last executing test programs: 32.808345264s ago: executing program 4 (id=7947): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f0000010000)=[0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000008020007ae3a4af7879d57d20a6315aea895a1876ca51874f19cb4e73441f4b928d2cb65c3e9eba60f5ba101ab588fd0cc32d78f388552ee691178035275241a31e78ad6c4e634ca47b9a93138c8e6726cc6896c37c31670f6a83cf6bde2de414e963d3", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 31.929492593s ago: executing program 2 (id=7953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.531672843s ago: executing program 2 (id=7958): ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) socket(0x2b, 0x4, 0x81) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xfffffffc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}]}, &(0x7f0000000180)=0x10) socket(0x9, 0x803, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000007180), 0x3) syz_emit_vhci(&(0x7f0000003040)=ANY=[@ANYBLOB="040e0860badef6170000d0"], 0xb) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000010}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0x40043d14, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc601000020071570200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 31.493045861s ago: executing program 4 (id=7959): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x200000, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa614}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020}, 0x2020) r3 = semget(0x0, 0x0, 0x648) setresuid(0xee01, 0x0, 0x0) r4 = getegid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, r4, 0xee00, 0xee01, 0x80, 0x8}, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000540)=0x5) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {0x0}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}], 0x4}}], 0x1, 0x0, 0x0) 31.215723861s ago: executing program 2 (id=7960): socket$kcm(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r0 = socket$can_j1939(0x1d, 0x2, 0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bind$can_j1939(r0, &(0x7f0000001200), 0x19) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 30.581326559s ago: executing program 4 (id=7964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="effd000070000100000000000000000007000000", @ANYRES32, @ANYBLOB='\f'], 0x24}, 0x1, 0x5502000000000000}, 0x0) 30.412791426s ago: executing program 0 (id=7965): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) fcntl$setpipe(r0, 0x11, 0x0) 30.342483889s ago: executing program 4 (id=7966): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/76, &(0x7f0000000880)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) syz_usbip_server_init(0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e3dd5e0400204"], 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) connect$inet6(r5, &(0x7f0000002200)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x29}}], 0x1, 0x4000914) 30.267032953s ago: executing program 3 (id=7967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, 0x2, 0x6, 0x301, 0x9000000, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x84) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x297880e5d24e7381}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x9c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x40000, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYBLOB="0000f6ff0500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x40000008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0xa, 0x1e, {0x1e, 0x22, "87c57c612c746d6e9851c1bbf95597d8303820375ad095b8d7c76a64"}}, &(0x7f0000000100)={0x0, 0x3, 0x30, @string={0x30, 0x3, "edf0c3a194d971baa4f01ab4a580c4209a1c5fc7fc7255e2d46750d56fb1991442f18c7327dec2bb6625d1c27951"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x0, 0x10, 0xf8, "76dfdb61e92b7b86f82b9b604f60f84a490daadd14f101dab265f932a62b1d738cd0b6628d4b9aa85a18f75bec6c29aae9b64b28ca43953f3ccfd3639a05eb8aaf19dfd14aaf8bf3d8bbccc619e190a90206fefee35982df68f477423cdb5132c57eeb585ad3a7ef8f786f9cb0aa85af3b5818a83d9bd7e1a23276a80d9fe03f6b5eb7118fed3c11250dd8b0987ec45c3c1311c36be76f9805e9741e646d47f3cce7cc52b87cb74330101d2774e247cb7029d466bbc0b6de9170c8e361c36c17e8a70926555d0cf25831c85c0b94fe048b62970a194c790741283a8fd78042b9139ec9bb0d2a033d3ab7b84418adbf1b655c28007f308d81"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0x25, {0x23, "47609865fdd8d5689490cbdd760d3506aec346de50587b49af78e7247e192be5ddfcb5"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000080342400028008000440000000140800054000000002080003400000000008000240000000001c0001800a00010071756575650000006137028006000140000000000900010073797a30000000000900020073797a3200000000140000001100"/143], 0xa8}}, 0x0) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x6, 0xe9, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x1, 0x1, 0x2c, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x8, 0x24, 0x6, 0x0, 0x0, "468d3e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x9, 0xc, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0x6, 0x100}, @dmm={0x7, 0x24, 0x14, 0xd, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf4}, @mdlm_detail={0x75, 0x24, 0x13, 0x1, "0d5809e778b9b58231bee71bddec0022afd7f6ce6bef5bd980c5e88c15970743dcee6afd1b50894706e9cc285f0a1708e1e6255c828c2f7355c6ae07a83c80e9ef4682bde55f38328d43f7bdba9dfb7a89a495b2545f0ee92fe3d28373987e63021efe815133b15a288de1c5c56cef72b3"}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x8, 0xc0, 0x3a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x90, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000900)={0xa, 0x6, 0xde13dd688fc3a746, 0x3, 0x6, 0x0, 0xff, 0xf}, 0x94, &(0x7f0000000f40)={0x5, 0xf, 0x94, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x41, 0xfb, 0x1}, @generic={0x78, 0x10, 0x4, "5e6a33eb323ac312ef2be35c264ebb5e760407c294b2d2d8022ff271e861d931f95c04442a6a018efb9674068670a7102896201eecc66262436408565e2e94d59da7ed884736e7ead0d828fdfe1dc7b2508c0a2706b0a1ce378abb41bf54d4060e76461a204aaef7ef8a05e0b5980179e494131fe5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0xff, 0x5}]}, 0x9, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x437}}, {0xd1, &(0x7f0000001640)=@string={0xd1, 0x3, "510bd6c0f5062a9d169af0f42d46d1c4467e9a051a8234c6384083e319c592e8d31a4f1e2782a1d95dc7278f18a4bdfb0d333dde47eea73f3b171ff0bdc73eed1bd2f2b1f64e520a8b602ae943d0124c5383eef6ebd2f89bbc0578debf0c2b3937dc97067d7b8fe528d0314e15acf0cf03c44a97589a11f6fcb72f85b707ff77dc33b298e0674a5363908c93ecf669eb725d49a23fb9a7214908f33da927ec01feca46b1e8e21624655e1ed80a6a41b27b276b65642676fda01b7a359b14cfb54e9c2de4b3f5f49bcd8f55bc1578fd"}}, {0x43, &(0x7f0000001180)=@string={0x43, 0x3, "edb5a735a6b0d8312fa25d1a18623808065febb019f3055cdab1273e359e81a5dae692d29bec8a1fefc7ce1232415336899e4b022f93cd69b58d8e36fa99c963e6"}}, {0x20, &(0x7f00000015c0)=@string={0x20, 0x3, "cf638a8eab2ebd04e38f3c8d2cd6dea66f3a27e594c1843d611ba57e89f7"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42a}}, {0x56, &(0x7f0000001280)=@string={0x56, 0x3, "6429d9eeac1b00cb0a16efd272d7493d322538c37fd49c153524bec03a48402fcf2f6b41d350103fa984eca6e35accdd1651e1d5b417ca5b30818444154386285329364475862d4403c5fa5e6018728552ae2469"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x5, 0x18, {0x18, 0x21, "c8c983f7c7ac4951bc490a4ed51a7a6650d1699a39eb"}}, &(0x7f0000001400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f0000001840)={0x20, 0x31, 0x100, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xfe}}) io_setup(0x8, &(0x7f0000004200)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_cancel(r8, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0x4, r4, &(0x7f0000000d40)="df62ed7a8f5345463e251ff9bd3db09b6b61c891d768f3cb50dc03079ecadf32b84660be321e028f1b3a47a1a7c6d0d6204ed8261cd630341e88d2991e15688ef5e213e4cf8a3d5d424852cd28595eabc7342fdd4d8ce3c17d4dd6d61d0b380ff79c03dd8599b4227f50d81044e2b537", 0x70, 0x100000001, 0x0, 0x1, r3}, &(0x7f0000000dc0)) socket$tipc(0x1e, 0x5, 0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 30.199681845s ago: executing program 1 (id=7968): openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES16=r7, @ANYBLOB="02002bbd7000fcdbdf251d00000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r11, @ANYBLOB="0c009900080000005c0000000c009900ff0000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="0c0099001d850000440000000c009900000000001c00000008000300", @ANYRES32=r12, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000002340)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={0x0, 0x54}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="091012fe820a8a22621600000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) r15 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r15, 0xc0285700, &(0x7f0000000080)={0x0, "0600000000000000c6bebec772020acd2c00"}) 30.19829375s ago: executing program 2 (id=7969): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x4}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xfffffffb, 0x2, 0x10000, 0xf6}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x1, 0x0, 0xd4a4}) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private1}, 0x1c) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x80111500, &(0x7f0000000000)={'virt_wifi0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x44, 0x0, 0x0, 0xffffffff}, {0xc}, {}, {0x6}]}) 30.074268139s ago: executing program 1 (id=7970): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x175) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42881, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r10, 0x4030ae7b, &(0x7f0000000000)={0x0, 0xe, 0x0, 0xfffffffffffffd2c}) openat(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x408000, 0x160) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}}, 0x0) 28.556393493s ago: executing program 0 (id=7971): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x3, 0x400) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x2, 0x200, 0x9, 0x4, 0x200, 0xa}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220500000083"], 0x0}, 0x0) 27.625274383s ago: executing program 4 (id=7972): socket$kcm(0x21, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x58, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000180)={{@my=0x1}}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000180)={0xc8, 0xe41}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r5, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="89", 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r7], 0x40}}, 0x0) 25.347143568s ago: executing program 2 (id=7973): socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x1600) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001b9000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x10000000003) r0 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000400000000000000070000000000000000da"], 0x18}}, 0x0) vmsplice(r1, &(0x7f0000000700)=[{&(0x7f0000000300)="cd90837640e21d993a20cb163ed4f29b9bcd28747c30ad06d0ae4e1d4638a532d9fb80d4caeb507abb4cbe015ef8f9ff706591ae1b969cc50915f2efa7d337c8be35394e7ebc3fc55b152dbd1bad6a5c", 0x50}, {&(0x7f0000000480)="8cb73db36f9d4308433e7ae9d2b8511f4a84d248892d084769b21819af949addbfcf6d081fa69f312b479ae246c986f89f0eff322616f6ef8226d15f55a9388d3969cb5b9b88", 0x46}, {&(0x7f0000000500)="84674c3ba224e3b3e84ffb98bf4ab7439fe55f9db0015cbd647973374d748a507c08edf7518a624797c4ae9cd816e537a09c0cd0af424e9b296cf2cfacdca67b6e87fdc36e0015830d5e99a3295891d0f48cc7536bb64560dae814ad33e85cad586aecb3aa13ac84f84641d19e3da113a8cf97b0240697fd52bed9142a2949e31a5787da2932423d0ffb3ca5640e3ca42de56162d11312ab6eeb2fd342cfa4f1da03f2ed77f60358e83c33f9be2210a1c558f41c04556698d6183da8b763f921d9cb1ffefa029c5d3e922231d9417110", 0xd0}, {&(0x7f0000000180)}, {&(0x7f0000000900)="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", 0x1000}, {0x0}, {&(0x7f0000000380)="4f972a8d80c6fef8eea7efab871d4b61108b8261413b8a783c449e15e6b35c7165c0801f4870d8cf", 0x28}], 0x7, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40048b0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r5, 0x0, 0x6a) splice(r2, 0x0, r5, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r5, 0x407, 0x0) readv(r4, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x800, 0x0) write$binfmt_elf64(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f000068b000/0x2000)=nil, 0x2000, 0x8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="9b43a409aa810180c200000007e24500001c000000000001907800000000fffffdff11009078ade30000"], 0x0) 25.275467031s ago: executing program 0 (id=7974): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x200000, 0x0, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x12, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa614}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000fc0)={0x2020}, 0x2020) setresuid(0xee01, 0x0, 0x0) r3 = getegid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, r3, 0xee00, 0xee01, 0x80, 0x8}, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000540)=0x5) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {0x0}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}], 0x4}}], 0x1, 0x0, 0x0) 25.274464245s ago: executing program 1 (id=7975): r0 = socket$kcm(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = socket$can_j1939(0x1d, 0x2, 