuous mode [ 1775.918243][T27702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.931569][T27702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.944442][T27702] bridge_slave_1: entered allmulticast mode [ 1775.956771][T27702] bridge_slave_1: entered promiscuous mode [ 1776.067981][ T5900] usbhid 6-1:0.0: can't add hid device: -71 [ 1776.094852][ T5900] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1776.114730][T27702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.136323][ T5900] usb 6-1: USB disconnect, device number 53 [ 1776.157407][T27702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.329326][T27702] team0: Port device team_slave_0 added [ 1776.379629][T27702] team0: Port device team_slave_1 added [ 1776.444135][ T5831] Bluetooth: hci2: command tx timeout [ 1776.472112][T27702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.494017][T27702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.520979][T27702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.537118][T27702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.544526][T27702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1776.571056][T27702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.747351][T27742] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6101'. [ 1776.761064][T27702] hsr_slave_0: entered promiscuous mode [ 1776.807702][T27702] hsr_slave_1: entered promiscuous mode [ 1776.834394][T27702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1776.842099][T27702] Cannot create hsr debugfs directory [ 1777.629055][T27775] syzkaller0: entered promiscuous mode [ 1777.635442][T27775] syzkaller0: entered allmulticast mode [ 1777.942964][T27702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1777.972177][T27702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1777.998875][T27702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1778.054603][T27702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1778.103503][T27780] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6118'. [ 1778.142059][T27780] bridge0: port 4(dummy0) entered disabled state [ 1778.148782][T27780] bridge0: port 3(batadv0) entered disabled state [ 1778.158237][T27780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.165709][T27780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.361178][T27794] [ 1778.363579][T27794] ===================================================== [ 1778.370542][T27794] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1778.378046][T27794] 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 Not tainted [ 1778.385203][T27794] ----------------------------------------------------- [ 1778.392521][T27794] syz.3.6122/27794 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1778.400276][T27794] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1778.409014][T27794] [ 1778.409014][T27794] and this task is already holding: [ 1778.416384][T27794] ffff8880787c3e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1778.425110][T27794] which would create a new lock dependency: [ 1778.431044][T27794] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1778.438655][T27794] [ 1778.438655][T27794] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1778.448118][T27794] (&client->buffer_lock){..-.