last executing test programs: 16.067044678s ago: executing program 3 (id=662): ioprio_set$pid(0x0, 0x0, 0x6000) socket$igmp(0x2, 0x3, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/stat\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000003600)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x9) 15.950503803s ago: executing program 1 (id=664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0xaa, 0x0, 0x50, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) syz_clone(0x100, &(0x7f0000000500)="76ab175dd82b17ef4769ff139d3a39a43597810413f20a294f692ae7da09c2c9f377cd11a828d1e908185e07d8e2a715f2b84f949b85bb5b073a898baf1953555fbc8b81e5817a5ef732325de6d04d259d9814d2c4a75749d77fc65cb82102971d8fca21641d8c83139bf79c39d53e72a4733b2aa5363288686a311bdfa536aac3fd3f6e311a7b20dd996348bf9a9f8a6d53a8196c64fb9bef086cdd0c6b3e7189cf905393c8a4a29151d6365988d0bbc162475205375090bf60e22358dbf06e7bac3e1cbad27b31821d26407d3233ab343d22de45f34f0382f31564dc3a206be634b154b6c6db", 0xe7, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000600)="dce3a6f09e7e706072016a82c3c8d1238d7842c8b19411bd011b6f7f99215e8d5958d5558920ad7e0a9d0dbcf8b85977a6970cd88f1f8198b89c82bc3f73d0cfd2a7fa661a59e7d9d0be7c9bf6ebf0f22d65ea9a72b079e2e2c999f119182ca1be13d70b6475259e9a36e2463c8b48d45962f6255b10945ed24a4e3c9955d3f39bf1dcb3d9f6b88acb13d5dde543a15dc9c8eea54cfdbbda974acddfd135b001ad4f7f9000777e7e") setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x8004, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x0, 0x26, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x11, 0xffffffffffffffff, 0x80747000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x2, @sliced={0x7, [0x5, 0x2, 0x1f, 0x9, 0x0, 0xb72, 0x6, 0x358, 0x7, 0xff, 0x5, 0x7, 0x0, 0x8, 0x3f, 0xfff, 0xfff, 0x4, 0x2, 0x40, 0xfffd, 0x81, 0x5, 0x2, 0x6, 0x2, 0x9, 0x6, 0x5, 0x4, 0x0, 0x2, 0x4000, 0xb3, 0x8, 0xa, 0xbf, 0x980a, 0x8, 0x6, 0x29, 0x6, 0x2, 0x2, 0x0, 0x2, 0x1ff, 0x9001], 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8911, &(0x7f0000000300)={'veth0_vlan\x00', @ifru_names='team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) unshare(0x66020380) 15.854141354s ago: executing program 3 (id=665): r0 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@mcast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @replay_thresh={0x8}]}, 0x144}}, 0x0) write$proc_mixer(r0, 0x0, 0xb8) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000800)="43395846179e2f933460e6c9a4698489bdaf08c66db614e61dfe58c2ff08cc1dcea774a95ac1384e82a15811d47acb73faf53d0f2198df8db38343efbdaa7881ad32", 0x42}, {&(0x7f0000000940)="1f87e05d2d0200b69c8b863ee0b2a7c08c69", 0x12}, {&(0x7f0000002200)}, {&(0x7f0000000a00)="97636507a43be1f98f4b7d22a63c0218c684568529be542e5d68dcec1c59f767d00c22da23a8344eed1c0744e4682f6fd6a2b0e1bd7f03a8a051b6317eb3792f5c99212424a53ca48ebf248890793ec19f3a016a7c37ba461cadc9dc0968da", 0x5f}], 0x4, &(0x7f0000003200)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x39}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xdb, 0x3, 0x7, [{@rand_addr, 0x2}, {@multicast1, 0x4}, {@remote}, {@loopback, 0xfffffff9}, {@local, 0x88f}]}, @timestamp={0x44, 0xc, 0x1b, 0x0, 0x0, [0x1, 0x7]}, @timestamp={0x44, 0x18, 0x4f, 0x0, 0x4, [0xfffeffff, 0xfffffffd, 0x200, 0x9, 0x0]}]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000004000)="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", 0xdb2}, {&(0x7f0000000dc0)="e6dc06db7084f3c6cd33bb00fccd99d6e042ef472d52d92d91f34737e1c3d1d6ea8e818c7bf4159796fba7bb564fae4e217db8f8c2dc9452f20cc2427be9b28ebf5e7097856aa0689112e867b155d12252a0aa29ee8196c0a57554ad06245193b86a37779c820875784e", 0x6a}, {&(0x7f0000000e80)="9431de0b100a36683c0f2ee0db0fb987f83c976f7d8788771e04f5966fd56b258a1cc6d5de807cd24b04e1f9abeff7ff57150da62b6ede1f3bd81f91d4c684c7b9df8121cb64fb07cc1b98f3e67611838d8fe083ea31726e3b008dd335", 0x5d}], 0x4}}], 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000019c0)=ANY=[@ANYBLOB], 0x0}, 0x90) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x84181, 0x0) ioctl$MON_IOCT_RING_SIZE(r7, 0x9204, 0xff259) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002c4dd35c21ea4d2eb7068a9177cd744c22862cf54f0856dab01c0de10f4cc22e17e0b6f0148d2e83e2625c14d97eeaa3037041ba4038bbba6ae1aaf8b551431845c1a198d354c79810c724659a0f7cad10fb516c674977ac8834424fe3c4fa7601cc78fe3ed06e597bd94c4510a3caac8f56cc8f973b12e64034284cf63fc810fa1c11510ce2629ea4ae9167a983093a3cf45743541942e5fb4e7cc89dec804993e6d81bb57e5c9b2f", @ANYRES16=r6, @ANYBLOB="010300000000000000001c00000004000180"], 0x18}}, 0x0) 14.785243023s ago: executing program 3 (id=668): syz_clone3(&(0x7f0000000200)={0x10000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f00000000c0)=""/89, 0x59, &(0x7f0000000140)=""/90, &(0x7f00000001c0)}, 0x58) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000002c0)=0x3ff) r1 = socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000480)=""/24) fcntl$dupfd(r0, 0x0, r1) open$dir(&(0x7f00000004c0)='./file0\x00', 0x610002, 0x42) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000600)) 14.630796996s ago: executing program 1 (id=669): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x3, 0x1, 0xffffffff, 0x4080, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a654cb7dd280304000e0580a7b6070d63e286a5cefe", 0x5ac) 14.345678337s ago: executing program 1 (id=670): syz_io_uring_setup(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000000000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x7, 0x6}) 14.084752169s ago: executing program 3 (id=672): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0x0, 0x81}, "af6462f54ef987680ee163bf8514e0873c9e98d71c5464927e70df4fe196d6e39234349fb1806f12baa75a139b16633e8ae3143e542aeba10ee7ec62644226ed65bc4a014e1b423223fc7dcd12d6394e7902a9cec2af5b335e7dd851da31c75586bafa9236dc6aa53b5f33d94fd034272e1e55973bed4598a6c34e7a152f8be713"}, 0x85) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x4, 0x4}, {0x8, 0x400}}}}, 0x11) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000001a80)={0xb, 0x0, 0x0, {0x81}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 13.940881969s ago: executing program 1 (id=673): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 13.313109841s ago: executing program 1 (id=677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = accept4(r1, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='ubifs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e24, @private=0xa010100}}, 0xaa, 0x0, 0x50, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) syz_clone(0x100, &(0x7f0000000500)="76ab175dd82b17ef4769ff139d3a39a43597810413f20a294f692ae7da09c2c9f377cd11a828d1e908185e07d8e2a715f2b84f949b85bb5b073a898baf1953555fbc8b81e5817a5ef732325de6d04d259d9814d2c4a75749d77fc65cb82102971d8fca21641d8c83139bf79c39d53e72a4733b2aa5363288686a311bdfa536aac3fd3f6e311a7b20dd996348bf9a9f8a6d53a8196c64fb9bef086cdd0c6b3e7189cf905393c8a4a29151d6365988d0bbc162475205375090bf60e22358dbf06e7bac3e1cbad27b31821d26407d3233ab343d22de45f34f0382f31564dc3a206be634b154b6c6db", 0xe7, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000600)="dce3a6f09e7e706072016a82c3c8d1238d7842c8b19411bd011b6f7f99215e8d5958d5558920ad7e0a9d0dbcf8b85977a6970cd88f1f8198b89c82bc3f73d0cfd2a7fa661a59e7d9d0be7c9bf6ebf0f22d65ea9a72b079e2e2c999f119182ca1be13d70b6475259e9a36e2463c8b48d45962f6255b10945ed24a4e3c9955d3f39bf1dcb3d9f6b88acb13d5dde543a15dc9c8eea54cfdbbda974acddfd135b001ad4f7f9000777e7e") setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x8004, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x0, 0x26, 0x0, "5819f9e6b047ec2003b8892ff3889dcf134877503c8e12291d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de4"}, 0xd8) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x11, 0xffffffffffffffff, 0x80747000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x2, @sliced={0x7, [0x5, 0x2, 0x1f, 0x9, 0x0, 0xb72, 0x6, 0x358, 0x7, 0xff, 0x5, 0x7, 0x0, 0x8, 0x3f, 0xfff, 0xfff, 0x4, 0x2, 0x40, 0xfffd, 0x81, 0x5, 0x2, 0x6, 0x2, 0x9, 0x6, 0x5, 0x4, 0x0, 0x2, 0x4000, 0xb3, 0x8, 0xa, 0xbf, 0x980a, 0x8, 0x6, 0x29, 0x6, 0x2, 0x2, 0x0, 0x2, 0x1ff, 0x9001], 0x8}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ifreq(r3, 0x8911, &(0x7f0000000300)={'veth0_vlan\x00', @ifru_names='team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xfffffffe}]}}) unshare(0x66020380) 12.399022123s ago: executing program 3 (id=680): setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x1, r4}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000400)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="d9f6f30f2b5d560f01d1b8d6008ec80f011a66b9460800000f3266b8006000000f23c00f21f8663501000e000f23f866b8005000000f23d80f21f86635000000700f23f80f20120f2293", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x0, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039207", 0xd4}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 12.176755083s ago: executing program 1 (id=681): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x1000000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000007dc0), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5f8, 0x318, 0x0, 0x408, 0x0, 0x408, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'veth0_to_bridge\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private2, [], [], 'batadv_slave_0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@ipv6={@empty, @private1, [], [], 'dvmrp1\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52ae}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11.924575026s ago: executing program 3 (id=683): r0 = socket$inet(0x2b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080), 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = io_uring_setup(0x4822, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80046, r9}) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab2", 0x1e}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380), 0x4) write$rfkill(r5, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x4, 0xfc}, 0x8) 5.74393265s ago: executing program 2 (id=706): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f0000080003000600000006"], 0x21c}}, 0x0) r0 = socket$inet(0x2, 0x8000a, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x78}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000a00)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc-aes-neon\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}}}]}, 0x184}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 5.719503613s ago: executing program 4 (id=707): syz_clone3(&(0x7f0000000200)={0x10000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f00000000c0)=""/89, 0x59, &(0x7f0000000140)=""/90, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000480)=""/24) fcntl$dupfd(r0, 0x0, r1) open$dir(&(0x7f00000004c0)='./file0\x00', 0x610002, 0x42) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000600)) 5.133546737s ago: executing program 4 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000085494908560401f0619c0f000001090209000001000000517526bb77e417aabdfb723e77fc6712933243d7b5268032d2c92822d1499e653625b5639a9ef1b3e801a82a804085c0f6863408acbfd2edeaa797d5555cf716f62808d63f05e3c63c6efc70216d2ed1bb243ae9f2926e828578758f7b2d081e093d5c02b835cbdd1805ec4b930fda51df3f926704bd838578686bb2700d734a5dca2f8ec5c181857e5ac9506ffe7b20b78e39309d31819d9d507edaea8ebecc034b254ca373c872b3"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x40, 0x21, 0xff, {0xff, 0x10, "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"}}, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x6828, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x0, 0x9]) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x0, 0x1]) syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000040)=[0x0, 0x1]) socket$packet(0x11, 0x3, 0x300) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) 4.806109452s ago: executing program 2 (id=709): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x74, 0x93, 0x1d, 0x40, 0xc45, 0x614a, 0xe6af, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9c, 0x80, 0xf4}}]}}]}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000840)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "98cec1", 0x0, 0x33, 0x0, @dev, @empty, [@hopopts={0x2c}]}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 4.347696809s ago: executing program 0 (id=711): io_setup(0x0, 0x0) userfaultfd(0x80001) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) write$binfmt_script(r1, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x32, 0x2, 0x0, "444900e1b0faa9b0071c937f7f00002e0c0000ff070000ff0f0000c39b00"}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) pipe(0x0) getpid() socket(0x10, 0x80003, 0x8) ptrace$setopts(0x4200, 0x0, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 3.084237776s ago: executing program 2 (id=712): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00', 0x2}, 0x20) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={0x0}}, 0xa7dceab572a2dc89) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600001000000c001c00", @ANYRES32=0x0, @ANYBLOB="000000009688eb046321e5476ebbafd866cdd64e7b5a40746a0ab445dfef6a3aefcae6ffb7ca670cd8ce591a242bf58b1d5426ae17521fffbae8"], 0x14c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) memfd_create(&(0x7f0000000480)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\x01\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xe1*\xa2c\x12.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xf7\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x1f\x00\x00\x00\x00\x00\x00\x00]\x81\xf3\xf9\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\xa3\xac9&\xe6\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9\x1f\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4X,\v\xa5\xca\v|\xe2L\xac\x80\xc7\x11\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\x01\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\x92\xc3V\x116jY-\x83\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00SDl\xc6\xe0\xc5\xbc\x9c\xe8\x15\xe5kJ\xc2\x8a\x9a7\xff\xd1\r\x96=\x81\xb6\xdb\xf8\x03\x91L\b\xa3\r#\x9cX\xc4\x92\x90[p\xbb]X\rm^}\xa3\xe46(\x9d-\xf8\xf9o\xa9\x13\x00\x00\x00\x00\x00\x00&2\xdfy\xd0\x15\x9d`\x83\xa4\xa6\x14^9]H\xd7/KP\xae\xa8\a.\fHo\xaa\x85@\xae\x8d\xfag\xa5F\xe6\xdf\xc1\x80Sv\x92\x01?\xf6\xad\xe2\xf9A\'\xf49\xb1uo\xc1\x95H\xd6\xdew-;\vR\x15z8\xfe\xcb\xd1]\xe1\xebF\xe8\xe7\x9b\xa81\x8eEp\x99\xd8X\x06\'\xff2\xa8Q\v\x19)\xc35\x03Z0\xfcd5\xb1\x89v?4R,\xd8\x1e\xb3\xfa \x80t\xd8\xc3 \x97A\xef\xc5.\xb1\x02b\xb9\xab\x12@\xa9\x18\x84\xb2\xf6\x16\xb7\xbb\xa4\x89G\b\xc1\n\x04\xbb\a\x14DC#V>\x88\xa09\x8aPU\xf1\xebXn%$\x13\xaa\x80\x86Fb\xc0\\Z\xb3U\x00\xd3\xbb\xbb\xe3\xfe\x9br\xa2\x06\xe63\x1a/(s\xce\xda\x83n-v\x17\xf1D\x8c\xf4x\xc1v\a%\x87\x11\x86\xc92\xb7\x06\xe2\x0e\xb1\xe3KoE#\x88\xdb\xa5\x7fc[\xfd]\r\x87\x94\xf4\x0e47Bo\x8a\xfc\xb9\xcd\xbcK\xc9\x02\x00&\xae*\xa7\xfc\xc6\xf6-T\x1f\xad.\xf0\x00\x00\xf2\xb5\xafq?/\xc0\xec7\xe6>\xa2\x02\xc7x\x98#\xb6\xac\xfd\x86\x91%\x0f\xca><\x02.\xcb3\xfc\ns\xea\xbf&\xae`\x1d\x0f\xd4g\xd7\x81g:u9\xa3\xb2(yK\xcd\xa7\xa1\xc9%\x1b\xee\xd6Ob>\x8c\xde-#W\xfc&-\xd2\xc9\x0eW\xfcV?\x81\x9f+\xda0x0) timer_settime(r3, 0x0, &(0x7f0000000440), &(0x7f0000000c40)) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b000101000000090400000107010100090501", @ANYBLOB="deb275c1230fe5a335b3e301611eedc1711f9a4bc8625a717dde5c49522c789581e56eb7fc3460069097c3ad62e4b44709c20eee82ccd6a9bb6cd1ada6b1aa85b0d069333226ac0df65379f2ccf0e7de87b50de89a6016f006e472d7a5702bc079bdcde1724c3565199ba4f969fba8cd28e55b41766258a9c828399e1b41ebaa958e1281a3eff29b11997fb26dd1e779006aa841cdba279fd5a42876", @ANYRESHEX=r0], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000006c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x0, 0xfffffffffffffcc4, 0x1}}) r5 = socket(0x15, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000300), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) io_setup(0x2, &(0x7f0000000c80)=0x0) io_cancel(r8, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x8, 0x20, r1, &(0x7f0000000cc0)="e7ac0684e40736c969c965ffc05504f4c0606958c235273248ffc3d363e6a91adcb0c8f8c5a9761c1fed6d817e7edc0f663e6dadc851a9531076f39a3ac79760e9", 0x41, 0x8, 0x0, 0x0, r7}, &(0x7f0000000d80)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(r9, &(0x7f0000000000), 0xc00) sendmsg$nl_route(r0, 0x0, 0x0) 1.551177633s ago: executing program 4 (id=715): setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3a3", 0x43, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x1, r4}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x3) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000400)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000040)="d9f6f30f2b5d560f01d1b8d6008ec80f011a66b9460800000f3266b8006000000f23c00f21f8663501000e000f23f866b8005000000f23d80f21f86635000000700f23f80f20120f2293", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000140)={0x0, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r1, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r3, &(0x7f0000000280)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97039207", 0xd4}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.196110718s ago: executing program 0 (id=716): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x7001, 0x0) 1.111075334s ago: executing program 0 (id=717): socket$kcm(0x2, 0x922000000001, 0x106) syz_open_dev$dri(&(0x7f0000000000), 0x7fffffff, 0x4040) 1.048442676s ago: executing program 0 (id=718): syz_clone3(&(0x7f0000000200)={0x10000000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x3d}, &(0x7f00000000c0)=""/89, 0x59, &(0x7f0000000140)=""/90, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000480)=""/24) fcntl$dupfd(r0, 0x0, r1) open$dir(&(0x7f00000004c0)='./file0\x00', 0x610002, 0x42) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000600)) 1.002625574s ago: executing program 4 (id=719): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f0000080003000600000006"], 0x21c}}, 0x0) r0 = socket$inet(0x2, 0x8000a, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r2, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x78}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x2}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$unix(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x0) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000a00)=@updsa={0x184, 0x1a, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'xcbc-aes-neon\x00'}}}, @algo_aead={0x4c, 0x12, {{'aegis256-generic\x00'}}}]}, 0x184}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 635.639857ms ago: executing program 2 (id=720): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x10, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x66, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@local}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x40659}, {@broadcast, 0x8002}, {@empty}, {@multicast1, 0xffd200}, {@local, 0x7}]}, @ssrr={0x89, 0x2b, 0xa9, [@remote, @loopback, @broadcast, @rand_addr=0x64010101, @loopback, @private=0xa010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @multicast1]}, @rr={0x7, 0x17, 0x27, [@dev={0xac, 0x14, 0x14, 0x3}, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0xe8, 0xe8, 0x2f8, 0x2f8, 0xe8, 0x4, 0x0, {[{{@arp={@local, @dev, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_bridge\x00', 'dvmrp0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @empty, @multicast2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "d6eb282a4c66809dc0669d4af5a216ea649bad2bf0ba57ed1bc4520e8680"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gretap0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES8=r3, @ANYBLOB="0000010000b108000300050000003000018008000700c1c8ba7b393020a7c3f7300fb6f044d2abc7fa6dc10f035be424650767071a9b774320756e3d1b79ebaced838888afb5d36ff6e94537e209c474ea9263d693c024754c93803d0000e9eb2e3f74f95cbb19b3f0fa001fcc4b05016c70eb46b30f630e922e4b46ebd07180c1ca3eec815ff2a0ba430885d5a2ddf5ec", @ANYRES32, @ANYRES64=r2], 0x54}}, 0x4000050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="6c6fd640fd1b1ded9c0ea653b86270b97efc75689e35fb03ac77aaacafb695d03964bfc95d7d5ab4e65eb9af2b9de182f55cfd61bb1acaf6ad6c55f10621d3a5c6f059b0c3fa88b40430acea6a26ed28ac81e36bcb6000ef2a2706d5c1c3", @ANYRES64=0x0], 0x9) sendto$inet6(r8, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x9) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@loopback={0xff00000000000000, 0xff02}, 0x0, r0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000001dc0)={'erspan0\x00', 0x0, 0x40, 0x7, 0xb3, 0x9, {{0x16, 0x4, 0x0, 0x30, 0x58, 0x64, 0x0, 0xc0, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0x1c, 0x3a, 0x0, 0x2, [0x5, 0x8, 0x0, 0x200, 0x0, 0x3]}, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x10, 0x18, 0x0, 0x8, [0x3, 0x2c3, 0x0]}, @rr={0x7, 0xf, 0xe6, [@broadcast, @rand_addr=0x64010102, @multicast2]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wg1\x00'}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x20000600}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64=r7, @ANYRES64=0x0, @ANYRESOCT=r9], 0x80}}, 0x0) 447.410151ms ago: executing program 2 (id=721): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r3, 0x8947, &(0x7f0000000000)="3e6af228ef29e7290d04aec03a") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16=r5, @ANYRESOCT=r1, @ANYRES64=r3], 0x31) syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x4, 0x4, 0x3e0, 0x0, 0x1f0, 0x1f0, 0x2f8, 0x2f8, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x430) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r9, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}}, 0x0) 406.665219ms ago: executing program 0 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x4305, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 349.949608ms ago: executing program 0 (id=723): r0 = socket$inet(0x2b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080), 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = io_uring_setup(0x4822, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x6) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890b, &(0x7f00000006c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80046, r9}) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab2", 0x1e}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000", @ANYRES16=0x0], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380), 0x4) write$rfkill(r5, &(0x7f0000000080)={0xd, 0x0, 0x3, 0x4, 0xfc}, 0x8) 232.562196ms ago: executing program 2 (id=724): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x0, 'erspan0\x00'}, 0x18) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x2}, {0x1}]}, 0x14, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0xd0}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x8d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELSETELEM={0xc14, 0xe, 0xa, 0x301, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xbb4, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}]}, {0xb9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x78, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x64, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "3bf48ffcd3c40dbca8666b0390cbdae5670df629a05671c83d4c2a465d8b4b2764ca9712bb57fd4ab6e884f618a97c86cee10b92829c525c400883013b722840be88bf279e42693a3ade97544e35018818a9714646471dfbc2c05c58c84849b93799f7bd18e7063fc245379abfc7"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x9e8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x9b4, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x9a4, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x254, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x66, 0x1, "1a20bdc840499bba095b9e7a190d676979b99e0dc3eab9b1e72d096f322bf5396f53d3f8c794c4a4b6bf403a01c086354f0d5a1918ec8894fb3d26d4d06d2c286279078f416146acda3d4f783e43ddf06cef42e61e33ed31515e5d40948626f03001"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb9, 0x1, "a4ecae1106a7c0768195d207e0f5395c9c2d2970dac2b08df1381e6f489d6e86d29add872a5ea2457e69a0fa547b1d5d7bd513092103e46a78af809ee8e7d4f3c4b10c0ff290f18e3f46e715ba1891131b47aa61036a97dc17a11edbe2e1f2fd7fff2c5fbb06a6ed3b3feaf4245673c63e4ff56a2d7e2e6b100d28befe1d53aeea35f98c38bac07153cfb49ec962d8568f15f9a90415575f5a04519625af546851fbe55f388cee9c971a375dd633a27dce4cfcce0b"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x15, 0x1, "f6a3ba1fecafb699a4f69e56a8ea72ecb4"}, @NFTA_DATA_VALUE={0xf8, 0x1, "7305dc772d51d60fbdf32855a371b8ba4c1c072d401ddf28ea973a81b246627ac60677c14c5f26dc4e68272431d8b033c2bc4fc7202622fb0ef481caeb6bb4eb98edb440ebf4fa9fc7e84578fb8dcd58c7ab2b890b372d67ef7b8a2fc618880aaabb66eeaf8ae20de5e6ae787b75da38f8ef7ba43922912e1f59cf3f3ddae740559768937a4fc299731772270a5a47decf710a51590b3c7e6cfa7fb62e6c12a368da4fdbe9123ef14db60c62c89b3ea56f9820df9b3e5cd515d45afe0142d08a21dd0aec533e5f9f059114dc6fcf6e57e31037d3cf10aee48341b586622eed4acdde43b88bb3f594f04071d7256649719af063c0"}]}, @NFTA_BITWISE_XOR={0x124, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcb, 0x1, "c654cea7ce0f21e9dde83d71db36365efa01cda118155fb25d55d4d1dcc9c775db054a94cbc95ee424733b72b7b5497aa4412425b5b6f148122c3989380a3813527577758f73f7f453b956da084c06d04b8a748e72c8ecc4b651feb787d3c1a304f7e8b5f47aa8fd6061762020c641226b0b0b303ad01bfcb11daff59989c4d556f0df0727167dbe4f0284d69fdc2d02beb9d65ad66fdd2b8cc9a454c8d8f26bf4ad8383d4e3382e946fdbc00f3ec8f4432de4b9a8ad61825491d012514702e0e411206c017510"}, @NFTA_DATA_VALUE={0x51, 0x1, "adec40297ff0c69773d8c1021276eca761587ee335dc07af186a1f32f1d639baa1695c31b541d814fe8f4c614c9e48400f8a999668c0677062c08bd6a3fd9c2491519c7c962e9b11829cd3fa0a"}]}, @NFTA_BITWISE_MASK={0x80, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "9718ba081bd3002b4279982d6dc6bf044f909be4de45a265a8e1b723d8dfe1f4ab00064707964cf1242a1ea751d17b51e34878dc4b9d2fbc14195ac2b772d3f0c8d14414c8dedf12e37e12a7d89be6cdb9e4b86a310d88394320e2f65f295c45"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}]}, @NFTA_BITWISE_DATA={0x3ec, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf8, 0x1, "60fde2196aee2c9f803a49ccce1bd9e0923cc43756ba855f8ee46072fa08dd1fe8ffd04c6f596b2e696170988913eca675f92a5fb8df157586c908146db7372099e6610f74a13edd456e338815ddb6d92c93c2bf24d57aa82a0cdd6539ee23f298e28b452caac49f34101f8e6e64265cc919df1de29200be78aeaf030eaafea5233d3516148c613597bde2c71053c015fcbe4aa659b1216d27a417bfe61cd3712e2ae3092c7f3d3a24f0918cbc999ea8924d55235e3e183d7b138699dc7a956c0114d817c4255681e2c64e40e16489ad1a85f3b86821ac9268591a4a66927b81fc3f11a2e9b7e73f8668fa46d1d12795ff75380f"}, @NFTA_DATA_VALUE={0xe3, 0x1, "7324512e6abf98b38b30d81f7e7ccffcbd8d39384d693922c2f3c243931cdaeed26286d637ade0bd7f3dd084274b1e9334f10ddfe723c24da7b20392324b105e0d719fd01b83f3661e557d5f31e6f1d7ac508d4902d55055fa7b693658b1b1363604cd2aa694b83e7640d2cbad168ff7c6c11da31f307ad226ab282209eefc7924bc0585652993d418685850cbc2f54191f2acbc7bf8427b60d89e6afe0ec51bdad7c8f504abda5a81a901e215ec2821d2fab19fe49a00c239ded8332b88845b6e16abf14c39ca612d624c7dda99eac0685a3cab2df5778c5fc02431e422f8"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x800}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "88c022b8190d404de6323b29342bbd0ee3b9efcc239166a73d63d2326f656995d6d9ebfa020420a60a38d17c75cdfa572a3cfaf069c0c9fbc3082f4b1e9605945173506c12aed0f22cdb23bd33d0486dc6518cfd56fea9e4dc15dea38ad47adc48447cf9a3f0b57ece303e9c1aa57e7c8b3ff905870ce9d4917c7d8b0866889dd25f98a4eadc7ad24d1552a97f0ff44c3b524899c376053b505033aca3734c86677bdfdb7d3a713d3779ce15d3c97a3b34322ecda3f96f38a04070c6ba08400a0cb8c682bbd00d162181b27059ee00003ca8bbe49017778a93bcbaaec42960f13482b29b6b88ab9ae454ed3079012e142b73dcf53d05"}, @NFTA_DATA_VALUE={0x86, 0x1, "c44351c30f826fa514cc16d9c67a11080ade68180e10a096dd6b3bab0c7fe6c75a0d4a3b8ab2b5ac5a5cc9b3117785952631a9fdb2b0c7bd5d89da5853ebf551ba465222a249cf2fe276a0b01e8555d6fd212837df61d25ddeb17feb7520414112b1307954b829384de347acb92c6ad91ff40bd38df97ab3fe711a5b12876fb5ddec"}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x880}, @NFTA_BITWISE_XOR={0x1a4, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0x91, 0x1, "a366e0637daf3fc40d4fea96154e284e18cb7493a81b4dee811adf9418b1f8021aec6a1ffe661eb149766cd0bf133243844dcab48a850f8c5ed93e8889e1ac79f47db71f172593e404e583d7449b688d0b9f8090a0731134586c3a3cc4db05db3ceb6b30e18ebb1e9e1d3b5a4525129b2fead835540f9511365667001d268f11273aaa68c3ffa628adeef43c50"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xa2d524384a90eb78}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0xbc, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x31, 0x7, 0x1, 0x0, "6a0704ef57adbbfb47a00ff276c88229d302f559bfcd7650800cae760ce2c5ce47f02fb1b1941ad21381f25268"}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9e4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0xec, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xb4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'hsr0\x00'}]}]}]}], {0x14}}, 0xe88}}, 0x24024810) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a010400000000000000000200000009000200735726641ff445f0ffdcf0818d01fe0473797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108, 0x340, {0x30030000, 0x4}}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xf0, 0x0, {0x7800}}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) 96.717813ms ago: executing program 4 (id=725): fsopen(&(0x7f0000000080)='binder\x00', 0x300) 0s ago: executing program 4 (id=726): r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000000010108000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001c001880080001400000000008000240e8ffffff070003"], 0x54}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x1, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r4, 0x540b, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000000)=0xa6c3, 0x4) setsockopt$MRT_FLUSH(r8, 0x0, 0xd1, &(0x7f0000000000), 0xfffffffffffffc9a) ioctl$SIOCGETSGCNT_IN6(r9, 0x89e0, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x2000) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0) ioctl$SNDCTL_SYNTH_INFO(0xffffffffffffffff, 0xc08c5102, &(0x7f00000003c0)={"db8fe2075c286646e47de14e5933ea35abd718b89a4e93b56a23b18725c7", 0x9, 0x0, 0x0, 0x6, 0xfffffffb, 0x80, 0x20, 0x4, [0x7, 0x1, 0x80, 0xfffffff7, 0x400, 0xf54, 0x0, 0x2e5d, 0xf58, 0xffff68a7, 0xfffffffd, 0xfffffe00, 0x7, 0x6, 0x20a9, 0x1ff, 0xfffffffe, 0x9, 0x100]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8001) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) kcmp(r0, r0, 0x19a778fad9df666b, 0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): 241.849310][ T5186] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 241.855487][ T6011] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 241.861584][ T6011] usb 1-1: USB disconnect, device number 16 [ 241.877525][ T5974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.907024][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.965666][ T5974] usb 3-1: config 0 descriptor?? [ 241.983156][ T7699] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 242.217380][ T5154] usb 5-1: USB disconnect, device number 13 [ 242.277051][ T5186] cpia1 4-1:0.0: unexpected state after lo power cmd: 7f [ 242.415492][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.502518][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.545101][ T5974] usbhid 3-1:0.0: can't add hid device: -71 [ 242.561463][ T5974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 242.623055][ T5974] usb 3-1: USB disconnect, device number 15 [ 242.675549][ T5186] cpia1 4-1:0.0: only firmware version 1 is supported (got: 127) [ 243.166479][ T5186] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 243.177135][ T5154] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 243.406904][ T5154] usb 2-1: device descriptor read/64, error -71 [ 243.413459][ T5186] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 243.438937][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 243.502746][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.534174][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 243.547500][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 243.602675][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.655812][ T5186] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 243.668213][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 243.680351][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.692236][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 243.706721][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.716993][ T5154] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 243.735655][ T5186] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 243.754806][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 243.773134][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.789817][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 243.815056][ T5186] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 243.862909][ T5186] usb 5-1: string descriptor 0 read error: -22 [ 243.893803][ T5186] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 243.906966][ T5154] usb 2-1: device descriptor read/64, error -71 [ 243.932374][ T5186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.011468][ T5186] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 244.060249][ T5154] usb usb2-port1: attempt power cycle [ 244.147114][ T5186] usb 4-1: USB disconnect, device number 23 [ 244.547646][ T5154] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 244.618804][ T5154] usb 2-1: device descriptor read/8, error -71 [ 244.698592][ T5974] usb 5-1: USB disconnect, device number 14 [ 244.763183][ T5105] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 244.914174][ T5154] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 244.947381][ T5105] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 245.029476][ T5154] usb 2-1: device descriptor read/8, error -71 [ 245.118792][ T7783] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.175390][ T5154] usb usb2-port1: unable to enumerate USB device [ 245.354976][ T7800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.457852][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 246.824447][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 246.824467][ T29] audit: type=1326 audit(1719498193.764:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 246.917011][ T29] audit: type=1326 audit(1719498193.794:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 246.947143][ T5154] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 246.979433][ T29] audit: type=1326 audit(1719498193.804:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 247.024130][ T29] audit: type=1326 audit(1719498193.804:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7828 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 247.054482][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.439'. [ 247.080293][ T5974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.111116][ T7836] team_slave_0: entered promiscuous mode [ 247.129114][ T7836] team_slave_0: entered allmulticast mode [ 247.156960][ T5154] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 247.166588][ T5154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.188093][ T5154] usb 1-1: config 0 descriptor?? [ 247.212646][ T5154] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 247.233400][ T7836] team0: Port device team_slave_0 removed [ 247.287036][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 247.305305][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 247.331657][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 247.372167][ T5974] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 247.404086][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.437761][ T5974] usb 4-1: config 0 descriptor?? [ 247.450305][ T7829] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.479337][ T5974] hub 4-1:0.0: USB hub found [ 247.650162][ T5154] cpia1 1-1:0.0: unexpected state after lo power cmd: 7f [ 247.679781][ T5974] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 247.737194][ T58] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 247.899659][ T7829] mmap: syz.3.435 (7829) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 247.930753][ T58] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 247.940229][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.955852][ T58] usb 5-1: config 0 descriptor?? [ 247.966059][ T58] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 247.998782][ T6011] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 248.054966][ T5154] cpia1 1-1:0.0: only firmware version 1 is supported (got: 127) [ 248.177273][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.441'. [ 248.194797][ T6011] usb 3-1: Using ep0 maxpacket: 32 [ 248.210238][ T6011] usb 3-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 248.234605][ T58] gspca_sonixj: reg_w1 err -71 [ 248.239649][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.253891][ T58] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 248.284879][ T6011] usb 3-1: config 0 descriptor?? [ 248.306760][ T58] usb 5-1: USB disconnect, device number 15 [ 248.324061][ T6011] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input21 [ 248.489039][ T5974] usbhid 4-1:0.0: can't add hid device: -71 [ 248.495262][ T5974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.567853][ T5974] usb 4-1: USB disconnect, device number 24 [ 248.910906][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 249.041439][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 249.407049][ T5154] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 249.461507][ T58] usb 1-1: USB disconnect, device number 17 [ 249.636909][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 249.653149][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 249.684013][ T5154] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42584, setting to 1024 [ 249.699902][ T4530] bcm5974 3-1:0.0: could not read from device [ 249.719212][ T4530] bcm5974 3-1:0.0: could not read from device [ 249.730818][ T5154] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.742973][ T5154] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.751507][ T5154] usb 5-1: Product: syz [ 249.755979][ T5154] usb 5-1: Manufacturer: syz [ 249.775325][ T6011] usb 3-1: USB disconnect, device number 16 [ 249.793903][ T7854] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 249.844327][ T5154] hub 5-1:4.0: USB hub found [ 250.054574][ T5154] hub 5-1:4.0: 2 ports detected [ 250.284328][ T5154] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 250.307440][ T5974] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 250.326135][ T5154] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 250.414127][ T5154] usb 5-1: USB disconnect, device number 16 [ 250.553062][ T5974] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 250.579227][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 250.605383][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.633355][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 250.677241][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.720535][ T5974] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 250.742830][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 250.786913][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.808775][ T7875] xt_hashlimit: size too large, truncated to 1048576 [ 250.815679][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 250.835679][ T7875] xt_hashlimit: overflow, try lower: 0/0 [ 250.876901][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 250.910245][ T5974] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 250.953055][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 251.008587][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.052471][ T7880] fuse: Bad value for 'fd' [ 251.122633][ T5105] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 251.140431][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 251.255306][ T5974] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 251.318608][ T5974] usb 1-1: string descriptor 0 read error: -22 [ 251.324961][ T5974] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 251.371276][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.413591][ T5974] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 251.535669][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 251.562237][ T7892] gretap0: entered promiscuous mode [ 251.617803][ T7892] vlan2: entered promiscuous mode [ 251.620389][ T7892] vlan2: entered allmulticast mode [ 251.620413][ T7892] gretap0: entered allmulticast mode [ 251.700873][ T7892] gretap0: left allmulticast mode [ 251.701122][ T7892] gretap0: left promiscuous mode [ 252.117739][ T5186] usb 1-1: USB disconnect, device number 18 [ 252.236916][ T5974] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 252.397339][ T5974] usb 4-1: device descriptor read/64, error -71 [ 252.539094][ T5150] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 252.696940][ T5974] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 252.757987][ T5150] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 252.774208][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.796286][ T5150] usb 3-1: Product: syz [ 252.802878][ T5150] usb 3-1: Manufacturer: syz [ 252.809713][ T5150] usb 3-1: SerialNumber: syz [ 252.820966][ T5150] usb 3-1: config 0 descriptor?? [ 252.867074][ T5974] usb 4-1: device descriptor read/64, error -71 [ 252.989520][ T5974] usb usb4-port1: attempt power cycle [ 253.248527][ T29] audit: type=1326 audit(1719498200.194:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7895 comm="syz.2.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bd75ae9 code=0x0 [ 253.387499][ T5154] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 253.428260][ T5974] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 253.499883][ T5974] usb 4-1: device descriptor read/8, error -71 [ 253.572847][ T5154] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 253.599937][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.658223][ T5154] usb 5-1: config 0 descriptor?? [ 253.677635][ T5154] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 253.808784][ T5974] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.888441][ T5974] usb 4-1: device descriptor read/8, error -71 [ 254.021513][ T5974] usb usb4-port1: unable to enumerate USB device [ 254.121577][ T5154] cpia1 5-1:0.0: unexpected state after lo power cmd: 7f [ 254.257076][ T5105] Bluetooth: hci4: command 0x0406 tx timeout [ 254.523472][ T5154] cpia1 5-1:0.0: only firmware version 1 is supported (got: 127) [ 254.879653][ T7914] netlink: 68 bytes leftover after parsing attributes in process `syz.0.459'. [ 255.287184][ T5154] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.312977][ T5150] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 255.329206][ T5150] gspca_vc032x: reg_r err -71 [ 255.346902][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.375189][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.395710][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.420342][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.441586][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.460581][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.480927][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.512430][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.527039][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.534089][ T5154] usb 4-1: Using ep0 maxpacket: 16 [ 255.535029][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.544554][ T5154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.555329][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.561755][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.569817][ T5154] usb 4-1: config 0 has no interfaces? [ 255.577777][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.587391][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.590939][ T5154] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 255.606984][ T5154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.617726][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.623809][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.636754][ T5154] usb 4-1: config 0 descriptor?? [ 255.639111][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.660058][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 255.673365][ T5150] gspca_vc032x: Unknown sensor... [ 255.687864][ T5150] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 255.751815][ T5150] usb 3-1: USB disconnect, device number 17 [ 255.858952][ T7917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.875784][ T7917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.940065][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.946478][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.013251][ T5154] usb 5-1: USB disconnect, device number 17 [ 256.136950][ T5150] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 256.191896][ T5186] usb 4-1: USB disconnect, device number 29 [ 256.369747][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.385747][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.417273][ T5150] usb 3-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 256.446317][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.470774][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.0.464'. [ 256.480526][ T5150] usb 3-1: config 0 descriptor?? [ 256.575486][ T5154] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.620494][ T7932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.740145][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.754212][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.777593][ T5154] usb 5-1: Using ep0 maxpacket: 32 [ 256.810625][ T5154] usb 5-1: config 0 has no interfaces? [ 256.832657][ T5154] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 256.862748][ T5154] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 256.893447][ T5154] usb 5-1: Product: syz [ 256.898473][ T5154] usb 5-1: Manufacturer: syz [ 256.936485][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.949066][ T5154] usb 5-1: config 0 descriptor?? [ 256.983968][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.377986][ T7928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.467158][ T6011] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 257.656920][ T6011] usb 4-1: Using ep0 maxpacket: 16 [ 257.687203][ T6011] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 257.706875][ T6011] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 257.740076][ T6011] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.777617][ T6011] usb 4-1: config 0 descriptor?? [ 258.054647][ T5150] wacom 0003:056A:0031.000A: unknown main item tag 0x0 [ 258.137000][ T5150] wacom 0003:056A:0031.000A: unknown main item tag 0x0 [ 258.159803][ T5150] wacom 0003:056A:0031.000A: unknown main item tag 0x0 [ 258.188521][ T5150] wacom 0003:056A:0031.000A: unknown main item tag 0x0 [ 258.198002][ T7934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.217519][ T7934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.226997][ T5150] wacom 0003:056A:0031.000A: unknown main item tag 0x0 [ 258.252142][ T6011] hid (null): report_id 2838798905 is invalid [ 258.278363][ T6011] hid (null): unknown global tag 0xc [ 258.287992][ T5150] wacom 0003:056A:0031.000A: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.2-1/input0 [ 258.297380][ T6011] hid (null): unknown global tag 0xa5 [ 258.321566][ T6011] hid (null): unknown global tag 0xd [ 258.335494][ T6011] hid (null): unknown global tag 0xc [ 258.368467][ T6011] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 258.395169][ T6011] hid-generic 0003:0158:0100.000B: unexpected long global item [ 258.419047][ T6011] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 258.487024][ T6011] usb 4-1: USB disconnect, device number 30 [ 258.620494][ T5154] usb 5-1: USB disconnect, device number 18 [ 258.978373][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.989757][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.999173][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.012383][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.020874][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.032078][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.236682][ T1064] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.280927][ T5100] usb 3-1: USB disconnect, device number 18 [ 259.310678][ T7947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 259.512406][ T1064] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.582714][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 259.620428][ T7955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.652431][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 259.783664][ T1064] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.913944][ T1064] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.988520][ T5100] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 260.046329][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 260.186975][ T5100] usb 3-1: Using ep0 maxpacket: 8 [ 260.211928][ T5100] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.234857][ T5100] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.263712][ T5100] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.287935][ T1064] bridge_slave_1: left allmulticast mode [ 260.299895][ T1064] bridge_slave_1: left promiscuous mode [ 260.306921][ T5100] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.324612][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.355481][ T5100] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.376354][ T1064] bridge_slave_0: left allmulticast mode [ 260.391601][ T1064] bridge_slave_0: left promiscuous mode [ 260.398243][ T5186] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 260.416260][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.449975][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.609255][ T5186] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 260.627504][ T5186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.662341][ T5186] usb 5-1: config 0 descriptor?? [ 260.695888][ T5186] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 260.722622][ T5100] usb 3-1: GET_CAPABILITIES returned 0 [ 260.755904][ T5100] usbtmc 3-1:16.0: can't read capabilities [ 261.059920][ T5105] Bluetooth: hci1: command tx timeout [ 261.230313][ T5186] cpia1 5-1:0.0: unexpected state after lo power cmd: 7f [ 261.474361][ T5100] usb 3-1: USB disconnect, device number 19 [ 261.545192][ T1064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.597855][ T1064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.635204][ T1064] bond0 (unregistering): Released all slaves [ 261.642755][ T5186] cpia1 5-1:0.0: only firmware version 1 is supported (got: 127) [ 261.684469][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.704631][ T5105] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 261.774241][ T7989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.795561][ T7991] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 262.017153][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 262.418496][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.449848][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.478816][ T7945] bridge_slave_0: entered allmulticast mode [ 262.486431][ T7945] bridge_slave_0: entered promiscuous mode [ 262.561258][ T1064] hsr_slave_0: left promiscuous mode [ 262.588157][ T1064] hsr_slave_1: left promiscuous mode [ 262.605695][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.623431][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.641599][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.660602][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.759393][ T1064] veth1_macvtap: left promiscuous mode [ 262.775628][ T1064] veth0_macvtap: left promiscuous mode [ 262.796220][ T1064] veth1_vlan: left promiscuous mode [ 262.817333][ T1064] veth0_vlan: left promiscuous mode [ 262.994305][ T8001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.119322][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.137719][ T5107] Bluetooth: hci1: command tx timeout [ 263.137928][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.152424][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.169353][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.205600][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 263.217667][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.315145][ T5150] usb 5-1: USB disconnect, device number 19 [ 263.507292][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 263.926962][ T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 264.136664][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.153713][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 264.163743][ T58] usb 5-1: config 1 has no interface number 0 [ 264.173424][ T58] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 264.193687][ T58] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.211808][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.221627][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.230270][ T58] usb 5-1: Product: syz [ 264.234665][ T58] usb 5-1: Manufacturer: syz [ 264.239919][ T58] usb 5-1: SerialNumber: syz [ 264.267840][ T58] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 264.278456][ T58] cdc_ncm 5-1:1.1: bind() failure [ 264.382909][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 264.390427][ T5105] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 264.452156][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 265.104130][ T5186] usb 5-1: USB disconnect, device number 20 [ 265.217290][ T5105] Bluetooth: hci1: command tx timeout [ 265.297068][ T5105] Bluetooth: hci3: command tx timeout [ 265.558187][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.577502][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.595323][ T7945] bridge_slave_1: entered allmulticast mode [ 265.609183][ T7945] bridge_slave_1: entered promiscuous mode [ 265.630737][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'. [ 265.965251][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.987413][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 266.045137][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.211296][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 266.223894][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.253784][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 266.272852][ T7945] team0: Port device team_slave_0 added [ 266.295358][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 266.318345][ T9] usb 1-1: Manufacturer: syz [ 266.328247][ T9] usb 1-1: config 0 descriptor?? [ 266.384179][ T7945] team0: Port device team_slave_1 added [ 266.465348][ T8048] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 266.496755][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 266.523628][ T9] rc_core: IR keymap rc-hauppauge not found [ 266.535706][ T8050] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 266.540832][ T9] Registered IR keymap rc-empty [ 266.574684][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 266.635089][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 266.697742][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.714429][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.767113][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.826072][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.888267][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.906442][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.489'. [ 