0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bind$can_j1939(r1, &(0x7f0000001200), 0x19) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x88}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 25.153701625s ago: executing program 4 (id=7976): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000ce"]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x5cdc79a83befa643) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0', [{0x20, '\t\v\xaf\xe2\x8cd0\x99\xa1U\xcc\x9c\xce\x04&\xf2\b\xe9\x0fw\x98\xa7\xac\xccL\x85\xbf\x11\xb8\xe0 M\xb1:\\TD\x89\x91N\xa6h\xd8\xb1>\xa3`\x99\xc9\xbe\xb9+\xf3`\xdb\x96\x1c\tA\x1bff\xdaD\xe9_\x1b_\xdcO\xe0/\xd6\x93H\x01L-i\xc0\xd6\xec\xeb\xa1Wm\x1e\xcc\xc0\x94\b\x00\x00\x00\x00\x00\x00\x00\x00'}], 0xa, "749d0200000000000000737df505daafea25bf1fdf05ec74e0ea095f7201d58bc6dad267f429fe6db5077d01fdd0422e7088362f48334cdc051443512e6e621bad217ef9d4323be80f2ab07dd96ed753a3956629fabee96f62900969c1a0b7c69b62a8a1760e9a661fb2fdbde8cc448f33294f2dfaf4a74b"}, 0xe7) close(r6) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000000)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x8) socket$xdp(0x2c, 0x3, 0x0) 20.970587125s ago: executing program 0 (id=7977): socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000600)=""/102400, 0x18ff2}], 0x14, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x50) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000040), 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000001080), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x2) r6 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffff, 0x0) pread64(r6, &(0x7f0000000040)=""/238, 0xee, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0xba, 0x4) recvmmsg(r2, 0x0, 0x0, 0x40000060, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb2, 0x8100000}, 0x8805) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000040)={0x0}) 20.909733661s ago: executing program 2 (id=7978): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221a000000069dfe0b91d71d5e0649d1ef3832eb50af2595f17e3a386c0bb4"], 0x0}, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6941c43b78eeda4918160798ef967cb9254c327158c51dc69eeda809ba0f2b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1407, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x64, 'wg0\x00'}}]}, 0x38}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x800) 20.908872784s ago: executing program 3 (id=7979): socket$kcm(0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r0 = socket$can_j1939(0x1d, 0x2, 0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bind$can_j1939(r0, &(0x7f0000001200), 0x19) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 19.670297307s ago: executing program 1 (id=7980): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="d711eccf", 0x4}], 0x1, 0x0, 0xf0}}], 0x1, 0x0) 18.300692103s ago: executing program 1 (id=7981): io_uring_setup(0x18cc, &(0x7f0000000200)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x7d, &(0x7f0000000280)={r4}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) socket$inet(0x2, 0x5, 0x84) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000280)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f00000003c0)=0xfffffffffffffffa, 0x12) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_udplite(0x2, 0x2, 0x88) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x2710, 0x0, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 15.54035591s ago: executing program 1 (id=7982): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000100", 0x41d) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRES16], 0x38}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r9, 0x4008ae93, &(0x7f0000000640)=0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0}, @flat, @flat=@weak_handle}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x54, 0x0, &(0x7f00000006c0)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 14.183625039s ago: executing program 0 (id=7984): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000440)) fanotify_init(0x200, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001000)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x240, 0x6, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0x140, 0x1a0, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg0\x00', {}, 'ipvlan1\x00', {}, 0x0, 0x3}}, @common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'pimreg1\x00', {}, 0x0, 0x1}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x1, 0x401, 0x0, 0x0, 0x0, 0x59}) ioctl$SG_SET_COMMAND_Q(r3, 0x2276, 0xfffffffffffffffe) r5 = openat$sequencer(0xffffff9c, &(0x7f0000000200), 0x440, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r5, 0x5404) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02000012000e00050014030a"], 0x17) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0xea60}, {0x77359400}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14.182649141s ago: executing program 3 (id=7985): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x7d, &(0x7f0000000300)={@link_local, @dev, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x6}}, {@mpls_mc={0x8848, {[{0x7, 0x0, 0x1}], @ipv4=@generic={{0x8, 0x4, 0x1, 0x1f, 0x63, 0x65, 0x0, 0x24, 0xf0, 0x0, @remote, @multicast1, {[@rr={0x7, 0xb, 0x8d, [@multicast1, @remote]}]}}, "035cf8a60ca1a79bbb99881513ffe26ba70055f859c9b69e3cbd537bdf72579a252d05e4593e911477937c54ce2c98c783547a766c02879c51f166d71a74e08bcd17c3"}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@get={0x120, 0x13, 0x2, 0x70bd26, 0x25dfdbfd, {{'ccm(cipher_null)\x00'}, '\x00', '\x00', 0x2000}, [{0x8, 0x1, 0x9}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0xf2}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xffff8921}, {0x8, 0x1, 0xe}]}, 0x120}}, 0x20000000) 10.103516568s ago: executing program 3 (id=7987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, 0x2, 0x6, 0x301, 0x9000000, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x84) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x297880e5d24e7381}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x9c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x40000, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYBLOB="0000f6ff0500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x40000008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0xa, 0x1e, {0x1e, 0x22, "87c57c612c746d6e9851c1bbf95597d8303820375ad095b8d7c76a64"}}, &(0x7f0000000100)={0x0, 0x3, 0x30, @string={0x30, 0x3, "edf0c3a194d971baa4f01ab4a580c4209a1c5fc7fc7255e2d46750d56fb1991442f18c7327dec2bb6625d1c27951"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x0, 0x10, 0xf8, "76dfdb61e92b7b86f82b9b604f60f84a490daadd14f101dab265f932a62b1d738cd0b6628d4b9aa85a18f75bec6c29aae9b64b28ca43953f3ccfd3639a05eb8aaf19dfd14aaf8bf3d8bbccc619e190a90206fefee35982df68f477423cdb5132c57eeb585ad3a7ef8f786f9cb0aa85af3b5818a83d9bd7e1a23276a80d9fe03f6b5eb7118fed3c11250dd8b0987ec45c3c1311c36be76f9805e9741e646d47f3cce7cc52b87cb74330101d2774e247cb7029d466bbc0b6de9170c8e361c36c17e8a70926555d0cf25831c85c0b94fe048b62970a194c790741283a8fd78042b9139ec9bb0d2a033d3ab7b84418adbf1b655c28007f308d81"}, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0x25, {0x23, "47609865fdd8d5689490cbdd760d3506aec346de50587b49af78e7247e192be5ddfcb5"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000080342400028008000440000000140800054000000002080003400000000008000240000000001c0001800a00010071756575650000006137028006000140000000000900010073797a30000000000900020073797a3200000000140000001100"/143], 0xa8}}, 0x0) r6 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\x9f\x19/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbem\xa3!)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x6, 0xe9, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x1, 0x1, 0x2c, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x8, 0x24, 0x6, 0x0, 0x0, "468d3e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x9, 0xc, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0x6, 0x100}, @dmm={0x7, 0x24, 0x14, 0xd, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf4}, @mdlm_detail={0x75, 0x24, 0x13, 0x1, "0d5809e778b9b58231bee71bddec0022afd7f6ce6bef5bd980c5e88c15970743dcee6afd1b50894706e9cc285f0a1708e1e6255c828c2f7355c6ae07a83c80e9ef4682bde55f38328d43f7bdba9dfb7a89a495b2545f0ee92fe3d28373987e63021efe815133b15a288de1c5c56cef72b3"}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x8, 0xc0, 0x3a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x90, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000900)={0xa, 0x6, 0xde13dd688fc3a746, 0x3, 0x6, 0x0, 0xff, 0xf}, 0x94, &(0x7f0000000f40)={0x5, 0xf, 0x94, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x41, 0xfb, 0x1}, @generic={0x78, 0x10, 0x4, "5e6a33eb323ac312ef2be35c264ebb5e760407c294b2d2d8022ff271e861d931f95c04442a6a018efb9674068670a7102896201eecc66262436408565e2e94d59da7ed884736e7ead0d828fdfe1dc7b2508c0a2706b0a1ce378abb41bf54d4060e76461a204aaef7ef8a05e0b5980179e494131fe5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0xff, 0x5}]}, 0x9, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x437}}, {0xd1, &(0x7f0000001640)=@string={0xd1, 0x3, "510bd6c0f5062a9d169af0f42d46d1c4467e9a051a8234c6384083e319c592e8d31a4f1e2782a1d95dc7278f18a4bdfb0d333dde47eea73f3b171ff0bdc73eed1bd2f2b1f64e520a8b602ae943d0124c5383eef6ebd2f89bbc0578debf0c2b3937dc97067d7b8fe528d0314e15acf0cf03c44a97589a11f6fcb72f85b707ff77dc33b298e0674a5363908c93ecf669eb725d49a23fb9a7214908f33da927ec01feca46b1e8e21624655e1ed80a6a41b27b276b65642676fda01b7a359b14cfb54e9c2de4b3f5f49bcd8f55bc1578fd"}}, {0x43, &(0x7f0000001180)=@string={0x43, 0x3, "edb5a735a6b0d8312fa25d1a18623808065febb019f3055cdab1273e359e81a5dae692d29bec8a1fefc7ce1232415336899e4b022f93cd69b58d8e36fa99c963e6"}}, {0x20, &(0x7f00000015c0)=@string={0x20, 0x3, "cf638a8eab2ebd04e38f3c8d2cd6dea66f3a27e594c1843d611ba57e89f7"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42a}}, {0x56, &(0x7f0000001280)=@string={0x56, 0x3, "6429d9eeac1b00cb0a16efd272d7493d322538c37fd49c153524bec03a48402fcf2f6b41d350103fa984eca6e35accdd1651e1d5b417ca5b30818444154386285329364475862d4403c5fa5e6018728552ae2469"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x5, 0x18, {0x18, 0x21, "c8c983f7c7ac4951bc490a4ed51a7a6650d1699a39eb"}}, &(0x7f0000001400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f0000001840)={0x20, 0x31, 0x100, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xfe}}) io_setup(0x8, &(0x7f0000004200)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_cancel(r8, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0x4, r4, &(0x7f0000000d40)="df62ed7a8f5345463e251ff9bd3db09b6b61c891d768f3cb50dc03079ecadf32b84660be321e028f1b3a47a1a7c6d0d6204ed8261cd630341e88d2991e15688ef5e213e4cf8a3d5d424852cd28595eabc7342fdd4d8ce3c17d4dd6d61d0b380ff79c03dd8599b4227f50d81044e2b537", 0x70, 0x100000001, 0x0, 0x1, r3}, &(0x7f0000000dc0)) socket$tipc(0x1e, 0x5, 0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 8.274188625s ago: executing program 0 (id=7988): syz_open_dev$vbi(0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgsnd(0x0, 0x0, 0x11, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa02000000fc0100000000000000000100000000ffffffffffffffff0000000000000000aa87000000000000003b02010000000000fc0000000000000000000000000000000000001090780200"/100], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x3, 0x0, {0x9, @vbi={0x7, 0x1f, 0xd11, 0x0, [0xb7f9, 0xa56]}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002000010300000000000000000200000000000000000000000800060000000000"], 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0xe102}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000bc0)={0x8, [[0x1ff, 0x1, 0x4000002, 0x7, 0x3f, 0x2, 0x2, 0xdd8c], [0x4, 0xc6a, 0x1000000, 0x9, 0x3, 0x101, 0x8, 0xbb8e], [0x200007, 0x3f, 0x6, 0x0, 0x10001, 0x400, 0x80000000, 0xffffff81]], '\x00', [{0x5, 0x7fff, 0x1, 0x0, 0x0, 0x1}, {0x37, 0xff, 0x1, 0x0, 0x1}, {0x800, 0x2}, {0x2, 0x25f, 0x1}, {0x4, 0x40, 0x0, 0x0, 0x1, 0x1}, {0xac97, 0x3, 0x0, 0x1}, {0x3, 0xe558, 0x0, 0x0, 0x1}, {0x400, 0x3, 0x0, 0x0, 0x0, 0x1}, {0xfff, 0x28e, 0x1, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x7f, 0xffffe962}, {0x9, 0xfffffff7, 0x1}], '\x00', 0x87}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="0000f1fc04000000aa00bb3f471e0fd75578f7537fd494fe9f029a6bb8d8f8978632255fa31da04d3cf96073094d53d6d140d7869a7dd799e254b5478e9e5df2fcfd440f546d19c2633cbdf57bb578daa03a28f3a22654d3e106a32965f16b8dcc69b6b6b4c295822b3a05030000001d17bff0d4aa7acfae1036835031190534cb30e54673a5771fd71afabb6e8ad6bfee3f95004c0ee3105b11c0d10d1dc246b36c838bfd4f471ee46a803e3a0d3c426088cfc9fc841a1dc5efda4eee6eaf47281fb680ea9c"]) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) 6.022432495s ago: executing program 3 (id=7989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001600)={0x14, 0x2, 0x6, 0x301, 0x9000000, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x84) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x297880e5d24e7381}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000340)=0x9c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x40000, 