}-{3:3} [ 1778.448147][T27794] [ 1778.448147][T27794] ... which became SOFTIRQ-irq-safe at: [ 1778.461265][T27794] lock_acquire+0x120/0x360 [ 1778.465878][T27794] _raw_spin_lock+0x2e/0x40 [ 1778.470483][T27794] evdev_pass_values+0xb9/0xbd0 [ 1778.475435][T27794] evdev_events+0x1e6/0x340 [ 1778.480041][T27794] input_pass_values+0x285/0x890 [ 1778.485085][T27794] input_event_dispose+0x3e5/0x6b0 [ 1778.490300][T27794] input_inject_event+0x1fe/0x320 [ 1778.495427][T27794] led_trigger_event+0x138/0x210 [ 1778.500466][T27794] kbd_bh+0x1c6/0x2e0 [ 1778.504548][T27794] tasklet_action_common+0x369/0x580 [ 1778.509929][T27794] handle_softirqs+0x286/0x870 [ 1778.514802][T27794] __irq_exit_rcu+0xca/0x1f0 [ 1778.519502][T27794] irq_exit_rcu+0x9/0x30 [ 1778.523854][T27794] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1778.529604][T27794] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1778.535685][T27794] _raw_spin_unlock_irq+0x29/0x50 [ 1778.540811][T27794] n_tty_ioctl_helper+0x27e/0x340 [ 1778.545939][T27794] tty_ioctl+0x9c3/0xde0 [ 1778.550276][T27794] __ia32_compat_sys_ioctl+0x543/0x840 [ 1778.555847][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1778.561161][T27794] do_fast_syscall_32+0x34/0x80 [ 1778.566114][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.572539][T27794] [ 1778.572539][T27794] to a SOFTIRQ-irq-unsafe lock: [ 1778.579578][T27794] (tasklist_lock){.+.+}-{3:3} [ 1778.579612][T27794] [ 1778.579612][T27794] ... which became SOFTIRQ-irq-unsafe at: [ 1778.592300][T27794] ... [ 1778.592311][T27794] lock_acquire+0x120/0x360 [ 1778.599525][T27794] _raw_read_lock+0x36/0x50 [ 1778.604138][T27794] __do_wait+0xde/0x740 [ 1778.608395][T27794] do_wait+0x1f8/0x520 [ 1778.612565][T27794] kernel_wait+0xab/0x170 [ 1778.617004][T27794] call_usermodehelper_exec_work+0xbe/0x230 [ 1778.623009][T27794] process_scheduled_works+0xade/0x17b0 [ 1778.628667][T27794] worker_thread+0x8a0/0xda0 [ 1778.633379][T27794] kthread+0x70e/0x8a0 [ 1778.637544][T27794] ret_from_fork+0x3fc/0x770 [ 1778.642238][T27794] ret_from_fork_asm+0x1a/0x30 [ 1778.647105][T27794] [ 1778.647105][T27794] other info that might help us debug this: [ 1778.647105][T27794] [ 1778.657343][T27794] Chain exists of: [ 1778.657343][T27794] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1778.657343][T27794] [ 1778.670574][T27794] Possible interrupt unsafe locking scenario: [ 1778.670574][T27794] [ 1778.678904][T27794] CPU0 CPU1 [ 1778.684286][T27794] ---- ---- [ 1778.689655][T27794] lock(tasklist_lock); [ 1778.693912][T27794] local_irq_disable(); [ 1778.700760][T27794] lock(&client->buffer_lock); [ 1778.708321][T27794] lock(&f_owner->lock); [ 1778.715199][T27794] [ 1778.718667][T27794] lock(&client->buffer_lock); [ 1778.723709][T27794] [ 1778.723709][T27794] *** DEADLOCK *** [ 1778.723709][T27794] [ 1778.731874][T27794] 2 locks held by syz.3.6122/27794: [ 1778.737121][T27794] #0: ffff88802a3bd940 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x187/0x5a0 [ 1778.745686][T27794] #1: ffff8880787c3e20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1778.754936][T27794] [ 1778.754936][T27794] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1778.765352][T27794] -> (&client->buffer_lock){..-.}-{3:3} { [ 1778.771293][T27794] IN-SOFTIRQ-W at: [ 1778.775470][T27794] lock_acquire+0x120/0x360 [ 1778.782087][T27794] _raw_spin_lock+0x2e/0x40 [ 1778.788605][T27794] evdev_pass_values+0xb9/0xbd0 [ 1778.795470][T27794] evdev_events+0x1e6/0x340 [ 1778.801987][T27794] input_pass_values+0x285/0x890 [ 1778.808931][T27794] input_event_dispose+0x3e5/0x6b0 [ 1778.816055][T27794] input_inject_event+0x1fe/0x320 [ 1778.823101][T27794] led_trigger_event+0x138/0x210 [ 1778.830056][T27794] kbd_bh+0x1c6/0x2e0 [ 1778.836058][T27794] tasklet_action_common+0x369/0x580 [ 1778.843353][T27794] handle_softirqs+0x286/0x870 [ 1778.850148][T27794] __irq_exit_rcu+0xca/0x1f0 [ 1778.856769][T27794] irq_exit_rcu+0x9/0x30 [ 