266.940267][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.992649][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.994772][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.017278][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.105933][ T5150] usb 1-1: USB disconnect, device number 19 [ 267.130038][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.297499][ T5105] Bluetooth: hci1: command tx timeout [ 267.377923][ T5105] Bluetooth: hci3: command tx timeout [ 267.521517][ T5105] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 267.542858][ T7945] hsr_slave_0: entered promiscuous mode [ 267.626971][ T8073] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 267.687182][ T5105] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 267.825233][ T7945] hsr_slave_1: entered promiscuous mode [ 267.846954][ T7945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.857656][ T7945] Cannot create hsr debugfs directory [ 267.970395][ T8073] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 267.983703][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 267.997366][ T8070] tc_dump_action: action bad kind [ 268.086378][ T8075] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 268.194333][ T8078] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 268.365747][ T1064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.406669][ T1064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33822 - 0 [ 268.429790][ T1064] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36201 - 0 [ 268.551378][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 268.674534][ T1064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.703681][ T1064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33822 - 0 [ 268.719652][ T1064] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36201 - 0 [ 268.935717][ T1064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.966925][ T1064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33822 - 0 [ 268.999978][ T1064] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36201 - 0 [ 269.324952][ T1064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.357336][ T1064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33822 - 0 [ 269.376419][ T1064] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36201 - 0 [ 269.458793][ T5105] Bluetooth: hci3: command tx timeout [ 269.537175][ T5150] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.736972][ T5150] usb 5-1: Using ep0 maxpacket: 16 [ 269.748496][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 269.776317][ T5150] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 269.792235][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.814558][ T5150] usb 5-1: config 0 descriptor?? [ 269.837513][ T5150] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 269.944685][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.985679][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.007571][ T8003] bridge_slave_0: entered allmulticast mode [ 270.033188][ T8003] bridge_slave_0: entered promiscuous mode [ 270.043202][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.059817][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.074240][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.109808][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.131336][ T8003] bridge_slave_1: entered allmulticast mode [ 270.153875][ T8003] bridge_slave_1: entered promiscuous mode [ 270.330205][ T1064] bridge_slave_1: left allmulticast mode [ 270.335930][ T1064] bridge_slave_1: left promiscuous mode [ 270.353752][ T8157] random: crng reseeded on system resumption [ 270.361245][ T1064] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.400793][ T1064] bridge_slave_0: left allmulticast mode [ 270.411894][ T1064] bridge_slave_0: left promiscuous mode [ 270.440145][ T1064] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.314025][ T1064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.333677][ T1064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.360663][ T1064] bond0 (unregistering): Released all slaves [ 271.385649][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 271.403940][ T8125] netlink: 48 bytes leftover after parsing attributes in process `syz.4.507'. [ 271.414318][ T8125] netlink: 36 bytes leftover after parsing attributes in process `syz.4.507'. [ 271.442873][ T5150] usb 5-1: USB disconnect, device number 21 [ 271.532455][ T8154] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.547112][ T5105] Bluetooth: hci3: command tx timeout [ 271.587932][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.767557][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.926736][ T8003] team0: Port device team_slave_0 added [ 271.944644][ T8003] team0: Port device team_slave_1 added [ 272.100545][ T1064] hsr_slave_0: left promiscuous mode [ 272.113216][ T1064] hsr_slave_1: left promiscuous mode [ 272.123782][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.137745][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.146217][ T1064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.163156][ T1064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.209904][ T1064] veth1_macvtap: left promiscuous mode [ 272.215650][ T1064] veth0_macvtap: left promiscuous mode [ 272.229833][ T1064] veth1_vlan: left promiscuous mode [ 272.235331][ T1064] veth0_vlan: left promiscuous mode [ 272.306973][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 272.493596][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.512885][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.535658][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 272.560970][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.584919][ T9] usb 3-1: config 0 descriptor?? [ 273.004681][ T1064] team0 (unregistering): Port device team_slave_1 removed [ 273.053680][ T1064] team0 (unregistering): Port device team_slave_0 removed [ 273.675056][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.682218][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.715115][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.730268][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.737899][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.770862][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.785249][ T5150] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 273.786073][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 273.810212][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.821520][ T9] usb 3-1: USB disconnect, device number 20 [ 274.005723][ T5150] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 274.034853][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.052013][ T8003] hsr_slave_0: entered promiscuous mode [ 274.077438][ T5150] usb 1-1: config 0 descriptor?? [ 274.083578][ T8003] hsr_slave_1: entered promiscuous mode [ 274.101916][ T5150] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 274.117688][ T8003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.125304][ T8003] Cannot create hsr debugfs directory [ 274.384171][ T7945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.432451][ T7945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.544946][ T5150] cpia1 1-1:0.0: unexpected state after lo power cmd: 7f [ 274.565190][ T7945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.627800][ T5974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 274.641303][ T7945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.851929][ T5974] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 274.907081][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.957357][ T5150] cpia1 1-1:0.0: only firmware version 1 is supported (got: 127) [ 274.967378][ T5974] usb 3-1: config 0 descriptor?? [ 275.055727][ T5974] usb-storage 3-1:0.0: USB Mass Storage device detected [ 275.118010][ T5974] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 275.209643][ T8188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.220413][ T8188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.572371][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.732208][ T8217] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.744546][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.830021][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.837318][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.880423][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.887684][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.208834][ T8003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.242353][ T8003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.282577][ T8003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.338816][ T8003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.405866][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.600007][ T9] usb 1-1: USB disconnect, device number 20 [ 276.629480][ T7945] veth0_vlan: entered promiscuous mode [ 276.697806][ T5974] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 276.751251][ T7945] veth1_vlan: entered promiscuous mode [ 276.907716][ T5974] usb 5-1: Using ep0 maxpacket: 16 [ 276.940737][ T5974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 276.965094][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.982639][ T5974] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 276.994448][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.009919][ T8232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 277.040591][ T5974] usb 5-1: config 0 descriptor?? [ 277.064364][ T7945] veth0_macvtap: entered promiscuous mode [ 277.076737][ T9] usb 3-1: USB disconnect, device number 21 [ 277.091018][ T5974] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 277.161304][ T7945] veth1_macvtap: entered promiscuous mode [ 277.244076][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.256746][ T29] audit: type=1326 audit(1719498224.184:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8227 comm="syz.0.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8e8175ae9 code=0x0 [ 277.291605][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.310962][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.330878][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.358015][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.375614][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.404603][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.438966][ T29] audit: type=1326 audit(1719498224.384:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8236 comm="syz.2.526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b0bd75ae9 code=0x0 [ 277.465908][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.479797][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.497716][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.508546][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.515794][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.534252][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.524'. [ 277.544858][ T8222] netlink: 48 bytes leftover after parsing attributes in process `syz.4.524'. [ 277.561433][ T8222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.524'. [ 277.579791][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.605804][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.644979][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.666070][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.682626][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.700382][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.728197][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.740367][ T5184] usb 5-1: USB disconnect, device number 22 [ 277.760389][ T5186] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.767633][ T5186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.824696][ T7945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.849673][ T7945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.875761][ T7945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.885507][ T7945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.088937][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.116641][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.239582][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.258722][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.309429][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.442400][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.515445][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.720643][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.760208][ T5105] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 279.000852][ T8003] veth0_vlan: entered promiscuous mode [ 279.112118][ T8003] veth1_vlan: entered promiscuous mode [ 279.518688][ T8003] veth0_macvtap: entered promiscuous mode [ 279.583616][ T8003] veth1_macvtap: entered promiscuous mode [ 279.613998][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.642877][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.652079][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.660861][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.669460][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 279.689985][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.795427][ T35] bridge_slave_1: left allmulticast mode [ 279.801710][ T35] bridge_slave_1: left promiscuous mode [ 279.807544][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.876415][ T35] bridge_slave_0: left allmulticast mode [ 279.897935][ T35] bridge_slave_0: left promiscuous mode [ 279.931932][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.110176][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.532'. [ 280.142590][ T6011] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 280.416169][ T6011] usb 3-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 280.416208][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.422576][ T6011] usb 3-1: config 0 descriptor?? [ 280.474958][ T6011] usb-storage 3-1:0.0: USB Mass Storage device detected [ 280.542491][ T6011] usb-storage 3-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 280.841100][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.852592][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.294045][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.316271][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.379723][ T35] bond0 (unregistering): Released all slaves [ 281.777079][ T5105] Bluetooth: hci2: command tx timeout [ 281.961953][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.987069][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.023400][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.075131][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.124382][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.146281][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.173004][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.203725][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.235575][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.286290][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 282.340643][ T29] audit: type=1326 audit(1719498229.284:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8314 comm="syz.1.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0495375ae9 code=0x0 [ 282.415279][ T58] usb 3-1: USB disconnect, device number 22 [ 282.456583][ T35] hsr_slave_0: left promiscuous mode [ 282.469992][ T35] hsr_slave_1: left promiscuous mode [ 282.480315][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.489399][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.506137][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.516056][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.575891][ T35] veth1_macvtap: left promiscuous mode [ 282.590279][ T35] veth0_macvtap: left promiscuous mode [ 282.604123][ T35] veth1_vlan: left promiscuous mode [ 282.627507][ T35] veth0_vlan: left promiscuous mode [ 283.724579][ T35] team0 (unregistering): Port device team_slave_1 removed [ 283.802787][ T35] team0 (unregistering): Port device team_slave_0 removed [ 283.826930][ T5184] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 283.858145][ T5105] Bluetooth: hci2: command tx timeout [ 284.026947][ T5184] usb 5-1: Using ep0 maxpacket: 16 [ 284.036025][ T5184] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 284.054898][ T5184] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 284.064112][ T5184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.082763][ T5184] usb 5-1: config 0 descriptor?? [ 284.100214][ T5184] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 284.302280][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.311980][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.318200][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.341845][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.359849][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.370659][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.380761][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.391602][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.403728][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.495632][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.540'. [ 284.510795][ T8349] netlink: 48 bytes leftover after parsing attributes in process `syz.4.540'. [ 284.520099][ T8349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.540'. [ 284.538042][ T8003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.546914][ T8003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.556338][ T8003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.566654][ T8003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.600615][ T5974] usb 5-1: USB disconnect, device number 23 [ 284.716603][ T8366] input: syz0 as /devices/virtual/input/input26 [ 284.935963][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 285.206132][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.214181][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.232068][ T8284] bridge_slave_0: entered allmulticast mode [ 285.241090][ T8284] bridge_slave_0: entered promiscuous mode [ 285.258522][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.265882][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.279414][ T8284] bridge_slave_1: entered allmulticast mode [ 285.292660][ T8284] bridge_slave_1: entered promiscuous mode [ 285.370965][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.421783][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.456368][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.468635][ T8368] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.475334][ T8368] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 285.535211][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.556285][ T8368] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 285.572642][ T8368] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 285.655702][ T8284] team0: Port device team_slave_0 added [ 285.695425][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.742362][ T8284] team0: Port device team_slave_1 added [ 285.827100][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.885118][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.887212][ T8368] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.903028][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.906528][ T8368] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 285.935988][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.946922][ T5105] Bluetooth: hci2: command tx timeout [ 285.958846][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.965843][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.993292][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.054079][ T8368] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.061376][ T8368] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 286.192606][ T8284] hsr_slave_0: entered promiscuous mode [ 286.213691][ T8284] hsr_slave_1: entered promiscuous mode [ 286.239891][ T8284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.258220][ T8284] Cannot create hsr debugfs directory [ 286.506984][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.514864][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.565218][ T35] bridge_slave_1: left allmulticast mode [ 286.571289][ T5100] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 286.590754][ T35] bridge_slave_1: left promiscuous mode [ 286.598234][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.609627][ T35] bridge_slave_0: left allmulticast mode [ 286.615326][ T35] bridge_slave_0: left promiscuous mode [ 286.641740][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.776944][ T5100] usb 3-1: Using ep0 maxpacket: 8 [ 286.789215][ T5100] usb 3-1: config 6 has an invalid interface number: 3 but max is 2 [ 286.809720][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 286.810393][ T5100] usb 3-1: config 6 has an invalid interface number: 243 but max is 2 [ 286.829033][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 286.837190][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 286.846304][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 286.853951][ T5100] usb 3-1: config 6 has an invalid interface number: 251 but max is 2 [ 286.869416][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 286.882481][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 286.887162][ T5100] usb 3-1: config 6 has no interface number 0 [ 286.930601][ T5100] usb 3-1: config 6 has no interface number 1 [ 286.967078][ T5100] usb 3-1: config 6 has no interface number 2 [ 286.973364][ T5100] usb 3-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 286.993891][ T5100] usb 3-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 287.014182][ T5100] usb 3-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 287.025599][ T5100] usb 3-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 287.045310][ T5100] usb 3-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 287.067125][ T5100] usb 3-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 287.106860][ T5100] usb 3-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 287.127249][ T5100] usb 3-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 287.162373][ T5100] usb 3-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 287.190827][ T5100] usb 3-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 287.224674][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 287.250132][ T5100] usb 3-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 287.262608][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 287.283866][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 287.305119][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 287.326335][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 287.347153][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 287.384271][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 287.415933][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 287.436302][ T5100] usb 3-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 287.454620][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 287.487018][ T5100] usb 3-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 287.517020][ T5100] usb 3-1: config 6 interface 3 has no altsetting 0 [ 287.525445][ T5100] usb 3-1: config 6 interface 251 has no altsetting 0 [ 287.542716][ T5100] usb 3-1: string descriptor 0 read error: -22 [ 287.549747][ T5100] usb 3-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 287.589369][ T5100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.805321][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.820848][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.837889][ T5100] usb 3-1: USB disconnect, device number 23 [ 287.866271][ T35] bond0 (unregistering): Released all slaves [ 288.014452][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.036724][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.155748][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 288.173570][ T8421] hsr0: entered promiscuous mode [ 288.180507][ T8421] macsec1: entered promiscuous mode [ 288.190152][ T8421] macsec1: entered allmulticast mode [ 288.199082][ T8421] hsr0: entered allmulticast mode [ 288.207593][ T8421] hsr_slave_0: entered allmulticast mode [ 288.218006][ T8421] hsr_slave_1: entered allmulticast mode [ 288.327926][ T8424] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.370208][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 288.464367][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 288.795385][ T35] hsr_slave_0: left promiscuous mode [ 288.832616][ T35] hsr_slave_1: left promiscuous mode [ 288.876293][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.908996][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.948562][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.956428][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.964291][ T58] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 288.987157][ T5105] Bluetooth: hci1: command tx timeout [ 289.049191][ T35] veth1_macvtap: left promiscuous mode [ 289.054802][ T35] veth0_macvtap: left promiscuous mode [ 289.073508][ T35] veth1_vlan: left promiscuous mode [ 289.081498][ T35] veth0_vlan: left promiscuous mode [ 289.107027][ T5184] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 289.176110][ T58] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 289.203947][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.260413][ T58] usb 5-1: config 0 descriptor?? [ 289.308414][ T58] usb-storage 5-1:0.0: USB Mass Storage device detected [ 289.309817][ T5184] usb 4-1: Using ep0 maxpacket: 16 [ 289.349341][ T5184] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 289.364406][ T58] usb-storage 5-1:0.0: Quirks match for vid 0781 pid 0100: 1 [ 289.406678][ T5184] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 289.464683][ T5184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.526425][ T5184] usb 4-1: config 0 descriptor?? [ 289.532374][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.559563][ T5184] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 289.570646][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.770172][ T8442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.791124][ T8442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.651546][ T35] team0 (unregistering): Port device team_slave_1 removed [ 290.716509][ T35] team0 (unregistering): Port device team_slave_0 removed [ 291.057159][ T5105] Bluetooth: hci1: command tx timeout [ 291.434003][ T8442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.553'. [ 291.452227][ T8442] netlink: 48 bytes leftover after parsing attributes in process `syz.3.553'. [ 291.466179][ T8442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.553'. [ 291.537160][ T58] usb 4-1: USB disconnect, device number 31 [ 292.092733][ T8284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.210074][ T8405] chnl_net:caif_netlink_parms(): no params data found [ 292.285338][ T8284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.327288][ T8284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.432914][ T8284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.470325][ T9] usb 5-1: USB disconnect, device number 24 [ 292.955453][ T8405] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.976010][ T8405] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.995051][ T8405] bridge_slave_0: entered allmulticast mode [ 293.013881][ T8405] bridge_slave_0: entered promiscuous mode [ 293.036962][ T5974] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.053888][ T8405] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.078667][ T8405] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.100283][ T8405] bridge_slave_1: entered allmulticast mode [ 293.122047][ T8405] bridge_slave_1: entered promiscuous mode [ 293.147298][ T5105] Bluetooth: hci1: command tx timeout [ 293.237978][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 293.277022][ T5974] usb 5-1: config 6 has an invalid interface number: 3 but max is 2 [ 293.285125][ T5974] usb 5-1: config 6 has an invalid interface number: 243 but max is 2 [ 293.314526][ T5974] usb 5-1: config 6 has an invalid interface number: 251 but max is 2 [ 293.326908][ T5974] usb 5-1: config 6 has no interface number 0 [ 293.333162][ T5974] usb 5-1: config 6 has no interface number 1 [ 293.340761][ T5974] usb 5-1: config 6 has no interface number 2 [ 293.358846][ T8405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.368402][ T5974] usb 5-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 293.396218][ T5974] usb 5-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 293.415303][ T8405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.434278][ T5974] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 293.456864][ T5974] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 293.476906][ T5974] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 293.495481][ T5974] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 293.535455][ T5974] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 293.554466][ T5974] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 293.576054][ T5974] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 293.581478][ T8405] team0: Port device team_slave_0 added [ 293.596886][ T5974] usb 5-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 293.615342][ T8405] team0: Port device team_slave_1 added [ 293.628429][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 293.663159][ T5974] usb 5-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 293.689668][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 293.726926][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 293.751674][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 293.769877][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.784178][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 293.795834][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.805622][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 293.863111][ T8405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.865430][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 293.906245][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 293.917541][ T8405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.917562][ T8405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.917592][ T8405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.937003][ T5974] usb 5-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 294.046705][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.054242][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 294.087341][ T5974] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 294.111704][ T5974] usb 5-1: config 6 interface 3 has no altsetting 0 [ 294.136957][ T5974] usb 5-1: config 6 interface 251 has no altsetting 0 [ 294.150326][ T5974] usb 5-1: string descriptor 0 read error: -22 [ 294.178008][ T5974] usb 5-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 294.207416][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.345303][ T8405] hsr_slave_0: entered promiscuous mode [ 294.360398][ T8405] hsr_slave_1: entered promiscuous mode [ 294.376658][ T8405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.396732][ T8405] Cannot create hsr debugfs directory [ 294.416648][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.445840][ T5974] usb 5-1: USB disconnect, device number 25 [ 294.512062][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.519314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.588791][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.596004][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.221703][ T5105] Bluetooth: hci1: command tx timeout [ 295.387802][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 295.496719][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.597430][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 295.623986][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 295.651396][ T9] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 295.674308][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.701806][ T9] usb 5-1: config 0 descriptor?? [ 295.724111][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 295.845189][ T8284] veth0_vlan: entered promiscuous mode [ 295.871107][ T5150] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 295.915531][ T8284] veth1_vlan: entered promiscuous mode [ 295.925761][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.959832][ T8405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.967472][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.998956][ T8405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.044591][ T8284] veth0_macvtap: entered promiscuous mode [ 296.058576][ T8405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.090374][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 296.099999][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 296.102612][ T5150] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 296.119103][ T8539] netlink: 48 bytes leftover after parsing attributes in process `syz.4.567'. [ 296.119127][ T8539] netlink: 36 bytes leftover after parsing attributes in process `syz.4.567'. [ 296.138150][ T8405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.142196][ T9] usb 5-1: USB disconnect, device number 26 [ 296.151168][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.159754][ T5150] usb 4-1: Product: syz [ 296.171204][ T8284] veth1_macvtap: entered promiscuous mode [ 296.196181][ T5150] usb 4-1: Manufacturer: syz [ 296.210946][ T5150] usb 4-1: SerialNumber: syz [ 296.237668][ T5150] usb 4-1: config 0 descriptor?? [ 296.263037][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.297318][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.317666][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.340287][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.355204][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.373817][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.388988][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.459299][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.478585][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.497831][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.523854][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.548767][ T5150] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 296.552036][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.574997][ T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 296.589226][ T5181] udevd[5181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.592715][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.624607][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.648896][ T8284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.662561][ T8284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.667786][ T5100] usb 4-1: USB disconnect, device number 32 [ 296.675600][ T8284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.696415][ T8284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.762679][ T58] usb 3-1: config 0 interface 0 has no altsetting 0 [ 296.780554][ T58] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 296.800107][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.819510][ T58] usb 3-1: Product: syz [ 296.823726][ T58] usb 3-1: Manufacturer: syz [ 296.840948][ T58] usb 3-1: SerialNumber: syz [ 296.873907][ T58] usb 3-1: config 0 descriptor?? [ 296.878190][ T8405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.983386][ T8405] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.017536][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 297.082675][ T5186] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.089931][ T5186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.097181][ T5100] usb 3-1: USB disconnect, device number 24 [ 297.135411][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.142748][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.177918][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.186075][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.240377][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.282445][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.319821][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=1846, bcdDevice= 0.00 [ 297.352605][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.374344][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.382678][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.424312][ T9] usb 5-1: config 0 descriptor?? [ 297.485680][ T8405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.634655][ T8405] veth0_vlan: entered promiscuous mode [ 297.662929][ T8405] veth1_vlan: entered promiscuous mode [ 297.753311][ T8405] veth0_macvtap: entered promiscuous mode [ 297.800263][ T8405] veth1_macvtap: entered promiscuous mode [ 297.857710][ T5186] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 297.871208][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.890365][ T9] hid-generic 0003:0000:1846.000C: collection