0x12) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESDEC=r0, @ANYRES64, @ANYBLOB="0000f6ff0500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x40000008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x90) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)={0x20, 0xa, 0x1e, {0x1e, 0x22, "87c57c612c746d6e9851c1bbf95597d8303820375ad095b8d7c76a64"}}, &(0x7f0000000100)={0x0, 0x3, 0x30, @string={0x30, 0x3, "edf0c3a194d971baa4f01ab4a580c4209a1c5fc7fc7255e2d46750d56fb1991442f18c7327dec2bb6625d1c27951"}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000180)={0x0, 0x10, 0xf8, "76dfdb61e92b7b86f82b9b604f60f84a490daadd14f101dab265f932a62b1d738cd0b6628d4b9aa85a18f75bec6c29aae9b64b28ca43953f3ccfd3639a05eb8aaf19dfd14aaf8bf3d8bbccc619e190a90206fefee35982df68f477423cdb5132c57eeb585ad3a7ef8f786f9cb0aa85af3b5818a83d9bd7e1a23276a80d9fe03f6b5eb7118fed3c11250dd8b0987ec45c3c1311c36be76f9805e9741e646d47f3cce7cc52b87cb74330101d2774e247cb7029d466bbc0b6de9170c8e361c36c17e8a70926555d0cf25831c85c0b94fe048b62970a194c790741283a8fd78042b9139ec9bb0d2a033d3ab7b84418adbf1b655c28007f308d81"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000300)={0x20, 0x0, 0x25, {0x23, "47609865fdd8d5689490cbdd760d3506aec346de50587b49af78e7247e192be5ddfcb5"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a010400000000000080342400028008000440000000140800054000000002080003400000000008000240000000001c0001800a00010071756575650000006137028006000140000000000900010073797a30000000000900020073797a3200000000140000001100"/143], 0xa8}}, 0x0) r6 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) r7 = syz_usb_connect$cdc_ecm(0x6, 0xe9, &(0x7f0000001740)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x1, 0x1, 0x2c, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0x80, {{0x8, 0x24, 0x6, 0x0, 0x0, "468d3e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x9, 0xc, 0x5}, [@mbim_extended={0x8, 0x24, 0x1c, 0xfffa, 0x6, 0x100}, @dmm={0x7, 0x24, 0x14, 0xd, 0x81}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf4}, @mdlm_detail={0x75, 0x24, 0x13, 0x1, "0d5809e778b9b58231bee71bddec0022afd7f6ce6bef5bd980c5e88c15970743dcee6afd1b50894706e9cc285f0a1708e1e6255c828c2f7355c6ae07a83c80e9ef4682bde55f38328d43f7bdba9dfb7a89a495b2545f0ee92fe3d28373987e63021efe815133b15a288de1c5c56cef72b3"}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0x8, 0xc0, 0x3a}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x90, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000900)={0xa, 0x6, 0xde13dd688fc3a746, 0x3, 0x6, 0x0, 0xff, 0xf}, 0x94, &(0x7f0000000f40)={0x5, 0xf, 0x94, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x41, 0xfb, 0x1}, @generic={0x78, 0x10, 0x4, "5e6a33eb323ac312ef2be35c264ebb5e760407c294b2d2d8022ff271e861d931f95c04442a6a018efb9674068670a7102896201eecc66262436408565e2e94d59da7ed884736e7ead0d828fdfe1dc7b2508c0a2706b0a1ce378abb41bf54d4060e76461a204aaef7ef8a05e0b5980179e494131fe5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x9, 0xff, 0x5}]}, 0x9, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x441}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x437}}, {0xd1, &(0x7f0000001640)=@string={0xd1, 0x3, "510bd6c0f5062a9d169af0f42d46d1c4467e9a051a8234c6384083e319c592e8d31a4f1e2782a1d95dc7278f18a4bdfb0d333dde47eea73f3b171ff0bdc73eed1bd2f2b1f64e520a8b602ae943d0124c5383eef6ebd2f89bbc0578debf0c2b3937dc97067d7b8fe528d0314e15acf0cf03c44a97589a11f6fcb72f85b707ff77dc33b298e0674a5363908c93ecf669eb725d49a23fb9a7214908f33da927ec01feca46b1e8e21624655e1ed80a6a41b27b276b65642676fda01b7a359b14cfb54e9c2de4b3f5f49bcd8f55bc1578fd"}}, {0x43, &(0x7f0000001180)=@string={0x43, 0x3, "edb5a735a6b0d8312fa25d1a18623808065febb019f3055cdab1273e359e81a5dae692d29bec8a1fefc7ce1232415336899e4b022f93cd69b58d8e36fa99c963e6"}}, {0x20, &(0x7f00000015c0)=@string={0x20, 0x3, "cf638a8eab2ebd04e38f3c8d2cd6dea66f3a27e594c1843d611ba57e89f7"}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x42a}}, {0x56, &(0x7f0000001280)=@string={0x56, 0x3, "6429d9eeac1b00cb0a16efd272d7493d322538c37fd49c153524bec03a48402fcf2f6b41d350103fa984eca6e35accdd1651e1d5b417ca5b30818444154386285329364475862d4403c5fa5e6018728552ae2469"}}]}) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000001440)={0x14, &(0x7f00000013c0)={0x40, 0x5, 0x18, {0x18, 0x21, "c8c983f7c7ac4951bc490a4ed51a7a6650d1699a39eb"}}, &(0x7f0000001400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001580)={0x1c, &(0x7f0000001840)={0x20, 0x31, 0x100, "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"}, &(0x7f0000001500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0xfe}}) io_setup(0x8, &(0x7f0000004200)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_cancel(r8, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x4, 0x4, r4, &(0x7f0000000d40)="df62ed7a8f5345463e251ff9bd3db09b6b61c891d768f3cb50dc03079ecadf32b84660be321e028f1b3a47a1a7c6d0d6204ed8261cd630341e88d2991e15688ef5e213e4cf8a3d5d424852cd28595eabc7342fdd4d8ce3c17d4dd6d61d0b380ff79c03dd8599b4227f50d81044e2b537", 0x70, 0x100000001, 0x0, 0x1, r3}, &(0x7f0000000dc0)) socket$tipc(0x1e, 0x5, 0x0) io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) mq_timedreceive(r6, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 0s ago: executing program 3 (id=7991): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000500)={0x1, 0x0, &(0x7f0000010000)=[0x0]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000008020007ae3a4af7879d57d20a6315aea895a1876ca51874f19cb4e73441f4b928d2cb65c3e9eba60f5ba101ab588fd0cc32d78f388552ee691178035275241a31e78ad6c4e634ca47b9a93138c8e6726cc6896c37c31670f6a83cf6bde2de414e963d3", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) kernel console output (not intermixed with test programs): T45] usb 4-1: can't read configurations, error -61 [ 2168.541409][T13596] FAULT_INJECTION: forcing a failure. [ 2168.541409][T13596] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.554042][T13596] CPU: 1 PID: 13596 Comm: syz.0.7701 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2168.564271][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2168.574329][T13596] Call Trace: [ 2168.577595][T13596] [ 2168.580517][T13596] dump_stack_lvl+0x241/0x360 [ 2168.585204][T13596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2168.590394][T13596] ? __pfx__printk+0x10/0x10 [ 2168.594973][T13596] ? nf_ct_pernet+0x45/0x270 [ 2168.599547][T13596] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2168.605511][T13596] ? __pfx_lock_release+0x10/0x10 [ 2168.610522][T13596] should_fail_ex+0x3b0/0x4e0 [ 2168.615207][T13596] ? __nf_conntrack_alloc+0x8f/0x380 [ 2168.620505][T13596] should_failslab+0x9/0x20 [ 2168.625005][T13596] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 2168.630377][T13596] __nf_conntrack_alloc+0x8f/0x380 [ 2168.635491][T13596] init_conntrack+0x3c3/0x1310 [ 2168.640255][T13596] ? __pfx_init_conntrack+0x10/0x10 [ 2168.645447][T13596] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 2168.651414][T13596] ? __local_bh_enable_ip+0x168/0x200 [ 2168.656782][T13596] nf_conntrack_in+0xd59/0x1880 [ 2168.661640][T13596] ? __pfx_nf_conntrack_in+0x10/0x10 [ 2168.666938][T13596] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 2168.672384][T13596] nf_hook_slow+0xc3/0x220 [ 2168.676797][T13596] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2168.681982][T13596] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2168.687167][T13596] NF_HOOK+0x29e/0x450 [ 2168.691222][T13596] ? skb_orphan+0x4b/0xd0 [ 2168.695543][T13596] ? NF_HOOK+0x9a/0x450 [ 2168.699686][T13596] ? __pfx_NF_HOOK+0x10/0x10 [ 2168.704265][T13596] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 2168.709454][T13596] ? __pfx_ipv6_rcv+0x10/0x10 [ 2168.714125][T13596] __netif_receive_skb+0x1ea/0x650 [ 2168.719233][T13596] ? __pfx_lock_acquire+0x10/0x10 [ 2168.724248][T13596] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 2168.730487][T13596] ? __pfx___netif_receive_skb+0x10/0x10 [ 2168.736113][T13596] ? __kasan_slab_alloc+0x66/0x80 [ 2168.741128][T13596] ? read_tsc+0x9/0x20 [ 2168.745188][T13596] ? timekeeping_get_ns+0x2c0/0x420 [ 2168.750389][T13596] ? netif_receive_skb+0x131/0x890 [ 2168.755495][T13596] ? netif_receive_skb+0x131/0x890 [ 2168.760601][T13596] netif_receive_skb+0x1e8/0x890 [ 2168.765534][T13596] ? tun_rx_batched+0x160/0x8f0 [ 2168.770377][T13596] ? __pfx_netif_receive_skb+0x10/0x10 [ 2168.775842][T13596] ? tun_rx_batched+0x160/0x8f0 [ 2168.780682][T13596] tun_rx_batched+0x1b7/0x8f0 [ 2168.785351][T13596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2168.791668][T13596] ? __pfx_lock_acquire+0x10/0x10 [ 2168.796679][T13596] ? __pfx_tun_rx_batched+0x10/0x10 [ 2168.801881][T13596] tun_get_user+0x2f35/0x4560 [ 2168.806554][T13596] ? tun_get_user+0x2a2f/0x4560 [ 2168.811407][T13596] ? __pfx_tun_get_user+0x10/0x10 [ 2168.816428][T13596] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2168.821881][T13596] ? tun_get+0x1e/0x2f0 [ 2168.826039][T13596] ? tun_get+0x1e/0x2f0 [ 2168.830187][T13596] ? tun_get+0x27d/0x2f0 [ 2168.834421][T13596] tun_chr_write_iter+0x113/0x1f0 [ 2168.839441][T13596] vfs_write+0xa72/0xc90 [ 2168.843697][T13596] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 2168.849249][T13596] ? __pfx_vfs_write+0x10/0x10 [ 2168.854018][T13596] ksys_write+0x1a0/0x2c0 [ 2168.858368][T13596] ? __pfx_ksys_write+0x10/0x10 [ 2168.863222][T13596] ? do_syscall_64+0x100/0x230 [ 2168.867987][T13596] ? do_syscall_64+0xb6/0x230 [ 2168.872662][T13596] do_syscall_64+0xf3/0x230 [ 2168.877162][T13596] ? clear_bhb_loop+0x35/0x90 [ 2168.881836][T13596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2168.887731][T13596] RIP: 0033:0x7fdc9b37475f [ 2168.892140][T13596] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 2168.911741][T13596] RSP: 002b:00007fdc9c088010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2168.920149][T13596] RAX: ffffffffffffffda RBX: 00007fdc9b503f60 RCX: 00007fdc9b37475f [ 2168.928112][T13596] RDX: 0000000000000066 RSI: 0000000020000000 RDI: 00000000000000c8 [ 2168.936071][T13596] RBP: 00007fdc9c0880a0 R08: 0000000000000000 R09: 0000000000000000 [ 2168.944033][T13596] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 2168.951991][T13596] R13: 000000000000000b R14: 00007fdc9b503f60 R15: 00007fdc9b62fa68 [ 2168.959964][T13596] [ 2169.074582][ T45] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2169.107977][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 2169.117158][ T45] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2169.142993][ T45] usb 4-1: can't read configurations, error -61 [ 2169.162017][ T45] usb usb4-port1: unable to enumerate USB device [ 2169.224204][T13612] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2169.230759][T13612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2169.260347][T13612] vhci_hcd vhci_hcd.0: Device attached [ 2169.295536][T13618] fuse: Invalid user_id [ 2169.313700][ T5143] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2169.453736][ T5140] vhci_hcd: vhci_device speed not set [ 2169.489783][T13628] fuse: Unknown parameter 'fd0x0000000000000005' [ 2169.505995][ T5143] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2169.528922][ T5140] usb 9-1: new full-speed USB device number 24 using vhci_hcd [ 2169.536821][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.551646][ T5143] usb 2-1: config 0 descriptor?? [ 2169.575684][ T5143] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2169.841742][ T5143] gspca_spca508: reg_read err -32 [ 2169.858505][ T5143] gspca_spca508: reg_read err -32 [ 2169.932884][T13614] vhci_hcd: connection reset by peer [ 2169.955327][ T2931] vhci_hcd: stop threads [ 2169.980578][ T2931] vhci_hcd: release socket [ 2170.001694][ T2931] vhci_hcd: disconnect device [ 2170.290293][T13600] netlink: 'syz.1.7702': attribute type 3 has an invalid length. [ 2170.367657][ T5143] gspca_spca508: reg_read err -71 [ 2170.391439][ T5143] gspca_spca508: reg write: error -71 [ 2170.418267][ T5143] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 2170.463654][ T5143] usb 2-1: USB disconnect, device number 37 [ 2170.538604][T13673] bond_slave_0: entered promiscuous mode [ 2170.544394][T13673] bond_slave_1: entered promiscuous mode [ 2170.564355][T13684] fuse: Bad value for 'fd' [ 2170.571752][T13673] bond_slave_0: left promiscuous mode [ 2170.577311][T13673] bond_slave_1: left promiscuous mode [ 2170.794553][ T9308] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2170.813312][T13696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2170.983754][ T9308] usb 5-1: Using ep0 maxpacket: 16 [ 2170.990260][T14739] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2171.007979][ T9308] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2171.044234][ T9308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.077725][ T9308] usb 5-1: Product: syz [ 2171.102017][ T9308] usb 5-1: Manufacturer: syz [ 2171.112843][ T9308] usb 5-1: SerialNumber: syz [ 2171.135113][ T9308] usb 5-1: config 0 descriptor?? [ 2171.203672][T14739] usb 4-1: Using ep0 maxpacket: 16 [ 2171.214362][T14739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.250362][T14739] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2171.313681][T14739] usb 4-1: config 0 has no interface number 0 [ 2171.331973][T14739] usb 4-1: config 0 interface 1 altsetting 239 has an invalid endpoint descriptor of length 2, skipping [ 2171.344648][T13714] fuse: Bad value for 'fd' [ 2171.347002][T14739] usb 4-1: config 0 interface 1 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2171.427373][T14739] usb 4-1: config 0 interface 1 has no altsetting 0 [ 2171.468645][T14739] usb 4-1: New USB device found, idVendor=19d2, idProduct=0012, bcdDevice=15.55 [ 2171.483108][T14739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.510784][ T9308] usb 5-1: Not enough endpoints found in device, aborting! [ 2171.525217][T14739] usb 4-1: Product: syz [ 2171.532124][T14739] usb 4-1: Manufacturer: syz [ 2171.553757][T14739] usb 4-1: SerialNumber: syz [ 2171.608504][T14739] usb 4-1: config 0 descriptor?? [ 2171.717682][ T9308] usb 5-1: USB disconnect, device number 63 [ 2171.728700][T25681] vhci_hcd: vhci_device speed not set [ 2171.859184][T14739] usb 4-1: USB disconnect, device number 84 [ 2171.943625][ T45] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2172.148375][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2172.158055][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.169086][ T45] usb 1-1: config 0 descriptor?? [ 2172.178344][ T45] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2172.454215][ T45] gspca_spca508: reg_read err -32 [ 2172.701537][ T5143] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2172.784682][ T2420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.870074][T13723] netlink: 'syz.0.7718': attribute type 3 has an invalid length. [ 2172.941065][ T5143] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2172.974303][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.975437][ T2420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.017435][ T5143] usb 2-1: config 0 descriptor?? [ 2173.033882][ T45] gspca_spca508: reg_read err -71 [ 2173.054874][ T45] gspca_spca508: reg_read err -71 [ 2173.061589][ T45] gspca_spca508: reg write: error -71 [ 2173.070848][ T45] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 2173.093077][ T45] usb 1-1: USB disconnect, device number 47 [ 2173.192760][ T2420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.227260][T13759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.257182][T13788] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2173.267223][T13759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.295191][ T5143] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 2173.317960][ T5143] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 2173.350129][ T5143] usb 2-1: USB disconnect, device number 38 [ 2173.405670][ T2420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.531185][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2173.543840][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2173.563848][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2173.579570][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2173.597816][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2173.609073][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2173.693416][T13812] fuse: Bad value for 'fd' [ 2173.903850][ T2420] bridge_slave_1: left allmulticast mode [ 2173.909540][ T2420] bridge_slave_1: left promiscuous mode [ 2173.915762][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2173.938087][ T2420] bridge_slave_0: left allmulticast mode [ 2173.954200][ T2420] bridge_slave_0: left promiscuous mode [ 2173.976404][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.643207][T13853] xt_bpf: check failed: parse error [ 2174.687036][ T5140] vhci_hcd: vhci_device speed not set [ 2174.768323][T22615] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2174.802950][T13853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 2174.809496][T13853] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2174.817976][T13853] vhci_hcd vhci_hcd.0: Device attached [ 2174.825434][T13854] vhci_hcd: connection closed [ 2174.827912][T13853] netlink: 'syz.2.7733': attribute type 9 has an invalid length. [ 2174.831940][T27336] vhci_hcd: stop threads [ 2174.885031][T27336] vhci_hcd: release socket [ 2174.909844][T27336] vhci_hcd: disconnect device [ 2174.963861][T22615] usb 4-1: Using ep0 maxpacket: 16 [ 2175.030045][T22615] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 2175.049490][T22615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.063757][T22615] usb 4-1: Product: syz [ 2175.073722][T22615] usb 4-1: Manufacturer: syz [ 2175.078675][T22615] usb 4-1: SerialNumber: syz [ 2175.089513][T22615] usb 4-1: config 0 descriptor?? [ 2175.125465][ T2420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2175.143358][ T2420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2175.166118][ T2420] bond0 (unregistering): Released all slaves [ 2175.220108][ T9308] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2175.424168][ T9308] usb 1-1: Using ep0 maxpacket: 16 [ 2175.432885][ T9308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2175.456946][ T9308] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2175.466692][ T9308] usb 1-1: config 0 has no interface number 0 [ 2175.473242][ T9308] usb 1-1: config 0 interface 1 altsetting 239 has an invalid endpoint descriptor of length 2, skipping [ 2175.485909][ T9308] usb 1-1: config 0 interface 1 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2175.528694][ T9308] usb 1-1: config 0 interface 1 has no altsetting 0 [ 2175.559515][ T9308] usb 1-1: New USB device found, idVendor=19d2, idProduct=0012, bcdDevice=15.55 [ 2175.589690][ T9308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.619277][ T9308] usb 1-1: Product: syz [ 2175.635447][T22615] usb 4-1: Cannot retrieve CPort count: -110 [ 2175.641505][ T9308] usb 1-1: Manufacturer: syz [ 2175.646778][T21822] Bluetooth: hci1: command tx timeout [ 2175.659926][T22615] usb 4-1: Cannot retrieve CPort count: -110 [ 2175.666911][ T9308] usb 1-1: SerialNumber: syz [ 2175.686365][T22615] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -110 [ 2175.695857][ T9308] usb 1-1: config 0 descriptor?? [ 2175.926117][ T45] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2175.933557][ T9308] usb 1-1: USB disconnect, device number 48 [ 2176.138302][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2176.177756][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2176.230259][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2176.246056][ T2420] hsr_slave_0: left promiscuous mode [ 2176.251617][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.269656][ T45] usb 3-1: Product: syz [ 2176.276576][ T2420] hsr_slave_1: left promiscuous mode [ 2176.293661][ T45] usb 3-1: Manufacturer: syz [ 2176.298667][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2176.308521][ T45] usb 3-1: SerialNumber: syz [ 2176.321928][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2176.344845][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2176.361398][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2176.425388][ T2420] veth1_macvtap: left promiscuous mode [ 2176.436140][ T2420] veth0_macvtap: left promiscuous mode [ 2176.442006][ T2420] veth1_vlan: left promiscuous mode [ 2176.448697][ T2420] veth0_vlan: left promiscuous mode [ 2176.665100][T14007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.732832][T14007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2177.393248][ T9308] usb 4-1: USB disconnect, device number 85 [ 2177.724822][T21822] Bluetooth: hci1: command tx timeout [ 2178.005011][ T2420] team0 (unregistering): Port device team_slave_1 removed [ 2178.107170][ T2420] team0 (unregistering): Port device team_slave_0 removed [ 2178.699356][T14035] fuse: Bad value for 'fd' [ 2179.130747][T13810] chnl_net:caif_netlink_parms(): no params data found [ 2179.140629][ T45] cdc_ncm 3-1:1.0: bind() failure [ 2179.163200][ T45] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 2179.186095][ T45] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 2179.232488][ T45] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 2179.397999][ T45] usb 3-1: USB disconnect, device number 51 [ 2179.653777][T25681] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2179.684946][T13810] bridge0: port 1(bridge_slave_0) entered blocking state [ 2179.693046][T13810] bridge0: port 1(bridge_slave_0) entered disabled state [ 2179.712992][T13810] bridge_slave_0: entered allmulticast mode [ 2179.740013][T13810] bridge_slave_0: entered promiscuous mode [ 2179.764457][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 2179.771872][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.780270][T13810] bridge_slave_1: entered allmulticast mode [ 2179.797147][T13810] bridge_slave_1: entered promiscuous mode [ 2179.813622][T21822] Bluetooth: hci1: command tx timeout [ 2179.885608][T25681] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2179.913528][T25681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.951158][T25681] usb 2-1: config 0 descriptor?? [ 2179.984469][T25681] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2180.076129][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2180.135073][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2180.164810][ T9308] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2180.234306][T25681] gspca_spca508: reg_read err -32 [ 2180.264599][T25681] gspca_spca508: reg_read err -32 [ 2180.394534][T13810] team0: Port device team_slave_0 added [ 2180.404181][ T9308] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2180.424265][T13810] team0: Port device team_slave_1 added [ 2180.428770][ T9308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.476770][ T9308] usb 1-1: config 0 descriptor?? [ 2180.501120][ T9308] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2180.576911][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2180.588098][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2180.597585][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2180.605820][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2180.618905][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2180.627334][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2180.681529][T14080] netlink: 'syz.1.7745': attribute type 3 has an invalid length. [ 2180.719564][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2180.738810][T25681] gspca_spca508: reg_read err -71 [ 2180.760288][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2180.766646][T25681] gspca_spca508: reg write: error -71 [ 2180.786399][ C0] vkms_vblank_simulate: vblank timer overrun [ 2180.840636][ T9308] gspca_spca508: reg_read err -32 [ 2180.859395][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2180.879396][T25681] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 2180.911074][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2180.924263][T25681] usb 2-1: USB disconnect, device number 39 [ 2180.951653][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2181.032430][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2181.157344][ T2420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.264340][T14128] netlink: 'syz.0.7748': attribute type 3 has an invalid length. [ 2181.313382][ T9308] gspca_spca508: reg_read err -71 [ 2181.328462][ T2420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.337248][ T9308] gspca_spca508: reg_read err -71 [ 2181.363663][ T9308] gspca_spca508: reg write: error -71 [ 2181.369184][ T9308] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 2181.412904][ T9308] usb 1-1: USB disconnect, device number 49 [ 2181.553162][ T2420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.577598][T13810] hsr_slave_0: entered promiscuous mode [ 2181.585808][T13810] hsr_slave_1: entered promiscuous mode [ 2181.602263][T13810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2181.613129][T13810] Cannot create hsr debugfs directory [ 2181.646899][T14302] fuse: Unknown parameter 'fd0x0000000000000005' [ 2181.745459][ T2420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.893773][T21822] Bluetooth: hci1: command tx timeout [ 2182.256786][T14424] netlink: 'syz.2.7752': attribute type 29 has an invalid length. [ 2182.433083][T14424] netlink: 'syz.2.7752': attribute type 29 has an invalid length. [ 2182.591693][T14433] netlink: 'syz.2.7752': attribute type 29 has an invalid length. [ 2182.627184][ T2420] bridge_slave_1: left allmulticast mode [ 2182.652156][ T2420] bridge_slave_1: left promiscuous mode [ 2182.664517][ T2420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.693948][T21822] Bluetooth: hci3: command tx timeout [ 2182.701539][T14495] fuse: Bad value for 'fd' [ 2182.704240][ T2420] bridge_slave_0: left allmulticast mode [ 2182.711613][ T2420] bridge_slave_0: left promiscuous mode [ 2182.726456][ T2420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.903091][T25681] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2183.111973][T25681] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2183.134853][T25681] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2183.168811][T25681] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2183.199934][T25681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2183.211086][T25681] usb 1-1: SerialNumber: syz [ 2183.572761][T14473] kvm: kvm [14468]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x805 [ 2183.600379][T14473] kvm: kvm [14468]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x805 [ 2183.635914][T14473] trusted_key: encrypted_key: keyword 'Vv' not recognized [ 2183.647669][T14473] trusted_key: encrypted_key: keyword 'ult' not recognized [ 2183.746134][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 2183.746151][ T29] audit: type=1326 audit(1720325702.612:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.2.7758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2396575bd9 code=0x0 [ 2183.774172][ C1] vkms_vblank_simulate: vblank timer overrun [ 2183.794176][ T29] audit: type=1326 audit(1720325702.652:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.2.7758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2396575bd9 code=0x0 [ 2183.837469][ T2420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2183.874057][ T2420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2183.892169][ T2420] bond0 (unregistering): Released all slaves [ 2183.943048][T14473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.950918][T14473] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.963980][T14473] bridge0: entered allmulticast mode [ 2184.036590][T25681] usb 1-1: 0:2 : does not exist [ 2184.121012][T25681] usb 1-1: USB disconnect, device number 50 [ 2184.323022][T14227] chnl_net:caif_netlink_parms(): no params data found [ 2184.395302][T30254] udevd[30254]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2184.617141][T14581] fuse: Unknown parameter 'fd0x0000000000000005' [ 2184.693491][ T2420] hsr_slave_0: left promiscuous mode [ 2184.737155][ T2420] hsr_slave_1: left promiscuous mode [ 2184.753362][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2184.768453][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2184.775916][T21822] Bluetooth: hci3: command tx timeout [ 2184.784938][ T2420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2184.797569][ T2420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2184.865641][ T2420] veth1_macvtap: left promiscuous mode [ 2184.871268][ T2420] veth0_macvtap: left promiscuous mode [ 2184.877425][ T2420] veth1_vlan: left promiscuous mode [ 2184.885305][ T2420] veth0_vlan: left promiscuous mode [ 2186.208956][ T2420] team0 (unregistering): Port device team_slave_1 removed [ 2186.278470][ T2420] team0 (unregistering): Port device team_slave_0 removed [ 2186.853827][T21822] Bluetooth: hci3: command tx timeout [ 2186.953794][T22615] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2187.130950][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.150625][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.166919][T22615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2187.184795][T22615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2187.187214][T14227] bridge_slave_0: entered allmulticast mode [ 2187.202373][T22615] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2187.214634][T14227] bridge_slave_0: entered promiscuous mode [ 2187.220354][T22615] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2187.252168][T22615] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2187.290537][T22615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2187.303510][T22615] usb 2-1: SerialNumber: syz [ 2187.317900][T14622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2187.333813][T14622] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2187.378833][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.404560][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 2187.411930][T14227] bridge_slave_1: entered allmulticast mode [ 2187.455325][T14227] bridge_slave_1: entered promiscuous mode [ 2187.633123][T14621] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7768'. [ 2187.683150][T22615] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 2187.696595][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2187.734866][T22615] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 2187.735573][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2187.770640][T13810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2187.796404][T22615] usb 2-1: USB disconnect, device number 40 [ 2187.812601][T13810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2187.990553][T13810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2188.034582][T14227] team0: Port device team_slave_0 added [ 2188.058461][T14227] team0: Port device team_slave_1 added [ 2188.078861][T13810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2188.332683][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2188.363007][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2188.438535][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2188.475798][T14773] netlink: 'syz.0.7772': attribute type 2 has an invalid length. [ 2188.486295][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2188.493249][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2188.530414][T14773] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7772'. [ 2188.580407][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2188.873273][T14227] hsr_slave_0: entered promiscuous mode [ 2188.904006][T14227] hsr_slave_1: entered promiscuous mode [ 2188.922699][T14227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2188.930513][T21822] Bluetooth: hci3: command tx timeout [ 2188.940635][T14227] Cannot create hsr debugfs directory [ 2188.997142][T13810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2189.212498][T13810] 8021q: adding VLAN 0 to HW filter on device team0 [ 2189.270325][T25681] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.277606][T25681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2189.339225][T25681] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.346475][T25681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2189.845896][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2190.179935][T13810] veth0_vlan: entered promiscuous mode [ 2190.292992][T14227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2190.317445][T14227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2190.340173][T13810] veth1_vlan: entered promiscuous mode [ 2190.350704][T14227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2190.369180][T14227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2190.441968][T13810] veth0_macvtap: entered promiscuous mode [ 2190.486260][T13810] veth1_macvtap: entered promiscuous mode [ 2190.566688][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2190.593126][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.612464][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2190.640094][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.681115][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2190.709877][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.732477][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2190.788467][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.799948][T14962] fuse: Bad value for 'fd' [ 2190.807232][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2190.822922][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2190.839451][T13810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2190.940832][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2190.993755][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.018210][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2191.033691][ T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2191.042684][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.056135][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2191.073426][T14967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.102505][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.125163][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2191.140735][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.172359][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2191.183746][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2191.199935][T13810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2191.242538][T13810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.256091][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.270835][T13810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.273528][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2191.298244][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2191.310131][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.345010][ T9] usb 3-1: config 0 descriptor?? [ 2191.353652][T13810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.373296][T13810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2191.453804][T25684] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 2191.491965][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2191.561252][T14958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.625388][T14958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.669564][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 2191.686069][T25684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2191.709234][T25684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2191.720857][T25684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2191.794009][T25684] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2191.809321][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2191.816558][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.846362][ T9308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2191.853652][ T9308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2191.872455][T25684] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2191.892658][T25684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2191.907776][T25684] usb 1-1: SerialNumber: syz [ 2191.912543][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2191.920858][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2191.935360][T14978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2191.950778][T14978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2192.054928][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2192.072732][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2192.149937][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2192.242631][T14975] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7781'. [ 2192.282751][T25684] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2192.320990][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 2192.336474][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2192.364878][T25684] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 2192.387872][ T9] usb 3-1: USB disconnect, device number 52 [ 2192.401913][T25684] usb 1-1: USB disconnect, device number 51 [ 2192.434168][T14227] veth0_vlan: entered promiscuous mode [ 2192.509626][T14227] veth1_vlan: entered promiscuous mode [ 2192.612160][T14227] veth0_macvtap: entered promiscuous mode [ 2192.653074][T14227] veth1_macvtap: entered promiscuous mode [ 2192.689006][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.726143][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.743610][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.792432][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.818874][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.853869][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.883549][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.922871][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.962158][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.987497][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.019127][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.049832][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.069698][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2193.165875][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.197645][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.218596][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.223917][ T25] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2193.229473][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.262024][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.283544][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.296445][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.307528][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.319137][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.330461][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.352807][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.383565][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.406887][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2193.466189][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 2193.466826][T14227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.495117][ T25] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 2193.511465][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.533704][T14227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.542434][T14227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.543670][ T25] usb 1-1: config 0 has no interface number 0 [ 2193.579327][T14227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.586597][ T25] usb 1-1: config 0 interface 52 has no altsetting 0 [ 2193.600349][ T25] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 