1778.863031][T27794] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1778.870680][T27794] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1778.878669][T27794] _raw_spin_unlock_irq+0x29/0x50 [ 1778.885804][T27794] n_tty_ioctl_helper+0x27e/0x340 [ 1778.892846][T27794] tty_ioctl+0x9c3/0xde0 [ 1778.899093][T27794] __ia32_compat_sys_ioctl+0x543/0x840 [ 1778.906574][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1778.913704][T27794] do_fast_syscall_32+0x34/0x80 [ 1778.920573][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.929015][T27794] INITIAL USE at: [ 1778.933101][T27794] lock_acquire+0x120/0x360 [ 1778.939539][T27794] _raw_spin_lock_irq+0xa2/0xf0 [ 1778.946320][T27794] evdev_read+0x370/0xca0 [ 1778.952588][T27794] vfs_read+0x200/0x980 [ 1778.958781][T27794] ksys_read+0x145/0x250 [ 1778.964951][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1778.972001][T27794] do_fast_syscall_32+0x34/0x80 [ 1778.978872][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1778.987157][T27794] } [ 1778.989834][T27794] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1778.998187][T27794] -> (&new->fa_lock){....}-{3:3} { [ 1779.003419][T27794] INITIAL USE at: [ 1779.007408][T27794] lock_acquire+0x120/0x360 [ 1779.013670][T27794] _raw_write_lock_irq+0xa2/0xf0 [ 1779.020364][T27794] fasync_remove_entry+0xf1/0x1c0 [ 1779.027142][T27794] lease_modify+0x1ca/0x3c0 [ 1779.033400][T27794] locks_remove_file+0x4bf/0xea0 [ 1779.040096][T27794] __fput+0x3ab/0xa70 [ 1779.045855][T27794] task_work_run+0x1d1/0x260 [ 1779.052216][T27794] exit_to_user_mode_loop+0xec/0x110 [ 1779.059280][T27794] __do_fast_syscall_32+0x1f4/0x2b0 [ 1779.066263][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.072884][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.080965][T27794] INITIAL READ USE at: [ 1779.085400][T27794] lock_acquire+0x120/0x360 [ 1779.092093][T27794] _raw_read_lock_irqsave+0xaf/0x100 [ 1779.099590][T27794] kill_fasync+0x199/0x4d0 [ 1779.106189][T27794] lease_break_callback+0x26/0x30 [ 1779.113406][T27794] __break_lease+0x6a5/0x1620 [ 1779.120274][T27794] do_dentry_open+0xd62/0x1970 [ 1779.127221][T27794] vfs_open+0x3b/0x340 [ 1779.133477][T27794] path_openat+0x2ee5/0x3830 [ 1779.140259][T27794] do_filp_open+0x1fa/0x410 [ 1779.146960][T27794] do_sys_openat2+0x121/0x1c0 [ 1779.153823][T27794] __ia32_compat_sys_open+0x117/0x140 [ 1779.161393][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.168698][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.175749][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.184380][T27794] } [ 1779.186973][T27794] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1779.195750][T27794] ... acquired at: [ 1779.199666][T27794] lock_acquire+0x120/0x360 [ 1779.204363][T27794] _raw_read_lock_irqsave+0xaf/0x100 [ 1779.209837][T27794] kill_fasync+0x199/0x4d0 [ 1779.214446][T27794] evdev_pass_values+0x627/0xbd0 [ 1779.219568][T27794] evdev_events+0x1e6/0x340 [ 1779.224273][T27794] input_pass_values+0x285/0x890 [ 1779.229566][T27794] input_event_dispose+0x330/0x6b0 [ 1779.234863][T27794] input_inject_event+0x1fe/0x320 [ 1779.240083][T27794] evdev_write+0x2fc/0x480 [ 1779.244770][T27794] vfs_write+0x27e/0xa90 [ 1779.249232][T27794] ksys_write+0x145/0x250 [ 1779.253748][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.259056][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.264095][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.270612][T27794] [ 1779.272946][T27794] -> (&f_owner->lock){....