last executing test programs: 12.948959479s ago: executing program 3 (id=348): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000008900200000155606feed86f279818c0000610000000020"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f0040101109050b36"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="0014"]) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000039c0)='./file0/file0\x00', &(0x7f0000003a00)={0x0, 0x0, 0x24}, 0x18) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x945f4a821577fb5d}}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05", @ANYRESDEC], 0x0) syz_emit_ethernet(0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb170cb45adbde0045a201d1290a759200aa06617d0ad07bde280291ba76cf986e2793b5b13c2d9968424e5985273752cb1c67ef47f2c7aab9685f72f743502261bf7dd4d5accf109081cd570bc7edb2901376fa11dd108876b39475dab4941d025147a9cbe00a700d2fcc1b2513d325ac3600a65a3f1aeca181f7917e28179bc7599556cfdbf28b4f6c8c4394dc3b79a7ecfddc6f0498c48b501d611d59bfcae0387e04aa8e371fd01a279e9bc3eec13cbe9057"], 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000e5f000)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000005060500000000000000000001000004050001"], 0x24}}, 0x0) 11.42437499s ago: executing program 4 (id=354): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.296790755s ago: executing program 3 (id=356): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.827020461s ago: executing program 3 (id=358): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 10.644359295s ago: executing program 3 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x118, &(0x7f0000000140)={0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0xb00}, 0x0) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0x40806685, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 10.294481237s ago: executing program 4 (id=362): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.480408515s ago: executing program 4 (id=363): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000003c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x1b, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x3, 0x4, 0xd, 0xe, 0x6, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000080)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x94}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.389067218s ago: executing program 0 (id=365): r0 = io_uring_setup(0xfca, &(0x7f00000002c0)) futex(&(0x7f0000000240), 0x4, 0x2, 0x0, &(0x7f0000000340), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000c40)={0x3, @raw_data="c23e25450196ac8caf38e4560493706fd898c23ab7f7b04dea4d9b52c6c3640d685ec95dc18465b5ad4a4bc7c4b5f7bb24e7a0d067b71a3b21d5e93da44284a86b44dd02549f63ddc1bd327935af3e0b914f72f9f7eab8b5aa196acd8f751b3058cee258378fdf478a225862dc1403c4b05981bdb5020849a796399f9b81b31f816f119e85d5b4582678d25ef8644e77deb5a1399e5275d8e8ebfcbeb08194e30cd35d4b62b4b0a98fe10bdff1a1e1f1a79ed0938e9993887916b4a4a1ed1dd9aae15731c0450e59"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="70a8150322807950e77261753b5afb9c94f39b89771dbb86ca1c185b7e3b34507195330f457b8ec858043dd7674f764a1f5c3dbf9fda920f82186a84217b370d0737", @ANYRES64=r1, @ANYBLOB='g'], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee00}}, './file0\x00'}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x7}], {0x4, 0x6}, [{0x8, 0x3, 0xee01}, {0x8, 0x4}, {0x8, 0x6}, {}, {}, {0x8, 0x1}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x2, r6}], {0x10, 0x6}, {0x20, 0x6}}, 0x7c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x4, &(0x7f0000000100)=[{0x7, 0x7f, 0xa, 0x7fff0000}, {0x579e, 0x6, 0x5, 0xf}, {0x4da, 0x8, 0xb}, {0x82a, 0x4, 0x1, 0x1}]}) io_setup(0x0, &(0x7f0000000200)) connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0xffffffffffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 9.023788879s ago: executing program 0 (id=366): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[], 0x0) socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @loopback}]}}}]}, 0x44}}, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000200b06010000000000000109022400010000000009040000010300000009210000000122050009058103a00000000efb78bc108f0200"], 0x0) (async, rerun: 64) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fanotify_init(0x200, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x5, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (rerun: 32) lseek(0xffffffffffffffff, 0x0, 0x4) (async) r7 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) dup(r7) 8.700198852s ago: executing program 0 (id=368): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="0d02", 0x2, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.235847118s ago: executing program 0 (id=373): socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) syz_usb_connect(0x0, 0x2c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xaa, 0x7f, 0x20, 0x458, 0x706e, 0x3564, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x1, 0x0, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x2, 0x2}]}]}}]}}]}}, 0x0) (rerun: 64) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (async, rerun: 64) r2 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) write$binfmt_script(r5, &(0x7f0000000600)={'#! ', './file1', [{0x20, '\xc9\x82~\xa2s\x8c\x10U\xa6\xe9\xf5\xfb@\xf8\xfb\x9a\xfe\x1f\x18\xecu\xd7*\xea\x0f\x80u\xc1\xd6#c|\xa7Pt\xfb\x0fmd\xac\a\xfam5\xc8\xea5\xe9:0x\x9d\x11m\xe1\x01\xf8\xd2#\x9f\x0f\xef\xcd\x03\xa3\t\xf3`\x94\x15\xf9\x83\xabc\xf7\xf9\x02$\xbcc\x9f \x93\x8d\xf7\xdb\xabB\xb6\xb1E,+5Xv\x8bf\xd0G\xafy\x83\xcag_\xc7\a\x93$\x1c\x8a\x153\x16Z;l\xd7%\a\x91\'\"d`\xb5\xb5\x17\x14\x1f\xa0c\xb5\'\xf9\xcc#\x90>;\xb2Y\xe5k\xe4C\x19g\xf47\t4\f\x82\x8fb\xbe\xf15\xd0\xf8\x1d\x1e\xf5\xd4\x1bW\xc5\x93\xe2P]\xd4U\xf0\x00\xe1\x88\x92>\xe1@\xb3'}, {0x20, '\x00'}, {0x20, '\x8c\"\xd2'}], 0xa, "47d33c4728b29e285687100064af9fc8d37553fdfdd4bb0a49496c51d8b64d4e1901a8cc25f6cb5fef3810d23a7a4b5746fb8bf41ddb3538cbe551dc131208c05926a80f52809b608c1b03ba569794f8d61ff240f382a8dd7a3994f6d284ba6be6e65fc3dd0aa3c8"}, 0x132) (async, rerun: 32) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0505405, &(0x7f0000000000)={{0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000140)=0x0) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) (rerun: 64) timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x77359400}, {r8, r9+10000000}}, &(0x7f0000000200)) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r10, 0x54a2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000) 7.867339438s ago: executing program 0 (id=375): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x2}) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000044000000", @ANYRES32, @ANYBLOB="1400238005000e000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x0}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000040)={0xa, @capture={0x1000, 0x0, {0x3, 0x245}, 0x5, 0xda4a}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001000090c00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000010001280080001006774700004004bf508000a008b997858abcef4734a8d89657f5596e1f20ec8f3c270d4546598bf073b85ea9f7e24eaf4b269618b9636bd149fe1c28296e07d3eb7ed0229a832cab1f11f28b3b50a750bdf71795f1f8d980c71121fffeb5d75e18959257577e0fcb81f42295d39fc19b00fe8d69873348d90d6482b", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3000}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 7.593924775s ago: executing program 0 (id=376): mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, '\x00'}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8040, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/242) ioctl$PPPIOCGFLAGS1(r5, 0x80047455, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0xff13}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3, 0x0, 0x10001}}]}}}]}, 0x78}}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r0, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r7, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000315"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.103529886s ago: executing program 3 (id=379): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x17, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.808232115s ago: executing program 2 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000000005000400000000000c0007800800124000000000050005000a000000050001010000000000000000686173683a69702c6d61726b000000006b589945f0c9eeb06323332fa161996a3e158997f5e3591ad41fe21d6493d07be45080e77ac51c9db82dc9739dc0b24b092769fa7fb7dec291e53761608e639ed453c531531414fbf57dc2ed450360dbab05ef8d4274df5dc4e7634573b23d7b6c8ff9887588d54e2fde8ad8baa8fea82782b2e4c552bce412f37191ebd377c9a3387f4ea13e5f7bddb041b245718caf4e2d012100893c4d22a66b992bf2d5bf9ec70bdd69fb3e2b40b32fdc360cbae691d36e1bc4b7cb105533c09954ca7cc8c589c09dc59e86237e6d26a23f4440cfa09c00e6"], 0x4c}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fbdbdf250b0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="200001801400020076657468315f6d61637674617000000008000100f87efee0de27ab3eae5c1de8155a9e4fca89c5e4620d8ccfbd24dbe449b623c90072c916079b90a15b64f4d627b405ad220e38f3f56c9ca8419f47f5b3595dc032251395e5853daf6cdc93c67d44515042d46c3327aae7682ab5f43193fe31547ea7bbede88a8b93519774e8fa6f6246123019f7f6d6", @ANYRES32=0x0, @ANYBLOB="2c00018014000200697036677265300000000000000000001400020070696d36726567000000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r3 = creat(0x0, 0x0) socket(0x8000000010, 0x2, 0x0) io_uring_setup(0x605f, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x400002, 0x0) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f00004e8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000001c0)="48b85c4a0000000000000f23d80f21f835000000900f23f8420fc758ce48b8adfad89f000000000f23c00f21f835010008000f23f8f30f01f8b8010000000f01c166440f09460fc71cf766bad004edc74424003b010000c744240200000000ff2c2444f637", 0x65}], 0x1, 0x8, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, 0xad7}], 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r5, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f00000015c0)={0x28, 0x5, r5, r5, 0xa92, 0x0, 0x3fff}) 6.807814496s ago: executing program 3 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x1, 0x5, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000040)={@broadcast, @loopback, @initdev}, &(0x7f0000000080)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f00000000c0)={0x1}) setreuid(0x0, r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001340)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd349}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 6.215644171s ago: executing program 2 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0xf, 0x0, 0x1}}}, 0x28) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0xa, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) ioctl$FS_IOC_SETFLAGS(r2, 0xc0606610, &(0x7f0000000040)=0x60) fsopen(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r8, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000300)={0x28, 0x0, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r9}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x1200000, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r8, @ANYRESDEC=r4, @ANYRESOCT=r1, @ANYRES16=r7]) 5.196192742s ago: executing program 2 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x624081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000e1"]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000003c0)='westwood\x00', 0x9) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close(r5) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0015000000000000140012800b00010062617461647600"], 0x3c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1}, 0x6e) shutdown(r7, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="df9853b77b92aa82e2812f7cc3b5e58647f0ff9d3059d320bcfa01f6f9ae956232f831602d748ee1847d78406070198dfe0ecd5b358f1654", @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0c0099004d4500000e0000000800050000000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003080)=ANY=[@ANYBLOB="b0160000", @ANYRES16=r9, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x16b0}}, 0x0) 4.513871852s ago: executing program 2 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x118, &(0x7f0000000140)={0x0, 0xfffffffe}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0xb00}, 0x0) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r6, {0x7, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r7, 0x40806685, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) 2.828372366s ago: executing program 4 (id=391): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f00000000c0)={0x0, 0x8, '\x00', 0x0, &(0x7f0000000080)=[0x0]}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000640)="924fb177d5abc961192cca77f016e8cad1899c48d1773b5b60e4a2c72368792f191ac5625ccc269e8a371a885a1b8c4a879171efa96abcbb75123f98ecc3913d2ef1fe2c142ea4b1dc8b6a4483801d007427fd75c5cd496d072d38a73b87b0305f32548bad2fa581d1c6aeccb70842d5499e0b605c7daf16981dab42e8a8b20ec5d6e702c064304e6957e0265b832a96c8e8407d4b119f4bb19eab09c3504fb10078db59a4162de529d416eba428e6d925c5f860e9d25d6b6dcdc3", 0xbb}, {&(0x7f0000000700)="477041b5b8fbcbd6eaef135e4d99156ff7f24c7d28e9ea6b3691e1c5c13236bb1381e7c5a4dc7c6fad8da3360e23b7e747e786f7f4d0aee10e40a4c65666e98af73d4345d43fd3f81137376a643f9c9a033792cfaa843bb146f8", 0x5a}], 0x2}}], 0x1, 0x0) r7 = dup(r5) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000020042, 0x0) r9 = dup(r8) socket$kcm(0x29, 0x0, 0x0) sendfile(r9, r7, 0x0, 0x89ffc) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) 1.539187057s ago: executing program 1 (id=393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x2c, &(0x7f0000000200)={@local, @link_local, @void, {@arp={0x806, @generic={0x88ea7d5fae0abaad, 0x201, 0x6, 0xa, 0x0, @multicast, "f9ce9cd6a815e7e65081", @multicast}}}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) syz_io_uring_setup(0x7dcb, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) sendmmsg(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{&(0x7f0000001800)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x80000) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}, 0x0) 1.399040729s ago: executing program 1 (id=394): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.237978839s ago: executing program 2 (id=395): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x141102) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) syz_clone(0x10400000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.192331086s ago: executing program 1 (id=396): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r2, &(0x7f0000000000)='./file1\x00', r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0xf58367058d4f6897, r2, 0x4bb86000) r3 = getpid() process_vm_readv(r3, &(0x7f0000000040)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180003a00000008000300"/27, @ANYRES32=r6, @ANYBLOB="05005b001e000000"], 0x24}}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x20000400) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000003840)) fallocate(r8, 0x0, 0x0, 0x58) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x4c8083) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, 0x0, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000180)=0x8001) ioctl$HIDIOCGSTRING(r10, 0x81044804, &(0x7f0000001440)={0xcfc, "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"}) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) 1.134675054s ago: executing program 1 (id=397): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) (async) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0xeeee8000, 0x7b, &(0x7f0000000200)=""/123}]}) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x8) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000600002800400010050000400000000000000075fdb09160a2f13e95b453b086b3a29fd4843a2857676ba6b6a5e1cd724af0d18fd7d91824f52133b19656e6c613071e74ee40949bc22b2ed7cf5eb132f480d02cf92c7eb0f080002004d02000018000180140002006970766c616e31"], 0x8c}}, 0x0) 1.115945062s ago: executing program 4 (id=398): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0xfffffffe, 