2193.632270][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.662442][ T25] usb 1-1: config 0 descriptor?? [ 2193.797473][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2193.994948][T15098] fuse: Bad value for 'fd' [ 2194.190419][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.390036][T15102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2194.494998][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.588679][ T25] usb 1-1: Can not set alternate setting to 1, error: -71 [ 2194.602370][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2194.615776][ T25] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 2194.635222][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2194.645554][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2194.654135][ T25] usb 1-1: USB disconnect, device number 52 [ 2194.668250][ T5091] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2194.681295][ T5091] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2194.689829][ T5091] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2194.847249][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2194.945004][T27333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.973599][T27333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2195.037976][ T25] IPVS: starting estimator thread 0... [ 2195.184810][T15150] IPVS: using max 22 ests per chain, 52800 per kthread [ 2195.275820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2195.293806][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2195.388744][ T136] bridge_slave_1: left allmulticast mode [ 2195.413010][ T136] bridge_slave_1: left promiscuous mode [ 2195.433216][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.450847][ T136] bridge_slave_0: left allmulticast mode [ 2195.477973][ T136] bridge_slave_0: left promiscuous mode [ 2195.504706][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.217000][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2196.249895][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2196.279103][ T136] bond0 (unregistering): Released all slaves [ 2196.669449][T15231] fuse: Bad value for 'fd' [ 2196.756409][ T5091] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 2196.777614][ T5091] Bluetooth: hci0: command tx timeout [ 2197.031838][T15240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2197.476443][ T136] hsr_slave_0: left promiscuous mode [ 2197.500128][T15342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 2197.506675][T15342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2197.543883][ T136] hsr_slave_1: left promiscuous mode [ 2197.556318][T15344] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 2197.562862][T15344] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2197.578882][T15342] vhci_hcd vhci_hcd.0: Device attached [ 2197.607417][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2197.612946][T15344] vhci_hcd vhci_hcd.0: Device attached [ 2197.648282][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2197.654924][T15345] vhci_hcd: connection closed [ 2197.656464][T15343] vhci_hcd: connection closed [ 2197.672621][ T2420] vhci_hcd: stop threads [ 2197.721709][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.741258][ T2420] vhci_hcd: release socket [ 2197.754604][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2197.768852][ T2420] vhci_hcd: disconnect device [ 2197.786179][ T2420] vhci_hcd: stop threads [ 2197.791182][T15350] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2197.800619][ T2420] vhci_hcd: release socket [ 2197.805645][ T2420] vhci_hcd: disconnect device [ 2197.823577][ T4046] vhci_hcd: vhci_device speed not set [ 2197.844117][T15350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=536872000 (1073744000 ns) > initial count (200000 ns). Using initial count to start timer. [ 2197.932343][ T136] veth1_macvtap: left promiscuous mode [ 2197.941652][ T136] veth0_macvtap: left promiscuous mode [ 2197.950612][ T136] veth1_vlan: left promiscuous mode [ 2197.974565][ T136] veth0_vlan: left promiscuous mode [ 2198.343328][ T29] audit: type=1326 audit(1720325717.202:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15349 comm="syz.1.7806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6796375bd9 code=0x0 [ 2198.691712][ T5091] Bluetooth: hci3: command tx timeout [ 2198.847029][ T5091] Bluetooth: hci0: command tx timeout [ 2199.452029][ T136] team0 (unregistering): Port device team_slave_1 removed [ 2199.515970][ T136] team0 (unregistering): Port device team_slave_0 removed [ 2200.118004][T15133] chnl_net:caif_netlink_parms(): no params data found [ 2200.342148][T15431] CIFS: VFS: Malformed UNC in devname [ 2200.475552][T15447] binder: 15446:15447 ioctl c0189376 0 returned -22 [ 2200.523940][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 2200.553860][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.577505][T15133] bridge_slave_0: entered allmulticast mode [ 2200.596408][T15133] bridge_slave_0: entered promiscuous mode [ 2200.615425][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 2200.630100][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.647279][T15133] bridge_slave_1: entered allmulticast mode [ 2200.676543][T15133] bridge_slave_1: entered promiscuous mode [ 2200.822048][T15484] fuse: Bad value for 'fd' [ 2200.866228][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2200.909760][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2200.928594][ T5091] Bluetooth: hci0: command tx timeout [ 2201.075492][ T45] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 2201.102539][T15133] team0: Port device team_slave_0 added [ 2201.113342][T15539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2201.129546][ T136] IPVS: stop unused estimator thread 0... [ 2201.138741][T15133] team0: Port device team_slave_1 added [ 2201.215363][T15541] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2201.221914][T15541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2201.273068][T15541] vhci_hcd vhci_hcd.0: Device attached [ 2201.294065][ T45] usb 2-1: config 15 has an invalid interface number: 122 but max is 2 [ 2201.321203][ T45] usb 2-1: config 15 has an invalid interface number: 161 but max is 2 [ 2201.352346][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2201.352575][ T45] usb 2-1: config 15 contains an unexpected descriptor of type 0x2, skipping [ 2201.378825][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2201.392599][ T45] usb 2-1: config 15 contains an unexpected descriptor of type 0x1, skipping [ 2201.457470][ T45] usb 2-1: config 15 has an invalid interface number: 54 but max is 2 [ 2201.462730][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2201.477419][ T5143] vhci_hcd: vhci_device speed not set [ 2201.514040][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2201.533588][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2201.559591][ C0] vkms_vblank_simulate: vblank timer overrun [ 2201.569074][ T45] usb 2-1: config 15 has no interface number 0 [ 2201.575631][ T5143] usb 9-1: new full-speed USB device number 25 using vhci_hcd [ 2201.594633][ T45] usb 2-1: config 15 has no interface number 1 [ 2201.630099][ T45] usb 2-1: config 15 has no interface number 2 [ 2201.652089][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2201.687531][ T45] usb 2-1: config 15 interface 122 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 8 [ 2201.704370][ T45] usb 2-1: config 15 interface 122 altsetting 7 endpoint 0x4 has invalid maxpacket 2047, setting to 8 [ 2201.717470][ T45] usb 2-1: config 15 interface 122 altsetting 7 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 2201.740275][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x1, skipping [ 2201.782700][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 2201.802328][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 2201.824404][ T45] usb 2-1: config 15 interface 161 altsetting 162 has an invalid descriptor for endpoint zero, skipping [ 2201.835898][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2201.847966][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x8 has invalid maxpacket 2047, setting to 8 [ 2201.859370][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x8, skipping [ 2201.870566][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 2201.882317][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 2201.918552][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x8, skipping [ 2201.921856][T15544] vhci_hcd: connection reset by peer [ 2201.952033][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0xA has invalid maxpacket 32, setting to 8 [ 2201.967748][ T45] usb 2-1: config 15 interface 161 altsetting 162 endpoint 0xF has invalid maxpacket 512, setting to 8 [ 2201.981406][ T51] vhci_hcd: stop threads [ 2201.982119][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x4, skipping [ 2201.992781][ T51] vhci_hcd: release socket [ 2202.005495][T15590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7821'. [ 2202.013373][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x2, skipping [ 2202.038605][ T51] vhci_hcd: disconnect device [ 2202.042746][ T45] usb 2-1: config 15 interface 161 altsetting 162 has a duplicate endpoint with address 0x9, skipping [ 2202.051151][T15620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7821'. [ 2202.064247][ T45] usb 2-1: config 15 interface 54 altsetting 8 endpoint 0xB has invalid maxpacket 16, setting to 0 [ 2202.077432][ T45] usb 2-1: config 15 interface 54 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 2202.088737][ T45] usb 2-1: config 15 interface 54 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 2202.099957][ T45] usb 2-1: config 15 interface 54 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 2202.100780][T15620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7821'. [ 2202.111400][ T45] usb 2-1: config 15 interface 54 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 2202.135796][ T45] usb 2-1: config 15 interface 54 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 2202.148143][ T45] usb 2-1: config 15 interface 54 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 2202.159241][ T45] usb 2-1: config 15 interface 122 has no altsetting 0 [ 2202.166782][ T45] usb 2-1: config 15 interface 161 has no altsetting 0 [ 2202.173296][T15133] hsr_slave_0: entered promiscuous mode [ 2202.174023][ T45] usb 2-1: config 15 interface 54 has no altsetting 0 [ 2202.188232][T15133] hsr_slave_1: entered promiscuous mode [ 2202.194662][T15133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2202.202253][T15133] Cannot create hsr debugfs directory [ 2202.635033][ T25] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2202.830814][ T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2202.845230][ T5140] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 2202.872872][ T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2202.885999][ T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2202.899723][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.917383][T15663] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2203.003684][ T5091] Bluetooth: hci0: command tx timeout [ 2203.046179][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2203.066248][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2203.102419][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2203.121988][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.130091][T15133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2203.144065][ T5140] usb 1-1: Product: syz [ 2203.150624][ T5140] usb 1-1: Manufacturer: syz [ 2203.160958][ T5140] usb 1-1: SerialNumber: syz [ 2203.168891][T15133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2203.211182][ T25] usb 4-1: USB disconnect, device number 86 [ 2203.222496][T15133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2203.250166][T15697] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2203.282737][T15133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2203.411703][ T45] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a90, bcdDevice=3d.c0 [ 2203.423254][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.478609][ T45] usb 2-1: Product: 셾觼⹣㇄룗굑⋾㋻ǂ괸걟ëŠê–¥é•™è¢°æ¥–⛒凓핷톛筚╅체똕梚쾼硛ࡩ䩓æ£ë¥‘뭤욽ﻒCˬí€á…¸ä¯¢à§¶ä£¸î±¾ì‡«ê‚±ïµæ¡’䈶멖圬隿塼뾑鯺˧㡌î»ã°‡ì³“滹ꮓ [ 2203.503928][ T5140] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 2203.547573][ T45] usb 2-1: Manufacturer: 椗瀿鲘ⴷî¸ï ­ï·¸á³£Ï„䃳㥊éµï©êŒïµ±îª…ɽ驡쾎ϋଙ숣킧몉᥶簣諯闊ـå¯é•“ê“퀊䡮᥾꽉躰㇛ᬽ໮똢඿͂੻嚋ఄ緯äµä–¹ä²–삈ä†à¶¹é¾³ [ 2203.628743][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2203.646736][ T45] usb 2-1: can't set config #15, error -71 [ 2203.696029][ T45] usb 2-1: USB disconnect, device number 41 [ 2203.701022][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 2203.734978][ C0] usblp0: nonzero read bulk status received: -71 [ 2203.760253][T25684] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.767442][T25684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2203.803987][T15697] usblp0: error -71 reading from printer [ 2203.834443][ C0] usblp0: nonzero read bulk status received: -71 [ 2203.847794][T22615] usb 1-1: USB disconnect, device number 53 [ 