stack underflow [ 297.905038][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.926951][ T9] hid-generic 0003:0000:1846.000C: item 0 2 0 12 parsing failed [ 297.928724][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.935643][ T9] hid-generic 0003:0000:1846.000C: probe with driver hid-generic failed with error -22 [ 297.976740][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.017010][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.037657][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.066890][ T5186] usb 1-1: Using ep0 maxpacket: 32 [ 298.073191][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.103448][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.108086][ T8560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.119074][ T5186] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 298.144748][ T8560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.149286][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.171942][ T5186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.196477][ T5186] usb 1-1: config 0 descriptor?? [ 298.216769][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.240916][ T5186] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.253952][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.265001][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.287864][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.319030][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.350240][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.383064][ T8405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.422444][ T8405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.462133][ T8405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.513716][ T8405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.531065][ T8405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.545718][ T8405] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.562757][ T8405] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.587236][ T8593] @: renamed from vlan0 (while UP) [ 298.612902][ T8596] netlink: 'syz.2.573': attribute type 10 has an invalid length. [ 298.631785][ T8596] bond0: (slave bond_slave_0): Releasing backup interface [ 298.956606][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.010983][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.076528][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.093729][ T5974] usb 5-1: USB disconnect, device number 27 [ 299.112623][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.140077][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.159870][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.377919][ T5186] gspca_nw80x: reg_r err -110 [ 299.382759][ T5186] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 299.484765][ T6011] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 299.726541][ T6011] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 299.757776][ T8616] sctp: [Deprecated]: syz.0.530 (pid 8616) Use of int in max_burst socket option deprecated. [ 299.757776][ T8616] Use struct sctp_assoc_value instead [ 299.762727][ T6011] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.860886][ T6011] usb 3-1: config 0 descriptor?? [ 299.891269][ T6011] usb 3-1: selecting invalid altsetting 1 [ 300.076354][ T6011] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 300.129542][ T6011] usb 3-1: USB disconnect, device number 25 [ 300.186889][ T58] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 300.387760][ T5181] udevd[5181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.427851][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 300.436977][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 300.463274][ T58] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 300.508364][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.553000][ T8645] input: syz0 as /devices/virtual/input/input27 [ 300.570182][ T58] usb 4-1: config 0 descriptor?? [ 300.601021][ T58] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 300.807847][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.855862][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.988442][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.578'. [ 301.009864][ T8635] netlink: 48 bytes leftover after parsing attributes in process `syz.3.578'. [ 301.025808][ T8635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.578'. [ 301.081686][ T45] usb 4-1: USB disconnect, device number 33 [ 301.314177][ T8645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.337216][ T8645] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 301.363052][ T58] usb 1-1: USB disconnect, device number 21 [ 301.396944][ T5974] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 301.626989][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 301.658328][ T5974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.692777][ T5974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.752053][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 301.801699][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 301.865684][ T5974] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.892390][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.915544][ T5974] hub 5-1:1.0: bad descriptor, ignoring hub [ 301.948704][ T5974] hub 5-1:1.0: probe with driver hub failed with error -5 [ 301.956479][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 301.993930][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 302.039039][ T5974] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 302.045032][ T5974] cdc_wdm 5-1:1.0: Unknown control protocol [ 302.129022][ T5974] usb 5-1: USB disconnect, device number 28 [ 302.577311][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 302.696917][ T5974] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 302.757123][ T58] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 302.896881][ T5974] usb 5-1: Using ep0 maxpacket: 8 [ 302.918469][ T5974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.936958][ T5974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.954550][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 302.967117][ T5974] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 302.969800][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 302.979829][ T5974] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 303.003431][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.024175][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 303.048968][ T5974] hub 5-1:1.0: bad descriptor, ignoring hub [ 303.056365][ T58] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 303.066342][ T5974] hub 5-1:1.0: probe with driver hub failed with error -5 [ 303.073628][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.090814][ T58] usb 2-1: config 0 descriptor?? [ 303.128066][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 303.133348][ T5974] cdc_wdm 5-1:1.0: skipping garbage [ 303.154160][ T5974] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 303.164608][ T5974] cdc_wdm 5-1:1.0: Unknown control protocol [ 303.668979][ T8702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.685499][ T8702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.727119][ T45] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 303.734882][ T2930] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 303.810232][ T58] usbhid 2-1:0.0: can't add hid device: -71 [ 303.817637][ T58] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 303.841715][ T58] usb 2-1: USB disconnect, device number 24 [ 303.927078][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 303.945901][ T2930] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.967733][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2D has invalid maxpacket 33032, setting to 1024 [ 303.983568][ T2930] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.996941][ T45] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 304.006054][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.020509][ T2930] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 304.032801][ T2930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.050462][ T45] usb 4-1: config 0 descriptor?? [ 304.059526][ T45] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 304.078845][ T8734] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 304.271689][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.287587][ T1043] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.307411][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.406168][ T58] usb 1-1: USB disconnect, device number 22 [ 304.594482][ T1043] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.627615][ T45] usb 5-1: USB disconnect, device number 29 [ 304.689743][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.739472][ T8737] netlink: 48 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.782974][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.596'. [ 304.818970][ T58] usb 4-1: USB disconnect, device number 34 [ 304.864243][ T1043] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.427554][ T1043] bridge_slave_1: left allmulticast mode [ 305.443648][ T1043] bridge_slave_1: left promiscuous mode [ 305.464163][ T1043] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.476333][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.495129][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.505653][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.518845][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.526750][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.534236][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.560767][ T1043] bridge_slave_0: left allmulticast mode [ 305.578396][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.591926][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.601094][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.613633][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.621134][ T6011] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 305.641643][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 305.651682][ T5105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.660554][ T1043] bridge_slave_0: left promiscuous mode [ 305.703258][ T1043] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.829032][ T6011] usb 5-1: Using ep0 maxpacket: 8 [ 305.843012][ T6011] usb 5-1: config 6 has an invalid interface number: 3 but max is 2 [ 305.859049][ T6011] usb 5-1: config 6 has an invalid interface number: 243 but max is 2 [ 305.881920][ T6011] usb 5-1: config 6 has an invalid interface number: 251 but max is 2 [ 305.898150][ T6011] usb 5-1: config 6 has no interface number 0 [ 305.912577][ T6011] usb 5-1: config 6 has no interface number 1 [ 305.927465][ T6011] usb 5-1: config 6 has no interface number 2 [ 305.946943][ T6011] usb 5-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024 [ 305.972159][ T6011] usb 5-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 306.039483][ T6011] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 306.091346][ T6011] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 306.133880][ T6011] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7 [ 306.168882][ T6011] usb 5-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024 [ 306.171026][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 306.207421][ T6011] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 306.250053][ T6011] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 306.305303][ T6011] usb 5-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping [ 306.331920][ T8808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.341067][ T6011] usb 5-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 306.341125][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 306.341153][ T6011] usb 5-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7 [ 306.341185][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping [ 306.343186][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping [ 306.446136][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.607'. [ 306.492117][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping [ 306.541680][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 306.591420][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 306.614794][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping [ 306.644640][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 306.658848][ T6011] usb 5-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7 [ 306.701453][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping [ 306.737097][ T6011] usb 5-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping [ 306.782619][ T6011] usb 5-1: config 6 interface 3 has no altsetting 0 [ 306.807567][ T6011] usb 5-1: config 6 interface 251 has no altsetting 0 [ 306.823110][ T6011] usb 5-1: language id specifier not provided by device, defaulting to English [ 306.850858][ T6011] usb 5-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28 [ 306.862689][ T6011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.884853][ T6011] usb 5-1: Product: ࠌ [ 306.891991][ T6011] usb 5-1: Manufacturer: 〉 [ 306.905654][ T6011] usb 5-1: SerialNumber: 屉쿮峭Ⳇ옜타撅ꨱ鹒驹끤⌒꘤팽뗌嗝㕰㮚撫⤸쨵袉잹鴂樓牧쎸럜ቍ閹ധ乸愊뭘皔㪯㹖✸켮䠈웧 [ 307.010856][ T1043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.026484][ T1043] bond0 (unregistering): Released all slaves [ 307.280141][ T6011] usb 5-1: USB disconnect, device number 30 [ 307.702308][ T5105] Bluetooth: hci4: command tx timeout [ 307.974933][ T1043] hsr_slave_0: left promiscuous mode [ 308.032854][ T1043] hsr_slave_1: left promiscuous mode [ 308.051289][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.075002][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.118004][ T1043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.125470][ T1043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.211899][ T1043] veth1_macvtap: left promiscuous mode [ 308.253074][ T8867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.260264][ T1043] veth0_macvtap: left promiscuous mode [ 308.266001][ T1043] veth1_vlan: left promiscuous mode [ 308.285068][ T1043] veth0_vlan: left promiscuous mode [ 308.297456][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 308.405296][ T8872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.621'. [ 308.422437][ T8872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.621'. [ 308.432183][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 308.467951][ T8872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.485859][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 308.948533][ T2930] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 309.117945][ T45] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 309.150500][ T2930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.173497][ T2930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 309.197136][ T2930] usb 5-1: config 1 has no interface number 0 [ 309.203428][ T2930] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 309.215701][ T2930] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.262667][ T2930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.286957][ T2930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.297801][ T2930] usb 5-1: Product: syz [ 309.302012][ T2930] usb 5-1: Manufacturer: syz [ 309.316918][ T2930] usb 5-1: SerialNumber: syz [ 309.329557][ T45] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 309.343007][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.357135][ T2930] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 309.365751][ T2930] cdc_ncm 5-1:1.1: bind() failure [ 309.379769][ T45] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 309.395391][ T45] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 309.404227][ T45] usb 1-1: Manufacturer: syz [ 309.438828][ T45] usb 1-1: config 0 descriptor?? [ 309.527147][ T45] rc_core: IR keymap rc-hauppauge not found [ 309.541993][ T45] Registered IR keymap rc-empty [ 309.573795][ T45] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 309.606192][ T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 309.657437][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.678194][ T2930] usb 5-1: USB disconnect, device number 31 [ 309.681279][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.758932][ T1043] team0 (unregistering): Port device team_slave_1 removed [ 309.776961][ T5105] Bluetooth: hci4: command tx timeout [ 309.838592][ T8883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.878058][ T8883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.946176][ T1043] team0 (unregistering): Port device team_slave_0 removed [ 311.197579][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 311.497175][ T8924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.627793][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 311.778477][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.799741][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.809304][ T8797] bridge_slave_0: entered allmulticast mode [ 311.832556][ T8797] bridge_slave_0: entered promiscuous mode [ 311.857289][ T5105] Bluetooth: hci4: command tx timeout [ 311.874209][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.957125][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.988758][ T8797] bridge_slave_1: entered allmulticast mode [ 311.997510][ T58] usb 1-1: USB disconnect, device number 23 [ 312.012600][ T8797] bridge_slave_1: entered promiscuous mode [ 312.205095][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.239208][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.372257][ T8797] team0: Port device team_slave_0 added [ 312.394027][ T8944] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.436719][ T8797] team0: Port device team_slave_1 added [ 312.546998][ T58] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 312.746465][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.763586][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.786150][ T58] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 312.813280][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.845400][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.864432][ T58] usb 1-1: config 0 descriptor?? [ 312.880761][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.962766][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.076417][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.103521][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.126063][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.142525][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.152079][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.170380][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.242751][ T8947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.281609][ T8947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.310713][ T8978] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 313.350247][ T8978] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 313.447237][ T45] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 313.500159][ T8797] hsr_slave_0: entered promiscuous mode [ 313.525086][ T8797] hsr_slave_1: entered promiscuous mode [ 313.542427][ T8797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.564003][ T8797] Cannot create hsr debugfs directory [ 313.635281][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.677041][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 313.682009][ T58] wacom 0003:056A:0031.000D: unknown main item tag 0x0 [ 313.720830][ T58] wacom 0003:056A:0031.000D: unknown main item tag 0x0 [ 313.728714][ T45] usb 2-1: config 1 has no interface number 0 [ 313.734885][ T45] usb 2-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 313.745836][ T58] wacom 0003:056A:0031.000D: unknown main item tag 0x0 [ 313.745873][ T58] wacom 0003:056A:0031.000D: unknown main item tag 0x0 [ 313.745901][ T58] wacom 0003:056A:0031.000D: unknown main item tag 0x0 [ 313.775157][ T9001] xt_hashlimit: size too large, truncated to 1048576 [ 313.794975][ T58] wacom 0003:056A:0031.000D: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0 [ 313.818452][ T9001] xt_hashlimit: overflow, try lower: 0/0 [ 313.822888][ T45] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.893150][ T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.905980][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.937029][ T5105] Bluetooth: hci4: command tx timeout [ 313.944306][ T45] usb 2-1: Product: syz [ 313.969067][ T45] usb 2-1: Manufacturer: syz [ 313.973752][ T45] usb 2-1: SerialNumber: syz [ 314.048879][ T45] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 314.074718][ T45] cdc_ncm 2-1:1.1: bind() failure [ 314.127599][ T5154] usb 1-1: USB disconnect, device number 24 [ 314.508282][ T5974] usb 2-1: USB disconnect, device number 25 [ 314.696352][ T9013] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 314.997035][ T8797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 315.034281][ T8797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 315.107164][ T8797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.183969][ T8797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.639293][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.720649][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.059066][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.066250][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.189875][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.197190][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.446646][ T8797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.580787][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.713519][ T9059] xt_hashlimit: size too large, truncated to 1048576 [ 316.743618][ T9059] xt_hashlimit: overflow, try lower: 0/0 [ 316.784311][ T8797] veth0_vlan: entered promiscuous mode [ 316.867753][ T8797] veth1_vlan: entered promiscuous mode [ 316.970803][ T8797] veth0_macvtap: entered promiscuous mode [ 317.013509][ T8797] veth1_macvtap: entered promiscuous mode [ 317.100617][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.124799][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.148663][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.169540][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.196871][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.217689][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.236830][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.266843][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.287776][ T5100] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 317.298385][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.342263][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.356901][ T58] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 317.380624][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.387637][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.390978][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.416087][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.451558][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.477674][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.498930][ T5100] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 317.518147][ T5100] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 317.537464][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.554346][ T5100] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 317.566869][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.577557][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 317.582992][ T5100] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 317.602374][ T58] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 317.616542][ T5100] usb 1-1: Manufacturer: syz [ 317.621395][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.641606][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.649763][ T5100] usb 1-1: SerialNumber: syz [ 317.676230][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.685616][ T58] usb 2-1: config 0 descriptor?? [ 317.717252][ T58] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input32 [ 317.734043][ T8797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.769224][ T8797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.792729][ T8797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.816853][ T8797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.883394][ T9077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.921808][ T9077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.082690][ T5100] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 318.123575][ T5100] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input33 [ 318.192549][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.199652][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.206841][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.213811][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.220825][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.228434][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.235422][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.243042][ C0] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 318.249839][ C0] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 318.286761][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.317230][ T5100] usb 1-1: USB disconnect, device number 25 [ 318.327082][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.441003][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.470590][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.815970][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 319.027267][ T58] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 319.066841][ T4530] bcm5974 2-1:0.0: could not read from device [ 319.073664][ T5100] usb 2-1: USB disconnect, device number 26 [ 319.095651][ T5181] bcm5974 2-1:0.0: could not read from device [ 319.250092][ T58] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 319.273525][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12603, setting to 64 [ 319.298091][ T58] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 319.313953][ T58] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 319.323236][ T58] usb 3-1: Product: syz [ 319.327793][ T58] usb 3-1: Manufacturer: syz [ 319.332532][ T58] usb 3-1: SerialNumber: syz [ 319.341132][ T58] usb 3-1: config 0 descriptor?? [ 319.350447][ T9088] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.361570][ T58] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 319.375659][ T58] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 320.222799][ T9104] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.182296][ T9122] xt_hashlimit: size too large, truncated to 1048576 [ 321.193827][ T9122] xt_hashlimit: overflow, try lower: 0/0 [ 321.532614][ T9130] xt_hashlimit: size too large, truncated to 1048576 [ 321.540648][ T9130] xt_hashlimit: overflow, try lower: 0/0 [ 321.872693][ T29] audit: type=1326 audit(1719498268.814:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 321.947540][ T29] audit: type=1326 audit(1719498268.844:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.000921][ T9139] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 322.036919][ T29] audit: type=1326 audit(1719498268.844:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.133947][ T29] audit: type=1326 audit(1719498268.844:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.214184][ T29] audit: type=1326 audit(1719498268.844:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.335980][ T29] audit: type=1326 audit(1719498268.854:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.422792][ T6011] usb 3-1: USB disconnect, device number 26 [ 322.459377][ T6011] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 322.479083][ T29] audit: type=1326 audit(1719498268.854:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.550439][ T29] audit: type=1326 audit(1719498268.854:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.582552][ T29] audit: type=1326 audit(1719498268.854:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 322.681319][ T29] audit: type=1326 audit(1719498268.854:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9141 comm="syz.4.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ef975ae9 code=0x7ffc0000 [ 323.763534][ T9173] Cannot find del_set index 0 as target [ 323.846160][ T9182] input: syz0 as /devices/virtual/input/input34 [ 323.904392][ T9157] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.134946][ T9186] xt_hashlimit: size too large, truncated to 1048576 [ 324.145882][ T9186] xt_hashlimit: overflow, try lower: 0/0 [ 324.632365][ T9182] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.656434][ T9182] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 324.847082][ T6011] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 324.856161][ T9205] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 325.044912][ T6011] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 325.057813][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 12603, setting to 64 [ 325.086418][ T6011] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 325.105400][ T6011] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 325.116450][ T6011] usb 5-1: Product: syz [ 325.122980][ T6011] usb 5-1: Manufacturer: syz [ 325.128427][ T6011] usb 5-1: SerialNumber: syz [ 325.135668][ T6011] usb 5-1: config 0 descriptor?? [ 325.144998][ T9193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 325.169047][ T6011] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 325.189552][ T6011] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 325.436992][ T5974] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 325.516909][ T58] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 325.629806][ T5974] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.649240][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 325.666447][ T5974] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.685993][ T5974] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 325.694412][ T5974] usb 3-1: Manufacturer: syz [ 325.718945][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 325.719055][ T5974] usb 3-1: config 0 descriptor?? [ 325.738758][ T58] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 325.754855][ T5974] igorplugusb 3-1:0.0: endpoint incorrect [ 325.757101][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.779804][ T58] usb 1-1: Product: syz [ 325.789395][ T58] usb 1-1: Manufacturer: syz [ 325.802607][ T58] usb 1-1: SerialNumber: syz [ 325.819832][ T58] usb 1-1: config 0 descriptor?? [ 326.055346][ T6011] usb 3-1: USB disconnect, device number 27 [ 326.065570][ T58] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 326.124902][ T8788] udevd[8788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.241727][ T45] usb 1-1: USB disconnect, device number 26 [ 326.531172][ T9] usb 5-1: USB disconnect, device number 32 [ 326.567344][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 326.684666][ T9216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 326.700668][ T9216] netlink: 44 bytes leftover after parsing attributes in process `syz.4.693'. [ 326.710593][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 326.727953][ T9216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.752308][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 327.186899][ T6011] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 327.377169][ T6011] usb 1-1: Using ep0 maxpacket: 32 [ 327.391725][ T6011] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 327.403029][ T6011] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 327.440760][ T6011] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 327.451046][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.465769][ T6011] usb 1-1: Product: syz [ 327.471404][ T6011] usb 1-1: Manufacturer: syz [ 327.476272][ T6011] usb 1-1: SerialNumber: syz [ 327.501559][ T9221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.756045][ T6011] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 328.071851][ C0] usblp0: nonzero write bulk status received: -71 [ 328.139813][ T45] usb 1-1: USB disconnect, device number 27 [ 328.164105][ T45] usblp0: removed [ 328.895563][ T9246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.931303][ T9246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 329.218776][ T9247] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 329.521046][ T9252] cgroup: fork rejected by pids controller in /syz2 [ 329.529026][ T5974] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 329.560381][ T9254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.704'. [ 329.735312][ T9398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.746974][ T5974] usb 1-1: Using ep0 maxpacket: 32 [ 329.773956][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.705'. [ 329.787037][ T5974] usb 1-1: New USB device found, idVendor=257a, idProduct=260c, bcdDevice=a6.30 [ 329.806980][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.823353][ T5974] usb 1-1: Product: syz [ 329.831463][ T5974] usb 1-1: Manufacturer: syz [ 329.836143][ T5974] usb 1-1: SerialNumber: syz [ 329.854070][ T5974] usb 1-1: config 0 descriptor?? [ 329.886170][ T5974] option 1-1:0.0: GSM modem (1-port) converter detected [ 330.010266][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 330.279560][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.288574][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.403938][ T5974] usb 1-1: USB disconnect, device number 28 [ 330.411349][ T5974] option 1-1:0.0: device disconnected [ 330.857175][ T6011] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 331.061686][ T6011] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 331.086973][ T6011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.107958][ T6011] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 331.124393][ T6011] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 331.126966][ T5974] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 331.132692][ T6011] usb 5-1: Manufacturer: syz [ 331.166259][ T6011] usb 5-1: config 0 descriptor?? [ 331.297100][ T6011] rc_core: IR keymap rc-hauppauge not found [ 331.312980][ T6011] Registered IR keymap rc-empty [ 331.330886][ T6011] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 331.339039][ T5974] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 331.344754][ T6011] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35 [ 331.357992][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.379462][ T9450] random: crng reseeded on system resumption [ 331.399796][ T5974] usb 3-1: config 0 descriptor?? [ 331.439080][ T5974] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 331.645891][ T9442] team_slave_0: entered promiscuous mode [ 331.651762][ T9442] team_slave_1: entered promiscuous mode [ 331.661567][ T9442] macsec1: entered promiscuous mode [ 331.670946][ T9442] team0: entered promiscuous mode [ 331.692106][ T9442] macsec1: entered allmulticast mode [ 331.698092][ T9442] team0: entered allmulticast mode [ 331.703986][ T9442] team_slave_0: entered allmulticast mode [ 331.714168][ T9442] team_slave_1: entered allmulticast mode [ 331.753824][ T9442] team0: left allmulticast mode [ 331.759121][ T9442] team_slave_0: left allmulticast mode [ 331.765412][ T9442] team_slave_1: left allmulticast mode [ 331.786104][ T9442] team0: left promiscuous mode [ 331.805847][ T9442] team_slave_0: left promiscuous mode [ 331.811447][ T9442] team_slave_1: left promiscuous mode [ 331.943426][ T5974] gspca_sonixj: reg_w1 err -71 [ 331.960954][ T5974] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 331.997246][ T5974] usb 3-1: USB disconnect, device number 28 [ 332.122334][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.143889][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.331366][ T9440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.347833][ T9440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.910530][ T5974] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 333.106962][ T5974] usb 3-1: Using ep0 maxpacket: 32 [ 333.123357][ T5974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 30130, setting to 1024 [ 333.145044][ T5974] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 333.170562][ T5974] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 333.183628][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.191887][ T5974] usb 3-1: Product: syz [ 333.203053][ T5974] usb 3-1: Manufacturer: syz [ 333.207821][ T5974] usb 3-1: SerialNumber: syz [ 333.222911][ T9455] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 333.456552][ T5974] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 333.987020][ T9] usb 5-1: USB disconnect, device number 33 [ 334.227599][ C0] usblp0: nonzero write bulk status received: -71 [ 334.329035][ T9] usb 3-1: USB disconnect, device number 29 [ 334.342373][ T9] usblp0: removed [ 334.743872][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 