0x1, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@private=0xa010101}, {}]}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 812.352626ms ago: executing program 1 (id=399): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20000) r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) request_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)='\xff\xff\xff\xff\xff\xff', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r1, r1}, &(0x7f0000000380)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/166, 0xa6}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0xb, 0x4, 0x0, 0x80c, 0x8, 0x5916}, &(0x7f0000000080)=0x20) syz_emit_ethernet(0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000016000000000089907803000000ffffffff90e24c88329ba080272c95235431c0e723743d42b77f4a766f0121bc8be26e69d40d0fbc56959e0fd196663431749eef00382875f5519fc32925fceab6035e7e4674f21405fe9dbd610f42f9587b5fe5e9b40dadc39660a2fc50b94097c3c809a6724442b572e1cdacddb6f81424f7df14ba0b82c68ff026d7365838ead4a9c2371da05abc10be6b27a4"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) fsync(0xffffffffffffffff) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000e000000100000000000000000000000000000000000000000200001000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000600"/110], 0xb8}}, 0x0) 804.161374ms ago: executing program 2 (id=400): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x31, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x7, 0xe, 0xbf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280), 0x10, 0x8, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f000001b480)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000eeff0000000000000000002100ba54fa0ea9294c6280a803c7bf9500000000fdffffff00"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000400)="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", 0x2000, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f000001b8c0)=[{&(0x7f0000002480)=""/102388, 0x18ff4}, {&(0x7f000001b500)=""/13, 0xd}, {0x0}, {0x0}], 0x4, 0x0, 0x4) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100b, 0x2}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f000001b740)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff40, 0x18, &(0x7f0000002400)={@fda={0x66646185, 0x0, 0x0, 0x80000000015}, @fda={0x66646185, 0xa, 0x0, 0x18}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}], 0x0, 0xfeffff, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x10, 0x3, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0x4c, 0x87, 0xc8, 0x10, 0x6cd, 0x115, 0x1a1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x60, 0x48, 0xfe, 0x0, [], [{{0x9, 0x5, 0xb}}, {{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) (async) socket(0x10, 0x803, 0x0) 80.153051ms ago: executing program 1 (id=402): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r2 = dup2(r1, r0) r3 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0xfffffffc, 0x40000, 0x0, r2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) r4 = socket$inet6(0xa, 0x3, 0x3) io_setup(0x9, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) epoll_create1(0x45e201f9eaf0dea0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000180)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x8000, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x7, 0x0, 0x58) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="66643dd6bdfeed7c552b3e00e23fca4f9219b5ebf1dda0a260e27397762e9c498aa669ec8745e3789bd617847c435633343d127c21a9b84f0486b004a0ce97aa493b476d2ec13e1314f8c6350d957c2ca0b503d6db345a0b36a69b66b0a17be4c5b0fac1cdde46f20b92eb16f069258a361c14dbbd564f13b98f50017c5fdf1dd79aa9", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000200000000000000000000070000000000000003000000000000005b7b7b002c3e30"], 0x24) cachestat(r7, &(0x7f0000000180), &(0x7f00000001c0), 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000040), 0x4) 0s ago: executing program 4 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x0, 0x0, 0x1000, 0x2080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r1, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0x1fc0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x9, 0x8, 0x6, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x253c0fc58fbb6cfb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000002000000000000000000000e618110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0xffffffff, 0x1, 0xfffff001}, 0x2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000005c0)=ANY=[@ANYRES8=r5, @ANYBLOB="01a04050f270eea040efe18114ecf0597b54c46e60ae5f0373ad03e1b4d62ebca2e0b1215618db195235c1b8320ce0e66d2d3901735e005e9d3eea560b3cd815e903615d20f71f38193e39b7d1f9cb321dc89bf245a614895d1ee97fa84cef8d913834074423cf3413a95d3da736f7c897e61cb05d47fbcac6ec6a267d12881694320ad66b34be9f8765f9ec45a8e4d4d98bb4d3df4a4a92db084d7159a88251518606463b7260e1", @ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6(0xa, 0x3, 0x88) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r9, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) kernel console output (not intermixed with test programs): 2 family 0 port 6081 - 0 [ 108.407668][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.415219][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.422522][ T6042] bridge_slave_0: entered allmulticast mode [ 108.430403][ T6042] bridge_slave_0: entered promiscuous mode [ 108.439187][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.447123][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.454831][ T6042] bridge_slave_1: entered allmulticast mode [ 108.461513][ T6042] bridge_slave_1: entered promiscuous mode [ 108.516827][ T6042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.531326][ T6042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.563027][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.584397][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.612529][ T6042] team0: Port device team_slave_0 added [ 108.630342][ T6042] team0: Port device team_slave_1 added [ 108.641169][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.662570][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.738838][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.752573][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.786871][ T6042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.851188][ T6042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.879059][ T6042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.880618][ T25] usb 5-1: USB disconnect, device number 11 [ 108.933260][ T6042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.030177][ T1061] bridge_slave_1: left allmulticast mode [ 109.037029][ T1061] bridge_slave_1: left promiscuous mode [ 109.052101][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.061544][ T1061] bridge_slave_0: left allmulticast mode [ 109.074052][ T1061] bridge_slave_0: left promiscuous mode [ 109.079816][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.101879][ T1061] bridge_slave_1: left allmulticast mode [ 109.108275][ T1061] bridge_slave_1: left promiscuous mode [ 109.114156][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.128967][ T1061] bridge_slave_0: left allmulticast mode [ 109.134839][ T1061] bridge_slave_0: left promiscuous mode [ 109.140573][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.213942][ T5273] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 109.313732][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.385691][ T5273] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 109.399548][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.411108][ T5273] usb 2-1: config 0 descriptor?? [ 109.438798][ T5273] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 109.494405][ T25] usb 5-1: config 0 has no interfaces? [ 109.500343][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 109.513582][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.539779][ T25] usb 5-1: config 0 descriptor?? [ 109.789041][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.800980][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.812069][ T1061] bond0 (unregistering): Released all slaves [ 109.935951][ T1061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.948976][ T1061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.960069][ T1061] bond0 (unregistering): Released all slaves [ 109.974265][ T1061] bond1 (unregistering): Released all slaves [ 109.988893][ T6089] netlink: 76 bytes leftover after parsing attributes in process `syz.4.164'. [ 109.998360][ T6089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.060258][ T25] usb 5-1: USB disconnect, device number 12 [ 110.141123][ T1061] IPVS: stopping backup sync thread 5853 ... [ 110.224266][ T54] Bluetooth: hci0: command tx timeout [ 110.281191][ T6042] hsr_slave_0: entered promiscuous mode [ 110.303750][ T54] Bluetooth: hci2: command tx timeout [ 110.309260][ T54] Bluetooth: hci1: command tx timeout [ 110.330198][ T6042] hsr_slave_1: entered promiscuous mode [ 110.367585][ T6042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.380918][ T6042] Cannot create hsr debugfs directory [ 110.529176][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.588902][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.671316][ T5273] usb 2-1: USB disconnect, device number 12 [ 110.678570][ T3736] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.685738][ T3736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.808476][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.815685][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.072355][ T5977] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.112250][ T5977] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.385381][ T5977] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.400588][ T5977] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 111.508558][ T1061] hsr_slave_0: left promiscuous mode [ 111.544105][ T1061] hsr_slave_1: left promiscuous mode [ 111.564175][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.571641][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.584816][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.592268][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.620739][ T1061] hsr_slave_0: left promiscuous mode [ 111.634278][ T1061] hsr_slave_1: left promiscuous mode [ 111.644078][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.655085][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.674431][ T1061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.683058][ T1061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.754212][ T1061] veth1_macvtap: left promiscuous mode [ 111.759789][ T1061] veth0_macvtap: left promiscuous mode [ 111.782264][ T1061] veth1_vlan: left promiscuous mode [ 111.793664][ T1061] veth0_vlan: left promiscuous mode [ 111.804608][ T1061] veth1_macvtap: left promiscuous mode [ 111.821522][ T1061] veth0_macvtap: left promiscuous mode [ 111.833816][ T1061] veth1_vlan: left promiscuous mode [ 111.843660][ T1061] veth0_vlan: left promiscuous mode [ 112.383551][ T54] Bluetooth: hci1: command tx timeout [ 112.617247][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 112.634318][ T5273] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.666750][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 112.713720][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 112.823595][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 112.831425][ T5273] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 112.841625][ T5273] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 112.851092][ T5273] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 112.864922][ T5273] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 112.875197][ T5273] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 112.885099][ T5273] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 112.899205][ T5273] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 112.908675][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.919608][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.930050][ T5273] usb 5-1: config 0 descriptor?? [ 112.941795][ T25] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 112.951014][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.959353][ T25] usb 2-1: Product: syz [ 112.964224][ T25] usb 2-1: Manufacturer: syz [ 112.979549][ T25] usb 2-1: SerialNumber: syz [ 112.995743][ T25] usb 2-1: config 0 descriptor?? [ 113.012259][ T25] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 113.190824][ T5273] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 113.394454][ T6139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.414910][ T6139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.519079][ T1061] team0 (unregistering): Port device team_slave_1 removed [ 113.565861][ T1061] team0 (unregistering): Port device team_slave_0 removed [ 113.648228][ T5276] usb 5-1: USB disconnect, device number 13 [ 113.664978][ T5276] usblp0: removed [ 113.990651][ T5260] usb 2-1: USB disconnect, device number 13 [ 114.095048][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.298687][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.368221][ T6042] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.401578][ T6042] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.421530][ T6042] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.436704][ T6042] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.449430][ T5974] veth0_vlan: entered promiscuous mode [ 114.459692][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.467426][ T54] Bluetooth: hci1: command tx timeout [ 114.488300][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.495481][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.503168][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.508220][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.517904][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.533782][ T5974] veth1_vlan: entered promiscuous mode [ 114.642606][ T5974] veth0_macvtap: entered promiscuous mode [ 114.684360][ T25] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 114.714842][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.737283][ T25] usb 5-1: config 0 descriptor?? [ 114.739440][ T5974] veth1_macvtap: entered promiscuous mode [ 114.862152][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.880091][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.891882][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.904769][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.914802][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 114.924791][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.936432][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.950462][ T6042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.962500][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.979428][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.990694][ T5974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.002764][ T5974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.015958][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.060396][ T6042] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.071613][ T5974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.075406][ T58] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 115.088213][ T5974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.093687][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.107108][ T5974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.108654][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 115.123344][ T5974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.127378][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.147843][ T58] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 115.157659][ T58] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 115.167459][ T25] nti 0003:0757:0A00.0004: unknown main item tag 0x0 [ 115.179409][ T58] usb 2-1: Product: syz [ 115.188703][ T25] nti 0003:0757:0A00.0004: unknown main