}-{3:3} { [ 1779.278175][T27794] INITIAL USE at: [ 1779.282105][T27794] lock_acquire+0x120/0x360 [ 1779.288195][T27794] _raw_write_lock_irq+0xa2/0xf0 [ 1779.294716][T27794] __f_setown+0x67/0x370 [ 1779.300538][T27794] generic_setlease+0xd5d/0x1240 [ 1779.307081][T27794] fcntl_setlease+0x3a2/0x4c0 [ 1779.313338][T27794] do_fcntl+0x6a9/0x1910 [ 1779.319173][T27794] do_compat_fcntl64+0x477/0x720 [ 1779.325696][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.332495][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.338923][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.346828][T27794] INITIAL READ USE at: [ 1779.351173][T27794] lock_acquire+0x120/0x360 [ 1779.357693][T27794] _raw_read_lock_irqsave+0xaf/0x100 [ 1779.365001][T27794] send_sigio+0x38/0x370 [ 1779.371261][T27794] kill_fasync+0x24d/0x4d0 [ 1779.377692][T27794] lease_break_callback+0x26/0x30 [ 1779.384733][T27794] __break_lease+0x6a5/0x1620 [ 1779.391422][T27794] do_dentry_open+0xd62/0x1970 [ 1779.398222][T27794] vfs_open+0x3b/0x340 [ 1779.404315][T27794] path_openat+0x2ee5/0x3830 [ 1779.411090][T27794] do_filp_open+0x1fa/0x410 [ 1779.417634][T27794] do_sys_openat2+0x121/0x1c0 [ 1779.424335][T27794] __ia32_compat_sys_open+0x117/0x140 [ 1779.431728][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.439123][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.445993][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.454334][T27794] } [ 1779.456839][T27794] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1779.465698][T27794] ... acquired at: [ 1779.469507][T27794] lock_acquire+0x120/0x360 [ 1779.474372][T27794] _raw_read_lock_irqsave+0xaf/0x100 [ 1779.479847][T27794] send_sigio+0x38/0x370 [ 1779.484295][T27794] kill_fasync+0x24d/0x4d0 [ 1779.488899][T27794] lease_break_callback+0x26/0x30 [ 1779.494128][T27794] __break_lease+0x6a5/0x1620 [ 1779.498998][T27794] do_dentry_open+0xd62/0x1970 [ 1779.503946][T27794] vfs_open+0x3b/0x340 [ 1779.508249][T27794] path_openat+0x2ee5/0x3830 [ 1779.513026][T27794] do_filp_open+0x1fa/0x410 [ 1779.517715][T27794] do_sys_openat2+0x121/0x1c0 [ 1779.522576][T27794] __ia32_compat_sys_open+0x117/0x140 [ 1779.528137][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.533439][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.538568][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.545084][T27794] [ 1779.547415][T27794] [ 1779.547415][T27794] the dependencies between the lock to be acquired [ 1779.547426][T27794] and SOFTIRQ-irq-unsafe lock: [ 1779.560956][T27794] -> (tasklist_lock){.+.+}-{3:3} { [ 1779.566152][T27794] HARDIRQ-ON-R at: [ 1779.570174][T27794] lock_acquire+0x120/0x360 [ 1779.576354][T27794] _raw_read_lock+0x36/0x50 [ 1779.582550][T27794] __do_wait+0xde/0x740 [ 1779.588381][T27794] do_wait+0x1f8/0x520 [ 1779.594129][T27794] kernel_wait+0xab/0x170 [ 1779.600217][T27794] call_usermodehelper_exec_work+0xbe/0x230 [ 1779.607797][T27794] process_scheduled_works+0xade/0x17b0 [ 1779.615049][T27794] worker_thread+0x8a0/0xda0 [ 1779.621315][T27794] kthread+0x70e/0x8a0 [ 1779.627052][T27794] ret_from_fork+0x3fc/0x770 [ 1779.633311][T27794] ret_from_fork_asm+0x1a/0x30 [ 1779.639743][T27794] SOFTIRQ-ON-R at: [ 1779.643779][T27794] lock_acquire+0x120/0x360 [ 1779.649966][T27794] _raw_read_lock+0x36/0x50 [ 1779.656136][T27794] __do_wait+0xde/0x740 [ 1779.661964][T27794] do_wait+0x1f8/0x520 [ 1779.667696][T27794] kernel_wait+0xab/0x170 [ 1779.673690][T27794] call_usermodehelper_exec_work+0xbe/0x230 [ 1779.681251][T27794] process_scheduled_works+0xade/0x17b0 [ 1779.688469][T27794] worker_thread+0x8a0/0xda0 [ 1779.694818][T27794] kthread+0x70e/0x8a0 [ 1779.700547][T27794] ret_from_fork+0x3fc/0x770 [ 1779.706885][T27794] ret_from_fork_asm+0x1a/0x30 [ 1779.713396][T27794] INITIAL USE at: [ 1779.717303][T27794] lock_acquire+0x120/0x360 [ 1779.723409][T27794] _raw_write_lock_irq+0xa2/0xf0 [ 1779.730014][T27794] copy_process+0x224f/0x3c00 [ 1779.736266][T27794] kernel_clone+0x21e/0x870 [ 1779.742337][T27794] user_mode_thread+0xdd/0x140 [ 1779.748675][T27794] rest_init+0x23/0x300 [ 1779.754411][T27794] start_kernel+0x47d/0x500 [ 1779.760486][T27794] x86_64_start_reservations+0x24/0x30 [ 1779.767528][T27794] x86_64_start_kernel+0x143/0x1c0 [ 1779.774234][T27794] common_startup_64+0x13e/0x147 [ 1779.780752][T27794] INITIAL READ USE at: [ 1779.785094][T27794] lock_acquire+0x120/0x360 [ 1779.791613][T27794] _raw_read_lock+0x36/0x50 [ 1779.798130][T27794] __do_wait+0xde/0x740 [ 1779.804305][T27794] do_wait+0x1f8/0x520 [ 1779.810387][T27794] kernel_wait+0xab/0x170 [ 1779.816728][T27794] call_usermodehelper_exec_work+0xbe/0x230 [ 1779.824664][T27794] process_scheduled_works+0xade/0x17b0 [ 1779.832226][T27794] worker_thread+0x8a0/0xda0 [ 1779.838833][T27794] kthread+0x70e/0x8a0 [ 1779.844907][T27794] ret_from_fork+0x3fc/0x770 [ 1779.851524][T27794] ret_from_fork_asm+0x1a/0x30 [ 1779.858296][T27794] } [ 1779.860800][T27794] ... key at: [] tasklist_lock+0x18/0x40 [ 1779.868529][T27794] ... acquired at: [ 1779.872371][T27794] lock_acquire+0x120/0x360 [ 1779.877063][T27794] _raw_read_lock+0x36/0x50 [ 1779.881752][T27794] send_sigurg+0x12b/0x420 [ 1779.886360][T27794] sk_send_sigurg+0x6c/0x2e0 [ 1779.891138][T27794] queue_oob+0x490/0x5a0 [ 1779.895586][T27794] unix_stream_sendmsg+0xaf9/0xc90 [ 1779.900891][T27794] __sock_sendmsg+0x21c/0x270 [ 1779.905757][T27794] ____sys_sendmsg+0x52d/0x830 [ 1779.910702][T27794] ___sys_sendmsg+0x21f/0x2a0 [ 1779.915566][T27794] __sys_sendmmsg+0x28e/0x430 [ 1779.920432][T27794] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1779.926164][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.931469][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.936514][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.943030][T27794] [ 1779.945363][T27794] [ 1779.945363][T27794] stack backtrace: [ 1779.951261][T27794] CPU: 1 UID: 0 PID: 27794 Comm: syz.3.6122 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1779.951282][T27794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1779.951294][T27794] Call Trace: [ 1779.951303][T27794] [ 1779.951311][T27794] dump_stack_lvl+0x189/0x250 [ 1779.951340][T27794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1779.951366][T27794] ? __pfx__printk+0x10/0x10 [ 1779.951387][T27794] validate_chain+0x1f05/0x2140 [ 1779.951413][T27794] __lock_acquire+0xab9/0xd20 [ 1779.951438][T27794] ? send_sigurg+0x12b/0x420 [ 1779.951460][T27794] lock_acquire+0x120/0x360 [ 1779.951482][T27794] ? send_sigurg+0x12b/0x420 [ 1779.951503][T27794] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1779.951530][T27794] _raw_read_lock+0x36/0x50 [ 1779.951550][T27794] ? send_sigurg+0x12b/0x420 [ 1779.951571][T27794] send_sigurg+0x12b/0x420 [ 1779.951594][T27794] sk_send_sigurg+0x6c/0x2e0 [ 1779.951619][T27794] queue_oob+0x490/0x5a0 [ 1779.951642][T27794] ? __pfx_queue_oob+0x10/0x10 [ 1779.951661][T27794] ? __pfx___might_resched+0x10/0x10 [ 1779.951687][T27794] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1779.951712][T27794] unix_stream_sendmsg+0xaf9/0xc90 [ 1779.951734][T27794] ? aa_sk_perm+0x81e/0x950 [ 1779.951754][T27794] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1779.951773][T27794] ? __asan_memset+0x22/0x50 [ 1779.951795][T27794] ? __import_iovec+0x5d4/0x7f0 [ 1779.951810][T27794] ? aa_sock_msg_perm+0x94/0x160 [ 