335.295674][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.721'. [ 335.354410][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.721'. [ 335.395423][ T9485] input: syz0 as /devices/virtual/input/input36 [ 335.538961][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 335.661067][ T9495] sock: sock_timestamping_bind_phc: sock not bind to device [ 378.820003][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.826353][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.260828][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.273544][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.537203][ T30] INFO: task kworker/1:2:2930 blocked for more than 143 seconds. [ 473.545000][ T30] Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 473.552728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.561467][ T30] task:kworker/1:2 state:D stack:18200 pid:2930 tgid:2930 ppid:2 flags:0x00004000 [ 473.571944][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 473.580695][ T30] Call Trace: [ 473.584022][ T30] [ 473.587063][ T30] __schedule+0x17e8/0x4a20 [ 473.591866][ T30] ? __pfx___schedule+0x10/0x10 [ 473.596847][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 473.602878][ T30] ? __pfx_lock_release+0x10/0x10 [ 473.613204][ T30] ? kick_pool+0x1bd/0x620 [ 473.619142][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.624501][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 473.634473][ T30] ? schedule+0x90/0x320 [ 473.639229][ T30] schedule+0x14b/0x320 [ 473.643522][ T30] schedule_preempt_disabled+0x13/0x30 [ 473.655198][ T30] __mutex_lock+0x6a4/0xd70 [ 473.659901][ T30] ? __mutex_lock+0x527/0xd70 [ 473.664643][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.676691][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 473.681852][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 473.690193][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.696580][ T30] ? process_scheduled_works+0x945/0x1830 [ 473.708087][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 473.714216][ T30] ? process_scheduled_works+0x945/0x1830 [ 473.723474][ T30] process_scheduled_works+0xa2c/0x1830 [ 473.729506][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 473.735826][ T30] ? assign_work+0x364/0x3d0 [ 473.740612][ T30] worker_thread+0x86d/0xd50 [ 473.745253][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 473.756846][ T30] ? __kthread_parkme+0x169/0x1d0 [ 473.761939][ T30] ? __pfx_worker_thread+0x10/0x10 [ 473.771693][ T30] kthread+0x2f0/0x390 [ 473.775825][ T30] ? __pfx_worker_thread+0x10/0x10 [ 473.782351][ T30] ? __pfx_kthread+0x10/0x10 [ 473.791563][ T30] ret_from_fork+0x4b/0x80 [ 473.796485][ T30] ? __pfx_kthread+0x10/0x10 [ 473.803377][ T30] ret_from_fork_asm+0x1a/0x30 [ 473.812895][ T30] [ 473.815995][ T30] INFO: task syz.1.681:9172 blocked for more than 143 seconds. [ 473.823652][ T30] Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 473.834258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.843050][ T30] task:syz.1.681 state:D stack:25088 pid:9172 tgid:9172 ppid:8405 flags:0x00004006 [ 473.855262][ T30] Call Trace: [ 473.859062][ T30] [ 473.862028][ T30] __schedule+0x17e8/0x4a20 [ 473.866617][ T30] ? __pfx___schedule+0x10/0x10 [ 473.871851][ T30] ? __pfx_lock_release+0x10/0x10 [ 473.877660][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 473.883176][ T30] ? schedule+0x90/0x320 [ 473.887619][ T30] schedule+0x14b/0x320 [ 473.891819][ T30] schedule_preempt_disabled+0x13/0x30 [ 473.897363][ T30] __mutex_lock+0x6a4/0xd70 [ 473.901906][ T30] ? kobject_put+0x443/0x480 [ 473.906544][ T30] ? __mutex_lock+0x527/0xd70 [ 473.911396][ T30] ? rfkill_unregister+0xd0/0x230 [ 473.916472][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 473.921598][ T30] ? __pfx_device_del+0x10/0x10 [ 473.927817][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 473.933849][ T30] rfkill_unregister+0xd0/0x230 [ 473.951172][ T30] nfc_unregister_device+0x96/0x2a0 [ 473.956450][ T30] virtual_ncidev_close+0x59/0x90 [ 473.961719][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 473.973046][ T30] __fput+0x406/0x8b0 [ 473.977141][ T30] task_work_run+0x24f/0x310 [ 473.981782][ T30] ? __pfx_task_work_run+0x10/0x10 [ 473.992883][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 473.998715][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 474.004465][ T30] do_syscall_64+0x100/0x230 [ 474.010752][ T30] ? clear_bhb_loop+0x35/0x90 [ 474.015486][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.024220][ T30] RIP: 0033:0x7f8faa975ae9 [ 474.028751][ T30] RSP: 002b:00007f8faac2fb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 474.037229][ T30] RAX: 0000000000000000 RBX: 000000000004efb6 RCX: 00007f8faa975ae9 [ 474.045229][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 474.053281][ T30] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000001eaac2fe5f [ 474.061390][ T30] R10: 00007f8faa800000 R11: 0000000000000246 R12: 00007f8faab03fac [ 474.069434][ T30] R13: 0000000000000032 R14: 00007f8faab059a0 R15: 00007f8faab03fa0 [ 474.077500][ T30] [ 474.080550][ T30] INFO: task syz.3.683:9182 blocked for more than 143 seconds. [ 474.088167][ T30] Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 474.095824][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.105017][ T30] task:syz.3.683 state:D stack:25216 pid:9182 tgid:9178 ppid:8003 flags:0x00004006 [ 474.115380][ T30] Call Trace: [ 474.118791][ T30] [ 474.121775][ T30] __schedule+0x17e8/0x4a20 [ 474.126405][ T30] ? __pfx___schedule+0x10/0x10 [ 474.131630][ T30] ? __pfx_lock_release+0x10/0x10 [ 474.137015][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 474.142563][ T30] ? schedule+0x90/0x320 [ 474.147006][ T30] schedule+0x14b/0x320 [ 474.151188][ T30] schedule_preempt_disabled+0x13/0x30 [ 474.156649][ T30] __mutex_lock+0x6a4/0xd70 [ 474.161349][ T30] ? __mutex_lock+0x527/0xd70 [ 474.166055][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 474.171452][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 474.176517][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 474.181986][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 474.188096][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 474.194470][ T30] nfc_rfkill_set_block+0x50/0x310 [ 474.199648][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 474.205402][ T30] rfkill_set_block+0x1f1/0x440 [ 474.210341][ T30] rfkill_fop_write+0x5bb/0x790 [ 474.215245][ T30] ? common_file_perm+0x1a6/0x210 [ 474.220376][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 474.225776][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 474.231209][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 474.236081][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 474.243748][ T30] vfs_write+0x2a2/0xc90 [ 474.248084][ T30] ? __pfx_vfs_write+0x10/0x10 [ 474.252882][ T30] ? do_futex+0x392/0x560 [ 474.257368][ T30] ? __fget_files+0x29/0x470 [ 474.262007][ T30] ? __fget_files+0x3f6/0x470 [ 474.266786][ T30] ? __fget_files+0x29/0x470 [ 474.271432][ T30] ksys_write+0x1a0/0x2c0 [ 474.275972][ T30] ? __pfx_ksys_write+0x10/0x10 [ 474.280922][ T30] ? do_syscall_64+0x100/0x230 [ 474.285721][ T30] ? do_syscall_64+0xb6/0x230 [ 474.290468][ T30] do_syscall_64+0xf3/0x230 [ 474.295039][ T30] ? clear_bhb_loop+0x35/0x90 [ 474.299836][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.305787][ T30] RIP: 0033:0x7f1497b75ae9 [ 474.310345][ T30] RSP: 002b:00007f14988ed048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.318844][ T30] RAX: ffffffffffffffda RBX: 00007f1497d04070 RCX: 00007f1497b75ae9 [ 474.326934][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000005 [ 474.334935][ T30] RBP: 00007f1497bf6756 R08: 0000000000000000 R09: 0000000000000000 [ 474.343082][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.351344][ T30] R13: 000000000000006e R14: 00007f1497d04070 R15: 00007f1497e2fa68 [ 474.361409][ T30] [ 474.364467][ T30] [ 474.364467][ T30] Showing all locks held in the system: [ 474.372347][ T30] 1 lock held by khungtaskd/30: [ 474.377356][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 474.387449][ T30] 3 locks held by kworker/u8:7/1043: [ 474.392760][ T30] #0: ffff8880b943e798 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 474.402831][ T30] #1: ffff8880b9528948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 474.414358][ T30] #2: ffff8880b952a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 474.424303][ T30] 3 locks held by kworker/1:2/2930: [ 474.429589][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 474.440687][ T30] #1: ffffc90009abfd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 474.454267][ T30] #2: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 474.465819][ T30] 2 locks held by getty/4849: [ 474.472019][ T30] #0: ffff88802ab5f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.481898][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 474.492103][ T30] 2 locks held by syz.1.681/9172: [ 474.497345][ T30] #0: ffff888064caf100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 474.507309][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 474.517556][ T30] 2 locks held by syz.3.683/9182: [ 474.522616][ T30] #0: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 474.532830][ T30] #1: ffff888064caf100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 474.542677][ T30] 2 locks held by syz-executor/9457: [ 474.548068][ T30] #0: ffff888079c98118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 474.558187][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 474.568229][ T30] 2 locks held by syz-executor/9458: [ 474.573533][ T30] #0: ffff88807aed1918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6d0 [ 474.584207][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 474.594744][ T30] 2 locks held by syz.0.723/9485: [ 474.599896][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.608713][ T30] #1: ffffffff8f8bb9a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 474.619145][ T30] 1 lock held by syz.2.724/9487: [ 474.624192][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.632981][ T30] 1 lock held by syz.2.724/9489: [ 474.638478][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.647123][ T30] 1 lock held by syz.2.724/9490: [ 474.652087][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.660693][ T30] 1 lock held by syz.4.726/9494: [ 474.665675][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.674452][ T30] 1 lock held by syz.4.726/9495: [ 474.679480][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.688183][ T30] 1 lock held by syz-executor/9497: [ 474.693486][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.702050][ T30] 1 lock held by syz-executor/9498: [ 474.707369][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.715845][ T30] 1 lock held by syz-executor/9499: [ 474.721344][ T30] #0: ffffffff8eb2f808 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 474.729942][ T30] [ 474.732268][ T30] ============================================= [ 474.732268][ T30] [ 474.741297][ T30] NMI backtrace for cpu 0 [ 474.745666][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 474.755576][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 474.765668][ T30] Call Trace: [ 474.768954][ T30] [ 474.771884][ T30] dump_stack_lvl+0x241/0x360 [ 474.776607][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.781841][ T30] ? __pfx__printk+0x10/0x10 [ 474.786466][ T30] ? vprintk_emit+0x631/0x770 [ 474.791158][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 474.796196][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 474.801144][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.806605][ T30] ? _printk+0xd5/0x120 [ 474.810867][ T30] ? __pfx__printk+0x10/0x10 [ 474.815461][ T30] ? __wake_up_klogd+0xcc/0x110 [ 474.820316][ T30] ? __pfx__printk+0x10/0x10 [ 474.825369][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 474.830396][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 474.836382][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 474.843262][ T30] watchdog+0xfde/0x1020 [ 474.847506][ T30] ? watchdog+0x1ea/0x1020 [ 474.851925][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.856600][ T30] kthread+0x2f0/0x390 [ 474.860702][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.865375][ T30] ? __pfx_kthread+0x10/0x10 [ 474.869963][ T30] ret_from_fork+0x4b/0x80 [ 474.874394][ T30] ? __pfx_kthread+0x10/0x10 [ 474.878998][ T30] ret_from_fork_asm+0x1a/0x30 [ 474.883775][ T30] [ 474.887382][ T30] Sending NMI from CPU 0 to CPUs 1: [ 474.892632][ C1] NMI backtrace for cpu 1 [ 474.892644][ C1] CPU: 1 PID: 1043 Comm: kworker/u8:7 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 474.892663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 474.892674][ C1] Workqueue: events_unbound toggle_allocation_gate [ 474.892701][ C1] RIP: 0010:mark_lock+0x12c/0x350 [ 474.892725][ C1] Code: c7 c7 e0 b9 ca 8b 48 c7 c6 80 bc ca 8b e8 2c 7b e5 ff 90 0f 0b 90 90 90 31 db 48 83 c3 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 <74> 08 48 89 df e8 da f9 88 00 41 bc 01 00 00 00 44 85 33 74 16 44 [ 474.892740][ C1] RSP: 0018:ffffc9000449f638 EFLAGS: 00000046 [ 474.892754][ C1] RAX: 1ffffffff2592014 RBX: ffffffff92c900a0 RCX: ffffffff8172d9ea [ 474.892768][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fa7580 [ 474.892780][ C1] RBP: 0000000000000002 R08: ffffffff92fa7587 R09: 1ffffffff25f4eb0 [ 474.892792][ C1] R10: dffffc0000000000 R11: fffffbfff25f4eb1 R12: ffff888021f547f0 [ 474.892805][ C1] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff888021f547d0 [ 474.892818][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 474.892833][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.892845][ C1] CR2: 000055cf6057fc18 CR3: 000000000e132000 CR4: 00000000003506f0 [ 474.892860][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.892871][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.892882][ C1] Call Trace: [ 474.892890][ C1] [ 474.892909][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 474.892926][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 474.892963][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.892989][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 474.893009][ C1] ? nmi_handle+0x14f/0x5a0 [ 474.893035][ C1] ? nmi_handle+0x2a/0x5a0 [ 474.893061][ C1] ? mark_lock+0x12c/0x350 [ 474.893079][ C1] ? default_do_nmi+0x63/0x160 [ 474.893098][ C1] ? exc_nmi+0x123/0x1f0 [ 474.893115][ C1] ? end_repeat_nmi+0xf/0x53 [ 474.893144][ C1] ? mark_lock+0x9a/0x350 [ 474.893163][ C1] ? mark_lock+0x12c/0x350 [ 474.893183][ C1] ? mark_lock+0x12c/0x350 [ 474.893203][ C1] ? mark_lock+0x12c/0x350 [ 474.893223][ C1] [ 474.893228][ C1] [ 474.893236][ C1] lockdep_hardirqs_on_prepare+0x282/0x780 [ 474.893257][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.893283][ C1] ? text_poke_memcpy+0x25/0x30 [ 474.893301][ C1] ? kmalloc_node_track_caller_noprof+0xf3/0x440 [ 474.893349][ C1] ? rcu_is_watching+0x15/0xb0 [ 474.893370][ C1] ? kmalloc_node_track_caller_noprof+0xf3/0x440 [ 474.893398][ C1] trace_hardirqs_on+0x28/0x40 [ 474.893415][ C1] __text_poke+0x9bf/0xd30 [ 474.893435][ C1] ? kmalloc_node_track_caller_noprof+0xf3/0x440 [ 474.893464][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 474.893484][ C1] ? __pfx___text_poke+0x10/0x10 [ 474.893501][ C1] ? __kmalloc_noprof+0xef/0x400 [ 474.893528][ C1] ? perf_event_text_poke+0x258/0x330 [ 474.893553][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 474.893580][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 474.893604][ C1] ? __pfx___might_resched+0x10/0x10 [ 474.893633][ C1] text_poke_bp_batch+0x59c/0xb30 [ 474.893657][ C1] ? kmalloc_node_track_caller_noprof+0xf3/0x440 [ 474.893686][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 474.893709][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 474.893736][ C1] text_poke_finish+0x30/0x50 [ 474.893755][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 474.893777][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 474.893806][ C1] static_key_enable+0x1a/0x20 [ 474.893832][ C1] toggle_allocation_gate+0xb5/0x250 [ 474.893855][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 474.893879][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.893904][ C1] ? process_scheduled_works+0x945/0x1830 [ 474.893922][ C1] process_scheduled_works+0xa2c/0x1830 [ 474.893954][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.893976][ C1] ? assign_work+0x364/0x3d0 [ 474.893996][ C1] worker_thread+0x86d/0xd50 [ 474.894022][ C1] ? __kthread_parkme+0x169/0x1d0 [ 474.894043][ C1] ? __pfx_worker_thread+0x10/0x10 [ 474.894061][ C1] kthread+0x2f0/0x390 [ 474.894082][ C1] ? __pfx_worker_thread+0x10/0x10 [ 474.894101][ C1] ? __pfx_kthread+0x10/0x10 [ 474.894122][ C1] ret_from_fork+0x4b/0x80 [ 474.894145][ C1] ? __pfx_kthread+0x10/0x10 [ 474.894166][ C1] ret_from_fork_asm+0x1a/0x30 [ 474.894199][ C1] [ 474.894638][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 475.337325][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0 [ 475.347233][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 475.357294][ T30] Call Trace: [ 475.360577][ T30] [ 475.363512][ T30] dump_stack_lvl+0x241/0x360 [ 475.368643][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.373852][ T30] ? __pfx__printk+0x10/0x10 [ 475.378474][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 475.384570][ T30] ? vscnprintf+0x5d/0x90 [ 475.388918][ T30] panic+0x349/0x860 [ 475.392826][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 475.398988][ T30] ? __pfx_panic+0x10/0x10 [ 475.403413][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 475.408807][ T30] ? __irq_work_queue_local+0x137/0x410 [ 475.414362][ T30] ? irq_work_queue+0xca/0x150 [ 475.419164][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.425153][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.431140][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.437133][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 475.443311][ T30] watchdog+0x101d/0x1020 [ 475.447653][ T30] ? watchdog+0x1ea/0x1020 [ 475.452086][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.456868][ T30] kthread+0x2f0/0x390 [ 475.460951][ T30] ? __pfx_watchdog+0x10/0x10 [ 475.465656][ T30] ? __pfx_kthread+0x10/0x10 [ 475.470363][ T30] ret_from_fork+0x4b/0x80 [ 475.474890][ T30] ? __pfx_kthread+0x10/0x10 [ 475.479501][ T30] ret_from_fork_asm+0x1a/0x30 [ 475.484384][ T30] [ 475.487725][ T30] Kernel Offset: disabled [ 475.492060][ T30] Rebooting in 86400 seconds..