item tag 0x0 [ 115.193915][ T58] usb 2-1: Manufacturer: syz [ 115.197376][ T25] nti 0003:0757:0A00.0004: unknown main item tag 0x0 [ 115.210429][ T5977] veth0_vlan: entered promiscuous mode [ 115.216214][ T25] nti 0003:0757:0A00.0004: unknown main item tag 0x0 [ 115.225845][ T58] cdc_wdm 2-1:1.0: skipping garbage [ 115.231083][ T58] cdc_wdm 2-1:1.0: skipping garbage [ 115.234120][ T25] nti 0003:0757:0A00.0004: unknown main item tag 0x0 [ 115.251969][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.259123][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.268239][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.269025][ T25] nti 0003:0757:0A00.0004: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.4-1/input0 [ 115.275411][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.294663][ T58] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 115.301151][ T58] cdc_wdm 2-1:1.0: Unknown control protocol [ 115.347379][ T5977] veth1_vlan: entered promiscuous mode [ 115.481181][ T5977] veth0_macvtap: entered promiscuous mode [ 115.539258][ T25] usb 2-1: USB disconnect, device number 14 [ 115.546773][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.586478][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.625579][ T5977] veth1_macvtap: entered promiscuous mode [ 115.685043][ T3736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.693877][ T3736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.735248][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.760086][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.770744][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.785273][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.796668][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.808434][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.851749][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.892005][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.938296][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.958227][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.975478][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.989149][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.001814][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.019684][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.050755][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.089778][ T5977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.121052][ T5977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.156324][ T5977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.197721][ T5977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.268374][ T6184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.325937][ T6184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.513770][ T5232] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 116.535675][ T6042] veth0_vlan: entered promiscuous mode [ 116.565080][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.602209][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.647847][ T6042] veth1_vlan: entered promiscuous mode [ 116.716206][ T5232] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.741379][ T5232] usb 2-1: not running at top speed; connect to a high speed hub [ 116.745354][ T2582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.773165][ T2582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.795482][ T5232] usb 2-1: config 3 has an invalid interface number: 106 but max is 0 [ 116.810504][ T5232] usb 2-1: config 3 has no interface number 0 [ 116.822010][ T5232] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 116.836834][ T6042] veth0_macvtap: entered promiscuous mode [ 116.871092][ T5232] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 116.873023][ T6042] veth1_macvtap: entered promiscuous mode [ 116.898329][ T5232] usb 2-1: config 3 interface 106 has no altsetting 0 [ 116.925058][ T5232] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 116.940788][ T5232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.981097][ T5232] usb 2-1: Product: syz [ 116.997820][ T5232] usb 2-1: Manufacturer: syz [ 117.001768][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.008190][ T5232] usb 2-1: SerialNumber: syz [ 117.043102][ T6180] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.066431][ T6180] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.080382][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.105491][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.153511][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.194691][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.232662][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.256087][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.287651][ T5232] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected [ 117.304023][ T5260] usb 5-1: USB disconnect, device number 14 [ 117.316854][ T5232] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 117.323544][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.356744][ T5232] usb 2-1: USB disconnect, device number 15 [ 117.370964][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.410790][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.423033][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.463568][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.467224][ T5232] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 117.483529][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.497483][ T5232] kobil_sct 2-1:3.106: device disconnected [ 117.524736][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.556909][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.593652][ T6042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.620815][ T6042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.648534][ T6042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.679764][ T6196] vlan2: entered promiscuous mode [ 117.705042][ T6196] bridge0: entered promiscuous mode [ 117.724107][ T6196] team0: Port device vlan2 added [ 117.743410][ T6042] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.763072][ T6042] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.787706][ T6042] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.804691][ T6042] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.059754][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.088037][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.198615][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.225282][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.254850][ T6223] netlink: 168 bytes leftover after parsing attributes in process `syz.1.180'. [ 118.453626][ T5275] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.506462][ T6241] netlink: 7 bytes leftover after parsing attributes in process `syz.0.182'. [ 118.633608][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 118.652804][ T5275] usb 4-1: config 8 has an invalid interface number: 188 but max is 0 [ 118.672843][ T5275] usb 4-1: config 8 has no interface number 0 [ 118.689086][ T5275] usb 4-1: config 8 interface 188 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 118.728004][ T5275] usb 4-1: config 8 interface 188 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 118.786773][ T5275] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 118.800543][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.816191][ T5275] usb 4-1: Product: syz [ 118.833781][ T5275] usb 4-1: Manufacturer: syz [ 118.838722][ T5275] usb 4-1: SerialNumber: syz [ 118.981662][ T6252] netlink: 80 bytes leftover after parsing attributes in process `syz.0.184'. [ 119.086806][ T5275] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 119.121402][ T5275] usb 4-1: USB disconnect, device number 9 [ 119.177870][ T6265] FAULT_INJECTION: forcing a failure. [ 119.177870][ T6265] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.199215][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.4.188 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 119.209509][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.219565][ T6265] Call Trace: [ 119.222838][ T6265] [ 119.225760][ T6265] dump_stack_lvl+0x241/0x360 [ 119.230439][ T6265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.235631][ T6265] ? __pfx__printk+0x10/0x10 [ 119.240225][ T6265] ? __pfx_lock_release+0x10/0x10 [ 119.245253][ T6265] should_fail_ex+0x3b0/0x4e0 [ 119.249933][ T6265] _copy_from_user+0x2f/0xe0 [ 119.254520][ T6265] ptp_ioctl+0x98e/0x3320 [ 119.258851][ T6265] ? __pfx_ptp_ioctl+0x10/0x10 [ 119.263618][ T6265] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 119.269621][ T6265] ? __fget_files+0x29/0x470 [ 119.274211][ T6265] ? __fget_files+0x3f3/0x470 [ 119.278888][ T6265] ? __pfx_ptp_ioctl+0x10/0x10 [ 119.283655][ T6265] posix_clock_ioctl+0x100/0x140 [ 119.288595][ T6265] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 119.294069][ T6265] __se_sys_ioctl+0xf9/0x170 [ 119.298676][ T6265] do_syscall_64+0xf3/0x230 [ 119.303188][ T6265] ? clear_bhb_loop+0x35/0x90 [ 119.307869][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.313762][ T6265] RIP: 0033:0x7f3dddf7def9 [ 119.318183][ T6265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.337795][ T6265] RSP: 002b:00007f3ddd9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 119.346217][ T6265] RAX: ffffffffffffffda RBX: 00007f3dde135f80 RCX: 00007f3dddf7def9 [ 119.354192][ T6265] RDX: 0000000020000040 RSI: 00000000c0603d0f RDI: 0000000000000005 [ 119.362153][ T6265] RBP: 00007f3ddd9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 119.370118][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.378085][ T6265] R13: 0000000000000000 R14: 00007f3dde135f80 R15: 00007f3dde25fa28 [ 119.386074][ T6265] [ 119.389261][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.416789][ T58] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.553627][ T5276] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 119.575243][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.586649][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.628474][ T58] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 119.653254][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.683826][ T5276] usb 2-1: device descriptor read/64, error -71 [ 119.692818][ T58] usb 3-1: config 0 descriptor?? [ 119.923687][ T5276] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 120.078906][ T5276] usb 2-1: device descriptor read/64, error -71 [ 120.117886][ T58] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 120.146955][ T58] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0005/input/input9 [ 120.205986][ T5276] usb usb2-port1: attempt power cycle [ 120.213786][ T58] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 120.320745][ T5273] usb 3-1: USB disconnect, device number 4 [ 120.373084][ T6293] netlink: 'syz.3.193': attribute type 9 has an invalid length. [ 120.401953][ T6293] netlink: 134712 bytes leftover after parsing attributes in process `syz.3.193'. [ 120.586103][ T5276] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 120.626882][ T5276] usb 2-1: device descriptor read/8, error -71 [ 120.904274][ T5276] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 120.954378][ T5276] usb 2-1: device descriptor read/8, error -71 [ 121.063873][ T5276] usb usb2-port1: unable to enumerate USB device [ 121.631804][ T6338] netlink: 16 bytes leftover after parsing attributes in process `syz.2.206'. [ 121.683758][ T5232] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.855239][ T5232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.873214][ T5232] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.879875][ T6351] netlink: 80 bytes leftover after parsing attributes in process `syz.2.211'. [ 121.882543][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.909459][ T5232] usb 5-1: config 0 descriptor?? [ 121.920809][ T5232] pwc: Askey VC010 type 2 USB webcam detected. [ 122.120738][ T5232] pwc: send_video_command error -71 [ 122.129527][ T5232] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 122.137551][ T5232] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 122.150433][ T5232] usb 5-1: USB disconnect, device number 15 [ 122.195530][ T5276] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 122.363554][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 122.371276][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 122.384671][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.395093][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 122.406619][ T5276] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 122.416919][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.426609][ T5276] usb 3-1: Product: syz [ 122.430778][ T5276] usb 3-1: Manufacturer: syz [ 122.435836][ T5276] usb 3-1: SerialNumber: syz [ 122.442228][ T5276] usb 3-1: config 0 descriptor?? [ 122.451305][ T5276] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 122.583642][ T5232] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 122.623635][ T5275] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 122.658270][ T5260] usb 3-1: USB disconnect, device number 5 [ 122.755198][ T5232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.783679][ T5232] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 122.784500][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 122.792809][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.796463][ T5232] usb 5-1: config 0 descriptor?? [ 122.805056][ T5275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.822854][ T5232] pwc: Askey VC010 type 2 USB webcam detected. [ 122.830400][ T5275] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 122.840913][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 122.849504][ T5276] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 122.857625][ T5275] usb 1-1: SerialNumber: syz [ 122.868689][ T5275] usb 1-1: config 0 descriptor?? [ 122.883664][ T5275] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 122.890933][ T5275] usb 1-1: No valid video chain found. [ 123.030107][ T5276] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 123.040516][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.054891][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.070382][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.091577][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.101634][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.111542][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.128691][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.139965][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.153611][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.162681][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.178810][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.210709][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.224891][ T5232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 123.253014][ T5232] pwc: recv_control_msg error -32 req 02 val 2700 [ 123.258976][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.279998][ T5232] pwc: recv_control_msg error -32 req 02 val 2c00 [ 123.282446][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.299347][ T5232] pwc: recv_control_msg error -32 req 04 val 1000 [ 123.324363][ T5232] pwc: recv_control_msg error -32 req 04 val 1300 [ 123.327519][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.351079][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.351104][ T5232] pwc: recv_control_msg error -32 req 04 val 1400 [ 123.360419][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.379204][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.393098][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.393557][ T5232] pwc: recv_control_msg error -32 req 02 val 2000 [ 123.409751][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.419399][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.437174][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.457424][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.469232][ T5232] pwc: recv_control_msg error -32 req 02 val 2100 [ 123.498673][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.509704][ T5232] pwc: recv_control_msg error -32 req 04 val 1500 [ 123.510876][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.535877][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.570659][ T6357] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 123.572434][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.623974][ T5232] pwc: recv_control_msg error -32 req 02 val 2500 [ 123.627911][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.638599][ T5232] pwc: recv_control_msg error -32 req 02 val 2400 [ 123.642602][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.658003][ T5232] pwc: recv_control_msg error -32 req 02 val 2600 [ 123.662841][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 56, changing to 9 [ 123.683007][ T5276] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8582, setting to 1024 [ 123.702382][ T5276] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.712073][ T5276] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.727260][ T5276] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.737390][ T5276] usb 2-1: Product: syz [ 123.741675][ T5276] usb 2-1: Manufacturer: syz [ 123.751797][ T5276] usb 2-1: SerialNumber: syz [ 123.770270][ T5276] usb 2-1: config 0 descriptor?? [ 123.787444][ T5276] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 124.074732][ T6362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.108162][ T6362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.292162][ T5232] pwc: recv_control_msg error -71 req 02 val 2800 [ 124.305161][ T5232] pwc: recv_control_msg error -71 req 04 val 1100 [ 124.333881][ T5232] pwc: recv_control_msg error -71 req 04 val 1200 [ 124.365472][ T5232] pwc: Registered as video71. [ 124.371394][ T5232] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 124.453963][ T5232] usb 5-1: USB disconnect, device number 16 [ 125.453593][ T5232] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 125.656562][ T5275] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.663275][ T5321] usb 2-1: USB disconnect, device number 20 [ 125.681329][ T5276] usb 1-1: USB disconnect, device number 11 [ 125.684060][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.720343][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.731553][ T5321] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 125.750058][ T5232] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 125.790380][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.840609][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.841503][ T5232] usb 5-1: config 0 descriptor?? [ 126.044219][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.113834][ T5275] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 126.161279][ T5275] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 126.190640][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.231049][ T5275] usb 4-1: config 0 descriptor?? [ 126.259567][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.347712][ T5232] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.0006/input/input12 [ 126.483059][ T5232] uclogic 0003:28BD:0935.0006: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 126.508976][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.767032][ T5275] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 126.792407][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.804234][ T5275] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 126.827459][ T5275] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 126.900669][ T6402] fuse: Bad value for 'rootmode' [ 126.910904][ T5275] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 127.002493][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.239442][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.250694][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.259235][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.277609][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.286499][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 127.300023][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.308834][ T11] bridge_slave_1: left allmulticast mode [ 127.350517][ T11] bridge_slave_1: left promiscuous mode [ 127.381075][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.414798][ T11] bridge_slave_0: left allmulticast mode [ 127.430766][ T11] bridge_slave_0: left promiscuous mode [ 127.450853][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.630153][ T11] bridge0: left promiscuous mode [ 128.061321][ T5273] usb 5-1: USB disconnect, device number 17 [ 128.113644][ T46] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 128.252200][ T11] team0: Port device vlan2 removed [ 128.525474][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.543233][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.556378][ T11] bond0 (unregistering): Released all slaves [ 128.734792][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 128.763025][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 128.815287][ T46] usb 4-1: device descriptor read/64, error -71 [ 129.073777][ T46] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 129.096143][ T46] usb 4-1: device reset changed ep0 maxpacket size! [ 129.109213][ T5232] usb 4-1: USB disconnect, device number 10 [ 129.145734][ T6444] netlink: 56 bytes leftover after parsing attributes in process `syz.0.242'. [ 129.248438][ T11] hsr_slave_0: left promiscuous mode [ 129.268573][ T11] hsr_slave_1: left promiscuous mode [ 129.285532][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.298646][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.311487][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.313610][ T5232] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.325073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.343767][ T5225] Bluetooth: hci4: command tx timeout [ 129.401598][ T11] veth1_macvtap: left promiscuous mode [ 129.410588][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 129.411645][ T11] veth0_macvtap: left promiscuous mode [ 129.424987][ T11] veth1_vlan: left promiscuous mode [ 129.427573][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 129.431051][ T11] veth0_vlan: left promiscuous mode [ 129.443325][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 129.452943][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 129.460648][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 129.469009][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 129.514690][ T5232] usb 4-1: Using ep0 maxpacket: 8 [ 129.521813][ T5232] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 129.547580][ T5232] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 129.566897][ T5232] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 129.579880][ T5232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.591754][ T5232] usb 4-1: Product: syz [ 129.605383][ T5232] usb 4-1: Manufacturer: syz [ 129.610717][ T5232] usb 4-1: SerialNumber: syz [ 129.633239][ T5232] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 129.644907][ T5232] dvb-usb: bulk message failed: -22 (3/0) [ 129.669159][ T5232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 129.679029][ T5232] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 129.691238][ T5232] usb 4-1: media controller created [ 129.708760][ T5232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.737822][ T5232] dvb-usb: bulk message failed: -22 (6/0) [ 129.743791][ T5232] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 129.760391][ T5232] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 129.777070][ T5232] dvb-usb: schedule remote query interval to 150 msecs. [ 129.786563][ T5232] dvb-usb: bulk message failed: -22 (3/0) [ 129.815088][ T5232] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 129.872579][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.885553][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.943706][ T5232] dvb-usb: bulk message failed: -22 (1/0) [ 129.949849][ T5232] dvb-usb: error while querying for an remote control event. [ 129.968995][ T6453] fuse: Bad value for 'fd' [ 130.058734][ T5232] usb 4-1: USB disconnect, device number 11 [ 130.128790][ T5232] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 130.277047][ T11] team0 (unregistering): Port device team_slave_1 removed [ 130.320079][ T11] team0 (unregistering): Port device team_slave_0 removed [ 131.065932][ T6407] chnl_net:caif_netlink_parms(): no params data found [ 131.093766][ T5232] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.263663][ T5232] usb 4-1: Using ep0 maxpacket: 32 [ 131.279729][ T5232] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.291271][ T5232] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 131.310587][ T5232] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.371303][ T5232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.431181][ T54] Bluetooth: hci4: command tx timeout [ 131.437180][ T5232] usb 4-1: Product: syz [ 131.441471][ T5232] usb 4-1: Manufacturer: syz [ 131.499081][ T5232] usb 4-1: SerialNumber: syz [ 131.503791][ T54] Bluetooth: hci3: command tx timeout [ 131.642523][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.684194][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.709706][ T6407] bridge_slave_0: entered allmulticast mode [ 131.738251][ T6407] bridge_slave_0: entered promiscuous mode [ 131.775796][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.796055][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.803354][ T6407] bridge_slave_1: entered allmulticast mode [ 131.822838][ T6407] bridge_slave_1: entered promiscuous mode [ 132.083097][ T6407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.133185][ T6407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.270562][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 132.358020][ T6407] team0: Port device team_slave_0 added [ 132.370083][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.385307][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.394380][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.402757][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.414198][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.422174][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.426825][ T6407] team0: Port device team_slave_1 added [ 132.611133][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.820111][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.842627][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.850119][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.877158][ T6407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.972838][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.004396][ T5232] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.018002][ T6407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.044676][ T6407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.073895][ T6407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.103221][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.121736][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129219][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.140296][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.166570][ T6452] bridge_slave_0: entered allmulticast mode [ 133.193640][ T5232] usb 1-1: Using ep0 maxpacket: 32 [ 133.210671][ T5232] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.223677][ T6452] bridge_slave_0: entered promiscuous mode [ 133.259094][ T5232] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.279757][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.298714][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.320644][ T5232] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 133.334814][ T6452] bridge_slave_1: entered allmulticast mode [ 133.347930][ T5232] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 133.356997][ T6452] bridge_slave_1: entered promiscuous mode [ 133.385929][ T5232] usb 1-1: Product: syz [ 133.399804][ T5232] usb 1-1: Manufacturer: syz [ 133.417510][ T5232] hub 1-1:4.0: USB hub found [ 133.469046][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.505482][ T5225] Bluetooth: hci4: command tx timeout [ 133.588060][ T5225] Bluetooth: hci3: command tx timeout [ 133.627885][ T5232] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 133.764311][ T46] usb 4-1: USB disconnect, device number 12 [ 133.860354][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 133.895168][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.938159][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.968566][ T6407] hsr_slave_0: entered promiscuous mode [ 133.992731][ T6407] hsr_slave_1: entered promiscuous mode [ 134.151332][ T6452] team0: Port device team_slave_0 added [ 134.159983][ T6452] team0: Port device team_slave_1 added [ 134.241018][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.248168][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.275287][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.315026][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.322064][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.333695][ T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 134.355239][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.447330][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.464693][ T5225] Bluetooth: hci0: command tx timeout [ 134.503705][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 134.520854][ T58] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 134.534348][ T58] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 134.567875][ T58] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 134.586585][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.589428][ T6521] netlink: 56 bytes leftover after parsing attributes in process `syz.0.253'. [ 134.595040][ T5276] usb 1-1: USB disconnect, device number 12 [ 134.622307][ T58] usb 4-1: Product: syz [ 134.630647][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.631143][ T58] usb 4-1: Manufacturer: syz [ 134.653853][ T58] usb 4-1: SerialNumber: syz [ 134.664415][ T6452] hsr_slave_0: entered promiscuous mode [ 134.665554][ T58] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 134.682777][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 134.690240][ T6452] hsr_slave_1: entered promiscuous mode [ 134.698371][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.708547][ T58] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.718593][ T6452] Cannot create hsr debugfs directory [ 134.724667][ T58] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 134.739540][ T58] usb 4-1: media controller created [ 134.756644][ T58] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.773841][ T58] dvb-usb: bulk message failed: -22 (6/0) [ 134.779697][ T58] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 134.795883][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.807654][ T58] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 134.838529][ T58] dvb-usb: schedule remote query interval to 150 msecs. [ 134.846824][ T58] dvb-usb: bulk message failed: -22 (3/0) [ 134.860320][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 134.871341][ T29] audit: type=1326 audit(1726618354.903:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f157def9 code=0x7ffc0000 [ 134.875323][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.901527][ T29] audit: type=1326 audit(1726618354.903:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f157def9 code=0x7ffc0000 [ 134.902030][ T58] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 134.956057][ T29] audit: type=1326 audit(1726618354.923:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f17f157def9 code=0x7ffc0000 [ 134.984341][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.006294][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 135.012072][ T58] dvb-usb: error while querying for an remote control event. [ 135.036007][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.060241][ T29] audit: type=1326 audit(1726618354.923:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6523 comm="syz.0.