1779.951830][T27794] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1779.951851][T27794] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1779.951870][T27794] __sock_sendmsg+0x21c/0x270 [ 1779.951895][T27794] ____sys_sendmsg+0x52d/0x830 [ 1779.951917][T27794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1779.951944][T27794] ? futex_unqueue+0x22/0x240 [ 1779.951960][T27794] ? futex_unqueue+0x22/0x240 [ 1779.951978][T27794] ___sys_sendmsg+0x21f/0x2a0 [ 1779.951998][T27794] ? __pfx____sys_sendmsg+0x10/0x10 [ 1779.952031][T27794] ? __fget_files+0x2a/0x420 [ 1779.952048][T27794] ? __fget_files+0x3a0/0x420 [ 1779.952070][T27794] __sys_sendmmsg+0x28e/0x430 [ 1779.952091][T27794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1779.952114][T27794] ? __pfx_do_futex+0x10/0x10 [ 1779.952140][T27794] ? rcu_is_watching+0x15/0xb0 [ 1779.952168][T27794] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1779.952192][T27794] __do_fast_syscall_32+0xb6/0x2b0 [ 1779.952218][T27794] ? lockdep_hardirqs_on+0x9c/0x150 [ 1779.952243][T27794] do_fast_syscall_32+0x34/0x80 [ 1779.952268][T27794] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1779.952289][T27794] RIP: 0023:0xf7fe4539 [ 1779.952303][T27794] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1779.952319][T27794] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1779.952336][T27794] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1779.952348][T27794] RDX: 0000000000000001 RSI: 0000000000040015 RDI: 0000000000000000 [ 1779.952359][T27794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1779.952369][T27794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1779.952379][T27794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1779.952396][T27794] [ 1780.288592][T27702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.304887][T27702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1780.336855][T27702] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1780.337654][ T5831] Bluetooth: hci2: command tx timeout [ 1780.347305][T27702] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1780.378215][T27702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.396337][ T8939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.403494][ T8939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.412776][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.419967][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.467515][T27702] veth0_vlan: entered promiscuous mode [ 1780.501613][T27702] veth1_vlan: entered promiscuous mode [ 1780.531059][T27702] veth0_macvtap: entered promiscuous mode [ 1780.541266][T27702] veth1_macvtap: entered promiscuous mode [ 1780.558319][T27702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1780.570850][T27702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1780.583277][T27702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.592338][T27702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.602081][T27702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.610985][T27702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.640301][T27702] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1780.663123][ T8939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.665696][T27702] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 1780.678329][ T8939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.700873][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1780.708961][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.364228][ T5831] Bluetooth: hci2: command tx timeout [ 1784.444054][ T5831] Bluetooth: hci2: command tx timeout