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17f157def9 code=0x7ffc0000 [ 135.075601][ T6529] fuse: Bad value for 'fd' [ 135.116608][ T6530] fuse: Bad value for 'fd' [ 135.183928][ T58] dvb-usb: bulk message failed: -22 (1/0) [ 135.189800][ T58] dvb-usb: error while querying for an remote control event. [ 135.239003][ T58] usb 4-1: USB disconnect, device number 13 [ 135.349046][ T58] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 135.469700][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.477821][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.487999][ T6492] bridge_slave_0: entered allmulticast mode [ 135.494870][ T6492] bridge_slave_0: entered promiscuous mode [ 135.546640][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.555646][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.562990][ T6492] bridge_slave_1: entered allmulticast mode [ 135.574653][ T6492] bridge_slave_1: entered promiscuous mode [ 135.592434][ T5225] Bluetooth: hci4: command tx timeout [ 135.664056][ T5225] Bluetooth: hci3: command tx timeout [ 135.666681][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.698835][ T11] bridge_slave_1: left allmulticast mode [ 135.704928][ T11] bridge_slave_1: left promiscuous mode [ 135.710602][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.719415][ T11] bridge_slave_0: left allmulticast mode [ 135.725644][ T11] bridge_slave_0: left promiscuous mode [ 135.731401][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.740796][ T11] bridge_slave_1: left allmulticast mode [ 135.746727][ T11] bridge_slave_1: left promiscuous mode [ 135.752409][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.765125][ T11] bridge_slave_0: left allmulticast mode [ 135.770880][ T11] bridge_slave_0: left promiscuous mode [ 135.778902][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.001448][ T6540] program syz.0.257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.087965][ T6540] netlink: 96 bytes leftover after parsing attributes in process `syz.0.257'. [ 136.546863][ T5225] Bluetooth: hci0: command tx timeout [ 136.901883][ T6550] kvm: pic: non byte read [ 136.979419][ T6557] netlink: 56 bytes leftover after parsing attributes in process `syz.0.261'. [ 137.128530][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.139283][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.150607][ T11] bond0 (unregistering): Released all slaves [ 137.240476][ T5225] Bluetooth: hci2: SCO packet for unknown connection handle 1481 [ 137.260075][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.280054][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.290585][ T11] bond0 (unregistering): Released all slaves [ 137.303135][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.322491][ T6560] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 137.401234][ T6560] batman_adv: batadv0: Adding interface: team0 [ 137.411363][ T6560] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.448777][ T6560] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 137.461962][ T6561] netlink: 'syz.3.262': attribute type 10 has an invalid length. [ 137.479933][ T6561] netlink: 2 bytes leftover after parsing attributes in process `syz.3.262'. [ 137.503897][ T6561] team0: entered promiscuous mode [ 137.509118][ T6561] team_slave_0: entered promiscuous mode [ 137.515928][ T6561] team_slave_1: entered promiscuous mode [ 137.533426][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.541120][ T6561] batman_adv: batadv0: Interface activated: team0 [ 137.548046][ T6561] batman_adv: batadv0: Interface deactivated: team0 [ 137.557223][ T6561] batman_adv: batadv0: Removing interface: team0 [ 137.567111][ T6561] bridge0: port 3(team0) entered blocking state [ 137.576176][ T6561] bridge0: port 3(team0) entered disabled state [ 137.582584][ T6561] team0: entered allmulticast mode [ 137.588817][ T6561] team_slave_0: entered allmulticast mode [ 137.594985][ T6561] team_slave_1: entered allmulticast mode [ 137.600737][ T6561] vlan2: entered allmulticast mode [ 137.606421][ T6561] bridge0: entered allmulticast mode [ 137.612809][ T6561] team0: left allmulticast mode [ 137.619572][ T6561] team_slave_0: left allmulticast mode [ 137.626332][ T6561] team_slave_1: left allmulticast mode [ 137.631810][ T6561] vlan2: left allmulticast mode [ 137.636862][ T6561] bridge0: left allmulticast mode [ 137.643741][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 137.744213][ T5225] Bluetooth: hci3: command tx timeout [ 137.806601][ T6492] team0: Port device team_slave_0 added [ 137.815934][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 137.816666][ T6492] team0: Port device team_slave_1 added [ 137.831479][ T25] usb 1-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 137.840722][ T6407] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.856519][ T25] usb 1-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 137.876946][ T25] usb 1-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 137.885816][ T6566] binder: 6565:6566 ioctl c0884113 20000400 returned -22 [ 137.892800][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.902053][ T25] usb 1-1: Product: syz [ 137.915382][ T25] usb 1-1: Manufacturer: syz [ 137.920035][ T25] usb 1-1: SerialNumber: syz [ 137.933789][ T25] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 137.946115][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 137.968857][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.978902][ T25] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 137.998429][ T25] usb 1-1: media controller created [ 138.016306][ T6407] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 138.029222][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.036540][ T6407] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 138.058576][ T25] dvb-usb: bulk message failed: -22 (6/0) [ 138.064708][ T25] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 138.078745][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.078750][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 138.098229][ T25] dvb-usb: schedule remote query interval to 150 msecs. [ 138.098720][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.111316][ T25] dvb-usb: bulk message failed: -22 (3/0) [ 138.132326][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.153904][ T25] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 138.155268][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.198905][ T6407] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.223176][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.246050][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.261081][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.287863][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.293741][ T5232] dvb-usb: bulk message failed: -22 (1/0) [ 138.311373][ T5232] dvb-usb: error while querying for an remote control event. [ 138.399613][ T6571] fuse: Bad value for 'fd' [ 138.493656][ T5232] dvb-usb: bulk message failed: -22 (1/0) [ 138.499466][ T5232] dvb-usb: error while querying for an remote control event. [ 138.506621][ T58] usb 1-1: USB disconnect, device number 13 [ 138.604019][ T58] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 138.624397][ T5225] Bluetooth: hci0: command tx timeout [ 138.665001][ T6492] hsr_slave_0: entered promiscuous mode [ 138.679707][ T6492] hsr_slave_1: entered promiscuous mode [ 138.688659][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.696525][ T6492] Cannot create hsr debugfs directory [ 138.750627][ T11] hsr_slave_0: left promiscuous mode [ 138.762850][ T11] hsr_slave_1: left promiscuous mode [ 138.770197][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.777759][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.787774][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.795613][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.807101][ T11] hsr_slave_0: left promiscuous mode [ 138.812883][ T11] hsr_slave_1: left promiscuous mode [ 138.819271][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.826806][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.835813][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.843234][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.873914][ T11] veth1_macvtap: left promiscuous mode [ 138.879566][ T11] veth0_macvtap: left promiscuous mode [ 138.885297][ T11] veth1_vlan: left promiscuous mode [ 138.890653][ T11] veth0_vlan: left promiscuous mode [ 138.897180][ T11] veth1_macvtap: left promiscuous mode [ 138.902729][ T11] veth0_macvtap: left promiscuous mode [ 138.908624][ T11] veth1_vlan: left promiscuous mode [ 138.914647][ T11] veth0_vlan: left promiscuous mode [ 139.553721][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.658359][ T11] team0 (unregistering): Port device team_slave_1 removed [ 139.693992][ T25] usb 1-1: device descriptor read/64, error -71 [ 139.737678][ T11] team0 (unregistering): Port device team_slave_0 removed [ 139.872541][ T6593] netlink: 56 bytes leftover after parsing attributes in process `syz.3.270'. [ 139.947175][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 140.101288][ T25] usb 1-1: device descriptor read/64, error -71 [ 140.224904][ T25] usb usb1-port1: attempt power cycle [ 140.518947][ T11] team0 (unregistering): Port device team_slave_1 removed [ 140.562911][ T11] team0 (unregistering): Port device team_slave_0 removed [ 140.578940][ T25] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 140.618632][ T25] usb 1-1: device descriptor read/8, error -71 [ 140.704949][ T5225] Bluetooth: hci0: command tx timeout [ 140.893740][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 140.924979][ T25] usb 1-1: device descriptor read/8, error -71 [ 141.034797][ T25] usb usb1-port1: unable to enumerate USB device [ 141.160916][ T6452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.196548][ T6407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.251317][ T6452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.274808][ T6452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.284182][ T6599] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.317605][ T6407] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.372552][ T6452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.398499][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.405717][ T1061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.486188][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.493375][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.765818][ T6407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.779481][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 141.842284][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.893385][ T6407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.959567][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.997976][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.005156][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.020902][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.028082][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.066767][ T6492] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 142.087095][ T6492] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 142.130505][ T6492] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 142.164117][ T6492] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 142.240833][ T6407] veth0_vlan: entered promiscuous mode [ 142.302846][ T6407] veth1_vlan: entered promiscuous mode [ 142.344422][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.447863][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.487167][ T6407] veth0_macvtap: entered promiscuous mode [ 142.522064][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.547988][ T6407] veth1_macvtap: entered promiscuous mode [ 142.564400][ T6452] veth0_vlan: entered promiscuous mode [ 142.592890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.600014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.618890][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.644115][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.673640][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.699093][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.729379][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.738856][ T6452] veth1_vlan: entered promiscuous mode [ 142.753068][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.760221][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.774772][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 142.796799][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.815890][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.828613][ T6407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.842818][ T6407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.857258][ T6407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.899319][ T6407] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.929092][ T6407] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.941127][ T6407] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.953548][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 142.962377][ T6407] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.977071][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.999055][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.026291][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.039610][ T46] usb 1-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 143.049651][ T6648] netlink: 56 bytes leftover after parsing attributes in process `syz.3.278'. [ 143.060423][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.075606][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.088384][ T46] usb 1-1: config 0 descriptor?? [ 143.145160][ T6452] veth0_macvtap: entered promiscuous mode [ 143.186510][ T6452] veth1_macvtap: entered promiscuous mode [ 143.239352][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.297790][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.298067][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.325588][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.336863][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.343492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.361666][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.375780][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.391996][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.418235][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.492636][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.522270][ T46] sunplus 0003:04FC:05D8.0008: item fetching failed at offset 5/7 [ 143.540535][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.552316][ T46] sunplus 0003:04FC:05D8.0008: probe with driver sunplus failed with error -22 [ 143.562213][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.583711][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.604788][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.625068][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.644901][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.673350][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.690389][ T6452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.707450][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.709199][ T6452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.754617][ T6452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.773634][ T6452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.794634][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.808503][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.830907][ T6492] veth0_vlan: entered promiscuous mode [ 143.969653][ T6492] veth1_vlan: entered promiscuous mode [ 144.030383][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.060549][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.141775][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.159406][ T6492] veth0_macvtap: entered promiscuous mode [ 144.170543][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.200662][ T6492] veth1_macvtap: entered promiscuous mode [ 144.266406][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.300327][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.339305][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.361869][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.375602][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.416321][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.456427][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.475448][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.508424][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.549127][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.575930][ T6691] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.591274][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.618041][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.631440][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.654904][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.670828][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.697012][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.720945][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.743094][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.835401][ T6492] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.864345][ T6492] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.873114][ T6492] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.911155][ T6492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.070599][ T6717] netlink: 56 bytes leftover after parsing attributes in process `syz.4.286'. [ 145.160450][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.188339][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.247659][ T6721] warning: `syz.1.287' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 145.294620][ T1061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.332338][ T1061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.563207][ T6736] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.597421][ T8] usb 1-1: USB disconnect, device number 18 [ 145.727985][ T6739] random: crng reseeded on system resumption [ 146.107655][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.437912][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.674628][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.823701][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.889478][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.901539][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.910104][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.917957][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.925563][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.932780][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.104614][ T5275] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.123563][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.250167][ T11] bridge_slave_1: left allmulticast mode [ 147.269038][ T11] bridge_slave_1: left promiscuous mode [ 147.289156][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.296785][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 147.302072][ T25] usb 3-1: device descriptor read/64, error -71 [ 147.306594][ T5275] usb 4-1: config 10 has an invalid interface number: 20 but max is 2 [ 147.319341][ T11] bridge_slave_0: left allmulticast mode [ 147.328264][ T11] bridge_slave_0: left promiscuous mode [ 147.336920][ T5275] usb 4-1: config 10 has an invalid interface number: 109 but max is 2 [ 147.353905][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.374985][ T5275] usb 4-1: config 10 has an invalid interface descriptor of length 2, skipping [ 147.394793][ T5275] usb 4-1: config 10 has an invalid interface number: 192 but max is 2 [ 147.452241][ T5275] usb 4-1: config 10 has no interface number 0 [ 147.472712][ T5275] usb 4-1: config 10 has no interface number 1 [ 147.511938][ T5275] usb 4-1: config 10 has no interface number 2 [ 147.536386][ T5275] usb 4-1: config 10 interface 20 altsetting 175 bulk endpoint 0x4 has invalid maxpacket 1023 [ 147.569171][ T5275] usb 4-1: config 10 interface 20 altsetting 175 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 147.584287][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 147.599316][ T5275] usb 4-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x8C, skipping [ 147.624997][ T5275] usb 4-1: config 10 interface 20 altsetting 175 endpoint 0x2 has invalid wMaxPacketSize 0 [ 147.638007][ T5275] usb 4-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x2, skipping [ 147.652989][ T5275] usb 4-1: config 10 interface 109 altsetting 13 endpoint 0x5 has invalid maxpacket 1553, setting to 64 [ 147.692820][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 147.718462][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 147.732619][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 147.759451][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 147.787245][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 147.812929][ T5275] usb 4-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 147.840748][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 147.855129][ T25] usb 3-1: device descriptor read/64, error -71 [ 147.869897][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 147.884750][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 147.897340][ T5275] usb 4-1: config 10 interface 192 altsetting 3 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 147.929804][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 147.942006][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 147.959557][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 148.023763][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 148.039388][ T5275] usb 4-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 148.054334][ T25] usb usb3-port1: attempt power cycle [ 148.106179][ T5275] usb 4-1: config 10 interface 20 has no altsetting 0 [ 148.113628][ T5275] usb 4-1: config 10 interface 109 has no altsetting 0 [ 148.121856][ T5275] usb 4-1: config 10 interface 192 has no altsetting 0 [ 148.169982][ T5275] usb 4-1: Dual-Role OTG device on HNP port [ 148.191924][ T5275] usb 4-1: New USB device found, idVendor=1b3d, idProduct=930a, bcdDevice=6e.4d [ 148.212223][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.233369][ T5275] usb 4-1: Product: з [ 148.252899][ T5275] usb 4-1: SerialNumber: 䠊 [ 148.293163][ T6750] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.432486][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 148.506085][ T25] usb 3-1: device descriptor read/8, error -71 [ 148.634521][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.661679][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.682705][ T11] bond0 (unregistering): Released all slaves [ 148.728493][ T5275] ftdi_sio 4-1:10.20: FTDI USB Serial Device converter detected [ 148.738137][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.4.298'. [ 148.757961][ T5275] ftdi_sio ttyUSB0: unknown device type: 0x6e4d [ 148.778937][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.790073][ T5275] ftdi_sio 4-1:10.109: FTDI USB Serial Device converter detected [ 148.829404][ T5275] ftdi_sio ttyUSB1: unknown device type: 0x6e4d [ 148.836917][ T25] usb 3-1: device descriptor read/8, error -71 [ 148.840545][ T5275] ftdi_sio 4-1:10.192: FTDI USB Serial Device converter detected [ 148.872459][ T5275] ftdi_sio ttyUSB2: unknown device type: 0x6e4d [ 148.893672][ T5275] usb 4-1: USB disconnect, device number 14 [ 148.942184][ T5275] ftdi_sio 4-1:10.20: device disconnected [ 148.991042][ T5275] ftdi_sio 4-1:10.109: device disconnected [ 149.003710][ T25] usb usb3-port1: unable to enumerate USB device [ 149.030553][ T5225] Bluetooth: hci1: command tx timeout [ 149.053256][ T5275] ftdi_sio 4-1:10.192: device disconnected [ 149.075500][ T11] hsr_slave_0: left promiscuous mode [ 149.088990][ T11] hsr_slave_1: left promiscuous mode [ 149.109707][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.135603][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.154633][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.175106][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.224610][ T11] veth1_macvtap: left promiscuous mode [ 149.237987][ T11] veth0_macvtap: left promiscuous mode [ 149.251565][ T11] veth1_vlan: left promiscuous mode [ 149.266075][ T11] veth0_vlan: left promiscuous mode [ 149.880919][ T6807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.302'. [ 149.956944][ T6808] loop2: detected capacity change from 0 to 7 [ 149.978587][ T6808] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 149.996457][ T6808] loop2: partition table partially beyond EOD, truncated [ 150.030392][ T6808] loop2: p1 size 6333 extends beyond EOD, truncated [ 150.380389][ T11] team0 (unregistering): Port device team_slave_1 removed [ 150.430459][ T11] team0 (unregistering): Port device team_slave_0 removed [ 151.103576][ T5225] Bluetooth: hci1: command tx timeout [ 151.318152][ T6766] chnl_net:caif_netlink_parms(): no params data found [ 151.553699][ T46] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 151.634312][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.653933][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.669781][ T6766] bridge_slave_0: entered allmulticast mode [ 151.687690][ T6766] bridge_slave_0: entered promiscuous mode [ 151.746258][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.756126][ T46] usb 4-1: config 0 has an invalid interface descriptor of length 7, skipping [ 151.772492][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.783666][ T46] usb 4-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 151.790131][ T6766] bridge_slave_1: entered allmulticast mode [ 151.824777][ T6766] bridge_slave_1: entered promiscuous mode [ 151.833281][ T46] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.881752][ T46] usb 4-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice= 9.0b [ 151.901129][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.922435][ T46] usb 4-1: Product: syz [ 151.940601][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.943495][ T46] usb 4-1: Manufacturer: syz [ 151.982387][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.983493][ T46] usb 4-1: SerialNumber: syz [ 152.052144][ T46] usb 4-1: config 0 descriptor?? [ 152.119291][ T6766] team0: Port device team_slave_0 added [ 152.139367][ T5260] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 152.159538][ T6766] team0: Port device team_slave_1 added [ 152.257021][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.289470][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.321408][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.342385][ T5260] usb 5-1: Using ep0 maxpacket: 8 [ 152.361708][ T5260] usb 5-1: config 10 has an invalid interface number: 20 but max is 2 [ 152.382098][ T5260] usb 5-1: config 10 has an invalid interface number: 109 but max is 2 [ 152.391483][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.411331][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.438885][ T5260] usb 5-1: config 10 has an invalid interface descriptor of length 2, skipping [ 152.454191][ T5260] usb 5-1: config 10 has an invalid interface number: 192 but max is 2 [ 152.462715][ T5260] usb 5-1: config 10 has no interface number 0 [ 152.473121][ T5260] usb 5-1: config 10 has no interface number 1 [ 152.486910][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.498425][ T5260] usb 5-1: config 10 has no interface number 2 [ 152.507083][ T5260] usb 5-1: config 10 interface 20 altsetting 175 bulk endpoint 0x4 has invalid maxpacket 1023 [ 152.529690][ T5260] usb 5-1: config 10 interface 20 altsetting 175 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 152.545945][ T5260] usb 5-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x8C, skipping [ 152.562927][ T5260] usb 5-1: config 10 interface 20 altsetting 175 endpoint 0x2 has invalid wMaxPacketSize 0 [ 152.581395][ T5260] usb 5-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x2, skipping [ 152.613628][ T5260] usb 5-1: config 10 interface 109 altsetting 13 endpoint 0x5 has invalid maxpacket 1553, setting to 64 [ 152.641715][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 152.673658][ T6766] hsr_slave_0: entered promiscuous mode [ 152.681410][ T6766] hsr_slave_1: entered promiscuous mode [ 152.688095][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 152.716044][ T6766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.726044][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 152.743562][ T6766] Cannot create hsr debugfs directory [ 152.768132][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 152.805644][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 152.854408][ T5260] usb 5-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 152.889220][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 152.915243][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 152.955484][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 153.006230][ T5260] usb 5-1: config 10 interface 192 altsetting 3 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 153.039314][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 153.069496][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 153.086433][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 153.106527][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 153.123280][ T5260] usb 5-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 153.139811][ T5260] usb 5-1: config 10 interface 20 has no altsetting 0 [ 153.152209][ T5260] usb 5-1: config 10 interface 109 has no altsetting 0 [ 153.159667][ T5260] usb 5-1: config 10 interface 192 has no altsetting 0 [ 153.171163][ T5260] usb 5-1: Dual-Role OTG device on HNP port [ 153.184965][ T5225] Bluetooth: hci1: command tx timeout [ 153.191708][ T5260] usb 5-1: New USB device found, idVendor=1b3d, idProduct=930a, bcdDevice=6e.4d [ 153.209838][ T5260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.235417][ T5260] usb 5-1: Product: з [ 153.241213][ T5260] usb 5-1: SerialNumber: 䠊 [ 153.262096][ T6842] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.706482][ T5260] ftdi_sio 5-1:10.20: FTDI USB Serial Device converter detected [ 153.762501][ T5260] ftdi_sio ttyUSB0: unknown device type: 0x6e4d [ 153.816356][ T6766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.817639][ T5260] ftdi_sio 5-1:10.109: FTDI USB Serial Device converter detected [ 153.851084][ T6766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.853973][ T5260] ftdi_sio ttyUSB1: unknown device type: 0x6e4d [ 153.879394][ T6766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.895298][ T5260] ftdi_sio 5-1:10.192: FTDI USB Serial Device converter detected [ 153.915139][ T6766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.928107][ T5260] ftdi_sio ttyUSB2: unknown device type: 0x6e4d [ 153.958481][ T5260] usb 5-1: USB disconnect, device number 18 [ 154.024064][ T5260] ftdi_sio 5-1:10.20: device disconnected [ 154.083162][ T5260] ftdi_sio 5-1:10.109: device disconnected [ 154.119190][ T5260] ftdi_sio 5-1:10.192: device disconnected [ 154.172715][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.214996][ T6766] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.231286][ T2582] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.238504][ T2582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.273929][ T25] usb 4-1: USB disconnect, device number 15 [ 154.283544][ T2582] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.290701][ T2582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.471735][ T6766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.671938][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.713955][ T5273] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 154.817144][ T6766] veth0_vlan: entered promiscuous mode [ 154.839547][ T6766] veth1_vlan: entered promiscuous mode [ 154.900723][ T5273] usb 5-1: device descriptor read/64, error -71 [ 154.912440][ T6766] veth0_macvtap: entered promiscuous mode [ 154.967158][ T6766] veth1_macvtap: entered promiscuous mode [ 154.993572][ T5232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 155.001275][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.013384][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.033387][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.050033][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.085785][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.127130][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.151129][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.163678][ T5273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 155.195282][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.203010][ T5232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 155.223560][ T5232] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 155.243521][ T5232] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 155.256276][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.264051][ T5225] Bluetooth: hci1: command tx timeout [ 155.264446][ T5232] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.297626][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.311710][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.330514][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.333574][ T5273] usb 5-1: device descriptor read/64, error -71 [ 155.341853][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.366125][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.367394][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.393214][ T5232] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.420583][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.453752][ T6766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.492751][ T6766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.505624][ T5273] usb usb5-port1: attempt power cycle [ 155.524538][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.547799][ T6766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.573330][ T6766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.597669][ T5232] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 155.607542][ T6766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.618872][ T6893] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 155.623634][ T6766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.691095][ T6893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.791647][ T6893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.856416][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 155.866467][ T5273] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 155.892641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.915124][ T5232] usb 3-1: USB disconnect, device number 10 [ 155.924504][ T5273] usb 5-1: device descriptor read/8, error -71 [ 155.935130][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.007753][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.026180][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.127758][ T6923] [U] [ 156.130791][ T6923] [U] [ 156.133508][ T6923] [U] [ 156.136215][ T6923] [U] [ 156.140595][ T6923] [U] [ 156.143325][ T6923] [U] [ 156.146033][ T6923] [U] [ 156.148741][ T6923] [U] [ 156.155574][ T6923] [U] [ 156.158304][ T6923] [U] [ 156.161010][ T6923] [U] [ 156.189461][ T5273] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 156.238741][ T6920] [U] [ 156.245766][ T5273] usb 5-1: device descriptor read/8, error -71 [ 156.360834][ T5273] usb usb5-port1: unable to enumerate USB device [ 156.368313][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.379039][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.388747][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.396960][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.405747][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.413060][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.590928][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'. [ 156.609251][ T2582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.825579][ T2582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.962557][ T2582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.994321][ T5260] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.096934][ T2582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.173582][ T5260] usb 3-1: Using ep0 maxpacket: 8 [ 157.210484][ T5260] usb 3-1: config 10 has an invalid interface number: 20 but max is 2 [ 157.273566][ T5260] usb 3-1: config 10 has an invalid interface number: 109 but max is 2 [ 157.295135][ T2582] bridge_slave_1: left allmulticast mode [ 157.300848][ T2582] bridge_slave_1: left promiscuous mode [ 157.311672][ T2582] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.313925][ T5260] usb 3-1: config 10 has an invalid interface descriptor of length 2, skipping [ 157.350863][ T5260] usb 3-1: config 10 has an invalid interface number: 192 but max is 2 [ 157.370369][ T5260] usb 3-1: config 10 has no interface number 0 [ 157.381142][ T2582] bridge_slave_0: left allmulticast mode [ 157.387408][ T5260] usb 3-1: config 10 has no interface number 1 [ 157.387435][ T5260] usb 3-1: config 10 has no interface number 2 [ 157.387481][ T5260] usb 3-1: config 10 interface 20 altsetting 175 bulk endpoint 0x4 has invalid maxpacket 1023 [ 157.387507][ T5260] usb 3-1: config 10 interface 20 altsetting 175 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 157.478821][ T2582] bridge_slave_0: left promiscuous mode [ 157.504109][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.527975][ T5260] usb 3-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x8C, skipping [ 157.573280][ T5260] usb 3-1: config 10 interface 20 altsetting 175 endpoint 0x2 has invalid wMaxPacketSize 0 [ 157.615830][ T5260] usb 3-1: config 10 interface 20 altsetting 175 has a duplicate endpoint with address 0x2, skipping [ 157.657300][ T5260] usb 3-1: config 10 interface 109 altsetting 13 endpoint 0x5 has invalid maxpacket 1553, setting to 64 [ 157.700030][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 157.778740][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 157.805085][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 157.836938][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 157.878617][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 157.921547][ T5260] usb 3-1: config 10 interface 109 altsetting 13 has a duplicate endpoint with address 0x4, skipping [ 157.951551][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xE, skipping [ 157.998839][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 158.016181][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 158.030556][ T5260] usb 3-1: config 10 interface 192 altsetting 3 endpoint 0x7 has an invalid bInterval 64, changing to 7 [ 158.047612][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 158.075834][ T6978] syz.0.325 uses obsolete (PF_INET,SOCK_PACKET) [ 158.084423][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 158.118989][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 158.130890][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 158.150994][ T5260] usb 3-1: config 10 interface 192 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 158.174764][ T5260] usb 3-1: config 10 interface 20 has no altsetting 0 [ 158.182949][ T5260] usb 3-1: config 10 interface 109 has no altsetting 0 [ 158.202513][ T5260] usb 3-1: config 10 interface 192 has no altsetting 0 [ 158.230364][ T5260] usb 3-1: Dual-Role OTG device on HNP port [ 158.237674][ T5260] usb 3-1: New USB device found, idVendor=1b3d, idProduct=930a, bcdDevice=6e.4d [ 158.257657][ T5260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.268397][ T5260] usb 3-1: Product: з [ 158.272597][ T5260] usb 3-1: SerialNumber: 䠊 [ 158.299807][ T6947] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.448370][ T2582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.464354][ T54] Bluetooth: hci4: command tx timeout [ 158.516651][ T2582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.529915][ T2582] bond0 (unregistering): Released all slaves [ 158.557295][ T6938] chnl_net:caif_netlink_parms(): no params data found [ 158.754404][ T5260] ftdi_sio 3-1:10.20: FTDI USB Serial Device converter detected [ 158.762910][ T5260] ftdi_sio ttyUSB0: unknown device type: 0x6e4d [ 158.779344][ T5260] ftdi_sio 3-1:10.109: FTDI USB Serial Device converter detected [ 158.789612][ T5260] ftdi_sio ttyUSB1: unknown device type: 0x6e4d [ 158.801604][ T5260] ftdi_sio 3-1:10.192: FTDI USB Serial Device converter detected [ 158.853083][ T5260] ftdi_sio ttyUSB2: unknown device type: 0x6e4d [ 158.915603][ T5260] usb 3-1: USB disconnect, device number 11 [ 158.963246][ T5260] ftdi_sio 3-1:10.20: device disconnected [ 159.004447][ T5260] ftdi_sio 3-1:10.109: device disconnected [ 159.020322][ T5260] ftdi_sio 3-1:10.192: device disconnected [ 159.288473][ T2582] hsr_slave_0: left promiscuous mode [ 159.318899][ T2582] hsr_slave_1: left promiscuous mode [ 159.325395][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.363215][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.394085][ T2582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.442848][ T2582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.501767][ T2582] veth1_macvtap: left promiscuous mode [ 159.523367][ T2582] veth0_macvtap: left promiscuous mode [ 159.552131][ T2582] veth1_vlan: left promiscuous mode [ 159.566034][ T5273] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 159.566521][ T2582] veth0_vlan: left promiscuous mode [ 159.735436][ T5273] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 159.781172][ T5273] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 159.833969][ T5273] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 159.868853][ T5273] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 159.902173][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.957369][ T5273] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.093132][ T5273] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 160.168491][ T6998] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 160.185535][ T6998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.220888][ T6998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.233261][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 160.261579][ T5273] usb 1-1: USB disconnect, device number 19 [ 160.419893][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.337'. [ 160.544156][ T54] Bluetooth: hci4: command tx timeout [ 161.034502][ T2582] team0 (unregistering): Port device team_slave_1 removed [ 161.136583][ T2582] team0 (unregistering): Port device team_slave_0 removed [ 161.303979][ T7049] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.894635][ T6938] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.901762][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.909374][ T6938] bridge_slave_0: entered allmulticast mode [ 161.920028][ T6938] bridge_slave_0: entered promiscuous mode [ 161.970107][ T7066] bridge0: port 3(dummy0) entered blocking state [ 161.978663][ T7066] bridge0: port 3(dummy0) entered disabled state [ 161.985835][ T7066] dummy0: entered allmulticast mode [ 162.002141][ T7066] dummy0: entered promiscuous mode [ 162.021169][ T7066] bridge0: port 3(dummy0) entered blocking state [ 162.028057][ T7066] bridge0: port 3(dummy0) entered forwarding state [ 162.050915][ T7066] bridge0: mtu less than device minimum [ 162.065142][ T7070] sctp: [Deprecated]: syz.4.345 (pid 7070) Use of int in max_burst socket option. [ 162.065142][ T7070] Use struct sctp_assoc_value instead [ 162.070082][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 162.085062][ T6938] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.097817][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.107037][ T6938] bridge_slave_1: entered allmulticast mode [ 162.117076][ T6938] bridge_slave_1: entered promiscuous mode [ 162.161786][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 162.188630][ T7069] hsr0: entered promiscuous mode [ 162.237421][ T6938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.257686][ T6938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.329629][ T6938] team0: Port device team_slave_0 added [ 162.357230][ T6938] team0: Port device team_slave_1 added [ 162.443632][ T5275] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.462449][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.478572][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.527308][ T6938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.541910][ T6938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.557058][ T6938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.588602][ T6938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.606374][ T5275] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 162.623566][ T54] Bluetooth: hci4: command tx timeout [ 162.657391][ T5275] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 162.717163][ T5275] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 162.736149][ T6938] hsr_slave_0: entered promiscuous mode [ 162.758835][ T5275] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.772928][ T6938] hsr_slave_1: entered promiscuous mode [ 162.778275][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.851136][ T5275] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.014786][ T5216] udevd[5216]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.051114][ T7075] fuse: Unknown parameter 'user_i0000000000000000000000000000000000000000' [ 163.063787][ T5275] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 163.107747][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.152862][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.194483][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 163.211552][ T5275] usb 4-1: USB disconnect, device number 16 [ 163.642715][ T7107] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.256299][ T6938] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 164.291356][ T6938] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 164.336543][ T6938] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 164.386915][ T6938] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 164.420937][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 164.462651][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.357'. [ 164.693734][ T6938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.706484][ T54] Bluetooth: hci4: command tx timeout [ 164.781572][ T6938] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.832905][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 164.851095][ T7149] hsr0: entered promiscuous mode [ 164.866043][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.873218][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.896652][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.903850][ T1061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.002466][ T6938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.085624][ T6938] veth0_vlan: entered promiscuous mode [ 165.100926][ T6938] veth1_vlan: entered promiscuous mode [ 165.152090][ T6938] veth0_macvtap: entered promiscuous mode [ 165.180038][ T6938] veth1_macvtap: entered promiscuous mode [ 165.234238][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.257333][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.279845][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.303181][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.322259][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.336253][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.352909][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.365224][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.378781][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.389894][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.400553][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.415624][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.430298][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.448005][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.459934][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.476431][ T6938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.489765][ T6938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.508974][ T6938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.536550][ T6938] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.549392][ T6938] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.562492][ T6938] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.578983][ T6938] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.832635][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.861229][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.876407][ T7177] vivid-000: disconnect [ 165.908242][ T7177] vivid-000: reconnect [ 165.946901][ T2582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.973990][ T2582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.726352][ T7207] raw_sendmsg: syz.1.369 forgot to set AF_INET. Fix it! [ 167.270345][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 167.318750][ T7236] hsr0: entered promiscuous mode [ 167.590431][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.881822][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.154319][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.385633][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.546394][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.556537][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.565498][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.574022][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.585039][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.592944][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.943679][ T999] bridge_slave_1: left allmulticast mode [ 168.949393][ T999] bridge_slave_1: left promiscuous mode [ 168.999614][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.061276][ T7286] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.086384][ T999] bridge_slave_0: left allmulticast mode [ 169.104363][ T999] bridge_slave_0: left promiscuous mode [ 169.113003][ T7286] fuse: Unknown parameter '0x00000000000000030x0000000000000005' [ 169.114118][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.480744][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.492385][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.501003][ T5225] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.511130][ T5225] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.525042][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.532614][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.332486][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.353324][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.369653][ T999] bond0 (unregistering): Released all slaves [ 170.418863][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 170.438551][ T7306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 170.460733][ T7306] batadv1: entered promiscuous mode [ 170.626017][ T5225] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 170.634846][ T5225] Bluetooth: hci0: Injecting HCI hardware error event [ 170.643881][ T5225] Bluetooth: hci0: hardware error 0x00 [ 170.710104][ T54] Bluetooth: hci1: command tx timeout [ 170.977485][ T7271] chnl_net:caif_netlink_parms(): no params data found [ 171.081608][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.106921][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.133342][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.151359][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.195176][ T999] veth1_macvtap: left promiscuous mode [ 171.209849][ T999] veth0_macvtap: left promiscuous mode [ 171.224150][ T999] veth1_vlan: left promiscuous mode [ 171.233716][ T999] veth0_vlan: left promiscuous mode [ 171.583648][ T54] Bluetooth: hci2: command tx timeout [ 171.790537][ T5273] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 171.981748][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.003370][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.026699][ T5273] usb 2-1: New USB device found, idVendor=2247, idProduct=0001, bcdDevice= 0.00 [ 172.045055][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.072981][ T5273] usb 2-1: config 0 descriptor?? [ 172.138231][ T999] team0 (unregistering): Port device team_slave_1 removed [ 172.224320][ T999] team0 (unregistering): Port device team_slave_0 removed [ 172.486516][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 172.495412][ T5273] hid (null): global environment stack underflow [ 172.514450][ T5273] hid-generic 0003:2247:0001.0009: global environment stack underflow [ 172.522666][ T5273] hid-generic 0003:2247:0001.0009: item 0 2 1 11 parsing failed [ 172.532353][ T5273] hid-generic 0003:2247:0001.0009: probe with driver hid-generic failed with error -22 [ 172.674569][ T25] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 172.684125][ T25] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 172.692481][ T25] usb 5-1: Product: syz [ 172.704765][ T25] usb 5-1: SerialNumber: syz [ 172.710316][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.721836][ T25] usb 5-1: config 0 descriptor?? [ 172.740257][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.741387][ T7332] netlink: 56 bytes leftover after parsing attributes in process `syz.1.390'. [ 172.785051][ T5225] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 172.785728][ T5231] Bluetooth: hci1: command tx timeout [ 172.800624][ T7336] netlink: 'syz.1.390': attribute type 10 has an invalid length. [ 172.831796][ T7336] team0: Port device wlan1 added [ 172.850788][ T58] usb 2-1: USB disconnect, device number 21 [ 172.866702][ T7331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.955457][ T7338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.967562][ T7338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.983018][ T7271] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.990943][ T7271] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.022651][ T7271] bridge_slave_0: entered allmulticast mode [ 173.050855][ T7271] bridge_slave_0: entered promiscuous mode [ 173.085628][ T7271] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.122243][ T7271] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.133655][ T7271] bridge_slave_1: entered allmulticast mode [ 173.153045][ T7271] bridge_slave_1: entered promiscuous mode [ 173.174567][ T7346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.192973][ T7346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.295314][ T7271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.312151][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 173.365793][ T25] ldusb 5-1:0.0: Interrupt in endpoint not found [ 173.366578][ T7271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.389103][ T25] usb 5-1: USB disconnect, device number 23 [ 173.495007][ T999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.663909][ T54] Bluetooth: hci2: command tx timeout [ 173.685355][ T999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.723904][ T7271] team0: Port device team_slave_0 added [ 173.743352][ T7271] team0: Port device team_slave_1 added [ 173.919078][ T999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.987884][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.011752][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.022761][ T7301] bridge_slave_0: entered allmulticast mode [ 174.040240][ T7301] bridge_slave_0: entered promiscuous mode [ 174.089367][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.105055][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.140186][ T7271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.170038][ T999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.191086][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.207003][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.234268][ T7301] bridge_slave_1: entered allmulticast mode [ 174.249199][ T7301] bridge_slave_1: entered promiscuous mode [ 174.290801][ T7271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.305079][ T7271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.386582][ T7271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.465720][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.569913][ T7271] hsr_slave_0: entered promiscuous mode [ 174.598549][ T7271] hsr_slave_1: entered promiscuous mode [ 174.626756][ T7271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.655286][ T7271] Cannot create hsr debugfs directory [ 174.677410][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.864341][ T54] Bluetooth: hci1: command tx timeout [ 174.880868][ T7301] team0: Port device team_slave_0 added [ 174.915278][ T7301] team0: Port device team_slave_1 added [ 175.101689][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.112104][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.120853][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.131390][ T7399] ------------[ cut here ]------------ [ 175.137073][ T7399] WARNING: CPU: 1 PID: 7399 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 175.147437][ T7399] Modules linked in: [ 175.151365][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.1.402 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 175.161719][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.172011][ T7399] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 175.178123][ T7399] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 2c bc 3e f6 e9 95 f3 ff ff e8 52 77 d7 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 175.197969][ T7399] RSP: 0018:ffffc900043a7c40 EFLAGS: 00010287 [ 175.204444][ T7399] RAX: ffffffff8bbc61fe RBX: ffffc900043a7e0c RCX: 0000000000040000 [ 175.211064][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.212475][ T7399] RDX: ffffc9000c0d3000 RSI: 000000000000111c RDI: 000000000000111d [ 175.221442][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.227919][ T7399] RBP: ffffc900043a7d40 R08: ffffffff8bbc5eeb R09: 1ffffffff2037ba5 [ 175.235677][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.242905][ T7399] R10: dffffc0000000000 R11: fffffbfff2037ba6 R12: ffff888066756000 [ 175.257999][ T7399] R13: 00000000fffffffc R14: 1ffff92000874f94 R15: ffffc900043a7cc0 [ 175.266234][ T7399] FS: 00007fc7286e46c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 175.275256][ T7399] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.281865][ T7399] CR2: 0000000020001304 CR3: 0000000029f36000 CR4: 00000000003506f0 [ 175.289965][ T7399] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.298050][ T7399] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.306357][ T7399] Call Trace: [ 175.309663][ T7399] [ 175.312614][ T7399] ? __warn+0x168/0x4e0 [ 175.317031][ T7399] ? io_sq_offload_create+0xd2f/0xfd0 [ 175.322447][ T7399] ? report_bug+0x2b3/0x500 [ 175.327065][ T7399] ? io_sq_offload_create+0xd2f/0xfd0 [ 175.332708][ T7399] ? handle_bug+0x60/0x90 [ 175.337174][ T7399] ? exc_invalid_op+0x1a/0x50 [ 175.342939][ T7399] ? asm_exc_invalid_op+0x1a/0x20 [ 175.350811][ T7399] ? io_sq_offload_create+0xa1b/0xfd0 [ 175.356663][ T7399] ? io_sq_offload_create+0xd2e/0xfd0 [ 175.362071][ T7399] ? io_sq_offload_create+0xd2f/0xfd0 [ 175.367553][ T7399] ? __pfx_io_sq_offload_create+0x10/0x10 [ 175.373298][ T7399] ? io_allocate_scq_urings+0x426/0x640 [ 175.378985][ T7399] io_uring_create+0x792/0x1360 [ 175.384102][ T7399] __se_sys_io_uring_setup+0x2ba/0x330 [ 175.389887][ T7399] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 175.396003][ T7399] ? do_syscall_64+0x100/0x230 [ 175.400803][ T7399] ? do_syscall_64+0xb6/0x230 [ 175.405808][ T7399] do_syscall_64+0xf3/0x230 [ 175.410473][ T7399] ? clear_bhb_loop+0x35/0x90 [ 175.415312][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.421235][ T7399] RIP: 0033:0x7fc72797def9 [ 175.425969][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.444901][ T7401] syz.4.403 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 175.445719][ T7399] RSP: 002b:00007fc7286e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 175.464422][ T7399] RAX: ffffffffffffffda RBX: 00007fc727b35f80 RCX: 00007fc72797def9 [ 175.472417][ T7399] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 175.480541][ T7399] RBP: 00007fc7279f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 175.488609][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.496641][ T7399] R13: 0000000000000000 R14: 00007fc727b35f80 R15: 00007fc727c5fa28 [ 175.504741][ T7399] [ 175.508057][ T7399] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 175.515356][ T7399] CPU: 1 UID: 0 PID: 7399 Comm: syz.1.402 Not tainted 6.11.0-syzkaller-04557-g2f27fce67173 #0 [ 175.525598][ T7399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.535647][ T7399] Call Trace: [ 175.538931][ T7399] [ 175.541863][ T7399] dump_stack_lvl+0x241/0x360 [ 175.546580][ T7399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.551790][ T7399] ? __pfx__printk+0x10/0x10 [ 175.556384][ T7399] ? vscnprintf+0x5d/0x90 [ 175.560714][ T7399] panic+0x349/0x870 [ 175.564605][ T7399] ? __warn+0x177/0x4e0 [ 175.568755][ T7399] ? __pfx_panic+0x10/0x10 [ 175.573175][ T7399] __warn+0x34b/0x4e0 [ 175.577150][ T7399] ? io_sq_offload_create+0xd2f/0xfd0 [ 175.582516][ T7399] report_bug+0x2b3/0x500 [ 175.586839][ T7399] ? io_sq_offload_create+0xd2f/0xfd0 [ 175.592206][ T7399] handle_bug+0x60/0x90 [ 175.596357][ T7399] exc_invalid_op+0x1a/0x50 [ 175.600855][ T7399] asm_exc_invalid_op+0x1a/0x20 [ 175.605701][ T7399] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 175.611711][ T7399] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 2c bc 3e f6 e9 95 f3 ff ff e8 52 77 d7 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 175.631315][ T7399] RSP: 0018:ffffc900043a7c40 EFLAGS: 00010287 [ 175.637379][ T7399] RAX: ffffffff8bbc61fe RBX: ffffc900043a7e0c RCX: 0000000000040000 [ 175.645359][ T7399] RDX: ffffc9000c0d3000 RSI: 000000000000111c RDI: 000000000000111d [ 175.653330][ T7399] RBP: ffffc900043a7d40 R08: ffffffff8bbc5eeb R09: 1ffffffff2037ba5 [ 175.661301][ T7399] R10: dffffc0000000000 R11: fffffbfff2037ba6 R12: ffff888066756000 [ 175.669274][ T7399] R13: 00000000fffffffc R14: 1ffff92000874f94 R15: ffffc900043a7cc0 [ 175.677250][ T7399] ? io_sq_offload_create+0xa1b/0xfd0 [ 175.682621][ T7399] ? io_sq_offload_create+0xd2e/0xfd0 [ 175.688048][ T7399] ? __pfx_io_sq_offload_create+0x10/0x10 [ 175.693762][ T7399] ? io_allocate_scq_urings+0x426/0x640 [ 175.699313][ T7399] io_uring_create+0x792/0x1360 [ 175.704171][ T7399] __se_sys_io_uring_setup+0x2ba/0x330 [ 175.709671][ T7399] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 175.715658][ T7399] ? do_syscall_64+0x100/0x230 [ 175.720436][ T7399] ? do_syscall_64+0xb6/0x230 [ 175.725145][ T7399] do_syscall_64+0xf3/0x230 [ 175.729643][ T7399] ? clear_bhb_loop+0x35/0x90 [ 175.734316][ T7399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.740202][ T7399] RIP: 0033:0x7fc72797def9 [ 175.744612][ T7399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.764245][ T7399] RSP: 002b:00007fc7286e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 175.772671][ T7399] RAX: ffffffffffffffda RBX: 00007fc727b35f80 RCX: 00007fc72797def9 [ 175.780635][ T7399] RDX: 0000000000000000 RSI: 0000000020001300 RDI: 0000000000006503 [ 175.788629][ T7399] RBP: 00007fc7279f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 175.796592][ T7399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.804551][ T7399] R13: 0000000000000000 R14: 00007fc727b35f80 R15: 00007fc727c5fa28 [ 175.812523][ T7399] [ 175.815757][ T7399] Kernel Offset: disabled [ 175.820072][ T7399] Rebooting in 86400 seconds..