2203.879284][T25684] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.886497][T25684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2203.905479][T22615] usblp0: removed [ 2204.051836][T15133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2204.175259][T15816] fuse: Bad value for 'fd' [ 2204.181834][T15133] veth0_vlan: entered promiscuous mode [ 2204.226576][T15133] veth1_vlan: entered promiscuous mode [ 2204.342684][T15133] veth0_macvtap: entered promiscuous mode [ 2204.368485][T15133] veth1_macvtap: entered promiscuous mode [ 2204.455546][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.470064][T15821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2204.513537][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.541671][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.552963][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.564759][T15832] FAULT_INJECTION: forcing a failure. [ 2204.564759][T15832] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.585732][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.601677][T15832] CPU: 0 PID: 15832 Comm: syz.0.7836 Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2204.611839][T15832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 2204.621879][T15832] Call Trace: [ 2204.625146][T15832] [ 2204.628068][T15832] dump_stack_lvl+0x241/0x360 [ 2204.632737][T15832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2204.637934][T15832] ? __pfx__printk+0x10/0x10 [ 2204.642533][T15832] ? __pfx___might_resched+0x10/0x10 [ 2204.647810][T15832] should_fail_ex+0x3b0/0x4e0 [ 2204.652479][T15832] ? __d_alloc+0x31/0x700 [ 2204.656795][T15832] should_failslab+0x9/0x20 [ 2204.661296][T15832] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 2204.667023][T15832] __d_alloc+0x31/0x700 [ 2204.671169][T15832] d_alloc_parallel+0xdf/0x1600 [ 2204.676007][T15832] ? __asan_memset+0x23/0x50 [ 2204.680586][T15832] ? __asan_memset+0x23/0x50 [ 2204.685167][T15832] ? lockdep_init_map_type+0xa1/0x910 [ 2204.690540][T15832] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2204.696339][T15832] ? __pfx_d_alloc_parallel+0x10/0x10 [ 2204.701699][T15832] ? __init_waitqueue_head+0xae/0x150 [ 2204.707066][T15832] __lookup_slow+0x117/0x3f0 [ 2204.711660][T15832] ? __pfx___lookup_slow+0x10/0x10 [ 2204.716757][T15832] ? try_to_unlazy+0x35c/0x5b0 [ 2204.721514][T15832] lookup_slow+0x53/0x70 [ 2204.725739][T15832] walk_component+0x2e1/0x410 [ 2204.730404][T15832] path_lookupat+0x16f/0x450 [ 2204.734982][T15832] filename_lookup+0x256/0x610 [ 2204.739732][T15832] ? __pfx_filename_lookup+0x10/0x10 [ 2204.745013][T15832] ? strncpy_from_user+0x1a4/0x2f0 [ 2204.750124][T15832] ? getname_flags+0x1fe/0x4f0 [ 2204.754902][T15832] user_path_at_empty+0x42/0x60 [ 2204.759739][T15832] user_statfs+0xd9/0x460 [ 2204.764060][T15832] ? __pfx_user_statfs+0x10/0x10 [ 2204.768986][T15832] ? vfs_write+0x7c4/0xc90 [ 2204.773410][T15832] __x64_sys_statfs+0xe8/0x1a0 [ 2204.778172][T15832] ? __pfx___x64_sys_statfs+0x10/0x10 [ 2204.783540][T15832] ? __fget_files+0x3f6/0x470 [ 2204.788220][T15832] ? do_syscall_64+0x100/0x230 [ 2204.792971][T15832] ? do_syscall_64+0xb6/0x230 [ 2204.797647][T15832] do_syscall_64+0xf3/0x230 [ 2204.802151][T15832] ? clear_bhb_loop+0x35/0x90 [ 2204.806816][T15832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.812695][T15832] RIP: 0033:0x7fdc9b375bd9 [ 2204.817095][T15832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2204.836684][T15832] RSP: 002b:00007fdc9c088048 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 2204.845093][T15832] RAX: ffffffffffffffda RBX: 00007fdc9b503f60 RCX: 00007fdc9b375bd9 [ 2204.853051][T15832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 2204.861006][T15832] RBP: 00007fdc9c0880a0 R08: 0000000000000000 R09: 0000000000000000 [ 2204.868961][T15832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2204.876915][T15832] R13: 000000000000000b R14: 00007fdc9b503f60 R15: 00007fdc9b62fa68 [ 2204.884888][T15832] [ 2204.887985][ C0] vkms_vblank_simulate: vblank timer overrun [ 2204.898778][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.908655][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.919231][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.929471][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.940048][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.949926][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.960425][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.976583][T15133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2205.033831][T15834] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 2205.039546][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7835'. [ 2205.040355][T15834] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2205.087613][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.105514][T15834] vhci_hcd vhci_hcd.0: Device attached [ 2205.122083][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.142682][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.168262][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.191267][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.213905][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.234182][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.259813][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.284468][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.303567][T22615] vhci_hcd: vhci_device speed not set [ 2205.314202][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.335171][T15843] vhci_hcd: connection closed [ 2205.340847][ T136] vhci_hcd: stop threads [ 2205.341068][T15133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.353607][ T136] vhci_hcd: release socket [ 2205.373560][T22615] usb 15-1: new full-speed USB device number 23 using vhci_hcd [ 2205.380655][ T136] vhci_hcd: disconnect device [ 2205.381291][T15133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.398818][T22615] usb 15-1: enqueue for inactive port 0 [ 2205.417078][T15133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2205.430639][T15133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.440152][T15133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.450916][T15133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.463429][T15133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.490318][T22615] vhci_hcd: vhci_device speed not set [ 2205.508543][T15836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7835'. [ 2205.540398][T15836] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7835'. [ 2205.690598][T15864] fuse: Bad value for 'fd' [ 2205.912973][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.925578][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.140584][ T2931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.337325][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2206.365866][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2206.545811][ T2931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.693702][ T5143] vhci_hcd: vhci_device speed not set [ 2206.764821][T21822] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2206.820826][T21822] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2206.833816][T21822] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2206.848289][T21822] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2206.883529][T21822] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2206.904630][T21822] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2206.916469][ T2931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.952017][T15902] fuse: Bad value for 'fd' [ 2206.970213][T15903] fuse: Bad value for 'user_id' [ 2207.105244][T15912] vlan2: entered promiscuous mode [ 2207.110323][T15912] vlan2: entered allmulticast mode [ 2207.204345][T15910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2207.247266][ T2931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.328105][T15922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7848'. [ 2207.379581][T15922] fuse: Unknown parameter 'fd0x000000000000000900000000000000000000' [ 2207.470068][T15934] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7849'. [ 2207.508720][T15934] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7849'. [ 2207.553328][T15934] netlink: 'syz.1.7849': attribute type 5 has an invalid length. [ 2207.576017][T15934] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7849'. [ 2207.816245][ T2931] bridge_slave_1: left allmulticast mode [ 2207.836472][ T2931] bridge_slave_1: left promiscuous mode [ 2207.855234][ T2931] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.889904][ T2931] bridge_slave_0: left allmulticast mode [ 2207.915009][ T2931] bridge_slave_0: left promiscuous mode [ 2207.925334][ T2931] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.234108][ T45] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2208.382414][T14980] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 2208.427449][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 2208.446390][ T45] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 2208.473686][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2208.541098][ T45] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2208.564992][ T45] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2208.612093][ T45] usb 5-1: Product: syz [ 2208.618932][ T45] usb 5-1: Manufacturer: syz [ 2208.630616][ T45] usb 5-1: SerialNumber: syz [ 2208.669145][ T45] usb 5-1: config 0 descriptor?? [ 2208.690023][ T45] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2208.727190][ T45] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2208.896495][T15973] x_tables: duplicate underflow at hook 1 [ 2208.990885][ T45] usb 5-1: USB disconnect, device number 64 [ 2209.006869][T14980] Bluetooth: hci7: command tx timeout [ 2209.016030][ T45] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 2209.241060][ T2931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2209.271969][ T2931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2209.290431][ T2931] bond0 (unregistering): Released all slaves [ 2209.351242][T16018] fuse: Bad value for 'fd' [ 2209.840250][T15907] chnl_net:caif_netlink_parms(): no params data found [ 2210.295164][ T2931] hsr_slave_0: left promiscuous mode [ 2210.342391][ T2931] hsr_slave_1: left promiscuous mode [ 2210.358618][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2210.369689][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2210.377061][T14980] Bluetooth: hci0: command tx timeout [ 2210.393209][ T2931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2210.402312][ T2931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2210.491017][ T2931] veth1_macvtap: left promiscuous mode [ 2210.501719][ T2931] veth0_macvtap: left promiscuous mode [ 2210.512957][ T2931] veth1_vlan: left promiscuous mode [ 2210.533405][ T2931] veth0_vlan: left promiscuous mode [ 2211.084284][T14980] Bluetooth: hci7: command tx timeout [ 2211.470128][ T2931] team0 (unregistering): Port device team_slave_1 removed [ 2211.512790][ T2931] team0 (unregistering): Port device team_slave_0 removed [ 2212.120020][T16189] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7863'. [ 2212.130508][T16189] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7863'. [ 2212.146514][T16189] netlink: 'syz.3.7863': attribute type 5 has an invalid length. [ 2212.164018][T16189] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7863'. [ 2212.238864][T15907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2212.275093][T15907] bridge0: port 1(bridge_slave_0) entered disabled state [ 2212.285726][T15907] bridge_slave_0: entered allmulticast mode [ 2212.298487][T15907] bridge_slave_0: entered promiscuous mode [ 2212.319214][T15907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2212.331708][T15907] bridge0: port 2(bridge_slave_1) entered disabled state [ 2212.340589][T15907] bridge_slave_1: entered allmulticast mode [ 2212.348003][T15907] bridge_slave_1: entered promiscuous mode [ 2212.578230][T15907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2212.606878][T15907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2212.748837][T15907] team0: Port device team_slave_0 added [ 2212.771783][T15907] team0: Port device team_slave_1 added [ 2212.803738][ T5143] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2212.859707][T15907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2212.883177][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2212.929629][T15907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2212.943678][T15907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2212.950651][T15907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2212.990705][T15907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.023552][ T5143] usb 3-1: Using ep0 maxpacket: 32 [ 2213.030651][ T5143] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.045805][ T5143] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2213.079648][ T5143] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 2213.107309][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.131312][T15907] hsr_slave_0: entered promiscuous mode [ 2213.143703][ T5143] usb 3-1: Product: syz [ 2213.148477][ T5143] usb 3-1: Manufacturer: syz [ 2213.153097][ T5143] usb 3-1: SerialNumber: syz [ 2213.159972][T15907] hsr_slave_1: entered promiscuous mode [ 2213.167145][T14980] Bluetooth: hci7: command tx timeout [ 2213.178514][ T5143] usb 3-1: config 0 descriptor?? [ 2213.191503][T15907] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2213.203898][T15907] Cannot create hsr debugfs directory [ 2213.583734][ T5143] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2213.639299][T16452] fuse: Bad value for 'fd' [ 2213.786484][ T5143] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2213.817794][ T5143] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2213.866567][ T5143] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2213.883511][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2213.891527][ T5143] usb 4-1: SerialNumber: syz [ 2213.939542][T25684] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 2214.174602][T25684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2214.175849][T16368] kvm: kvm [16367]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x805 [ 2214.191727][T25684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2214.234081][T25684] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2214.239433][T16386] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2214.245491][T25684] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2214.297232][T25684] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2214.312102][T25684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2214.352531][T25684] usb 5-1: SerialNumber: syz [ 2214.375302][T16452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2214.385135][T16368] trusted_key: encrypted_key: keyword 'ult' not recognized [ 2214.423107][T16452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2214.442927][ T5143] usb 4-1: 0:2 : does not exist [ 2214.529210][ T5143] usb 4-1: USB disconnect, device number 87 [ 2214.591538][T15907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2214.634579][T15907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2214.668483][T15907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2214.686193][ T5091] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2214.697130][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2214.706756][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2214.717839][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2214.729214][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2214.736389][T15907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2214.747268][T16452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7872'. [ 2214.756931][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2214.773196][T25684] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 2214.780482][T30254] udevd[30254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2214.801201][T25684] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 2214.841517][T25684] usb 5-1: USB disconnect, device number 65 [ 2215.120179][T15907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.244668][ T5091] Bluetooth: hci7: command tx timeout [ 2215.255615][T15907] 8021q: adding VLAN 0 to HW filter on device team0 [ 2215.291953][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.299073][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2215.330866][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.338101][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2215.543303][ T45] usb 3-1: USB disconnect, device number 53 [ 2215.654521][T16543] chnl_net:caif_netlink_parms(): no params data found [ 2216.103806][ T5143] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2216.133640][T16543] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.152260][T16543] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.172623][T16543] bridge_slave_0: entered allmulticast mode [ 2216.188507][T16543] bridge_slave_0: entered promiscuous mode [ 2216.211932][T16543] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.237181][T16543] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.263879][T16543] bridge_slave_1: entered allmulticast mode [ 2216.281625][T16543] bridge_slave_1: entered promiscuous mode [ 2216.293699][ T5143] usb 5-1: Using ep0 maxpacket: 8 [ 2216.317213][ T5143] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2216.347714][ T5143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2216.380113][ T5143] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2216.417755][ T5143] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2216.454897][ T5143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.478048][T16543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2216.516209][T16543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2216.519502][ T5143] usb 5-1: Product: syz [ 2216.546187][ T5143] usb 5-1: Manufacturer: syz [ 2216.561480][ T5143] usb 5-1: SerialNumber: syz [ 2216.576160][T15907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2216.594105][T25684] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2216.609660][ T5143] cdc_ncm 5-1:1.0: skipping garbage [ 2216.634753][ T5143] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 2216.664706][ T5143] cdc_ncm 5-1:1.0: bind() failure [ 2216.698723][T16543] team0: Port device team_slave_0 added [ 2216.727118][T16543] team0: Port device team_slave_1 added [ 2216.764090][T25684] usb 4-1: device descriptor read/64, error -71 [ 2216.849346][ T5091] Bluetooth: hci6: command tx timeout [ 2216.928548][T16543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2216.967144][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2217.010844][T16543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2217.031971][T16543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2217.039920][T16543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2217.074102][T25684] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2217.078930][T16543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2217.249801][T16686] netlink: 'syz.4.7877': attribute type 1 has an invalid length. [ 2217.267264][T16686] netlink: 'syz.4.7877': attribute type 2 has an invalid length. [ 2217.283872][T25684] usb 4-1: device descriptor read/64, error -71 [ 2217.340550][T16543] hsr_slave_0: entered promiscuous mode [ 2217.377283][T16543] hsr_slave_1: entered promiscuous mode [ 2217.394510][T16543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2217.405987][ T5091] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2217.414890][ T5091] Bluetooth: hci0: Injecting HCI hardware error event [ 2217.423858][ T5091] Bluetooth: hci0: hardware error 0x00 [ 2217.432679][T25684] usb usb4-port1: attempt power cycle [ 2217.444651][T16543] Cannot create hsr debugfs directory [ 2217.557035][T16880] fuse: Bad value for 'fd' [ 2217.602999][T15907] veth0_vlan: entered promiscuous mode [ 2217.837400][T15907] veth1_vlan: entered promiscuous mode [ 2217.914568][T25684] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2217.954589][T25684] usb 4-1: device descriptor read/8, error -71 [ 2218.027654][T16543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.128291][T15907] veth0_macvtap: entered promiscuous mode [ 2218.200624][T16543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.228653][T15907] veth1_macvtap: entered promiscuous mode [ 2218.243688][T25684] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2218.284943][T25684] usb 4-1: device descriptor read/8, error -71 [ 2218.350033][T16543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.404325][T25684] usb usb4-port1: unable to enumerate USB device [ 2218.406056][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.429247][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.439998][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.475480][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.485732][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.496560][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.508916][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.531812][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.562378][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.583173][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.611215][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2218.632154][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.688216][T15907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2218.726411][ T4046] usb 5-1: USB disconnect, device number 66 [ 2218.758431][T16543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2218.821400][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2218.849011][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.859896][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2218.871347][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.881881][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2218.893112][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.903801][ T5140] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2218.923826][T14980] Bluetooth: hci6: command tx timeout [ 2218.929571][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2218.949236][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.969991][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2218.983322][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2218.997503][T15907] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2219.008783][T15907] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2219.022846][T15907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2219.039219][T15907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2219.049568][T15907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2219.058603][T15907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2219.069085][T15907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2219.094197][ T5140] usb 3-1: Using ep0 maxpacket: 16 [ 2219.105084][ T5140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.161164][ T5140] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2219.208426][ T5140] usb 3-1: config 0 has no interface number 0 [ 2219.241191][ T5140] usb 3-1: config 0 interface 1 altsetting 239 has an invalid endpoint descriptor of length 2, skipping [ 2219.276518][ T5140] usb 3-1: config 0 interface 1 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 2219.298440][ T5140] usb 3-1: config 0 interface 1 has no altsetting 0 [ 2219.330677][ T5140] usb 3-1: New USB device found, idVendor=19d2, idProduct=0012, bcdDevice=15.55 [ 2219.346379][ T5140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.355791][T27336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2219.381512][ T5140] usb 3-1: Product: syz [ 2219.396999][T27336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2219.405656][ T5140] usb 3-1: Manufacturer: syz [ 2219.413133][ T5140] usb 3-1: SerialNumber: syz [ 2219.448950][ T5140] usb 3-1: config 0 descriptor?? [ 2219.455863][T16543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2219.476185][T16543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2219.486306][ T5091] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2219.504821][T27336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2219.505593][T16543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2219.528252][T27336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2219.539398][T16543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2219.667086][T16543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.715892][ T5140] usb 3-1: USB disconnect, device number 54 [ 2219.748730][T16543] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.806212][T22615] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.813412][T22615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2219.867173][ T4046] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.874393][ T4046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2220.026979][T16543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2220.112926][T16543] veth0_vlan: entered promiscuous mode [ 2220.153091][T16543] veth1_vlan: entered promiscuous mode [ 2220.193854][ T5143] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2220.222022][T16543] veth0_macvtap: entered promiscuous mode [ 2220.261298][T16543] veth1_macvtap: entered promiscuous mode [ 2220.309227][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.341558][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.373231][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.395076][T17069] fuse: Bad value for 'fd' [ 2220.399625][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.425327][ T5143] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2220.430097][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.444363][ T5143] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2220.459173][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.477010][ T5143] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2220.478717][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.489409][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2220.506587][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.522017][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.543714][T31255] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2220.560081][ T5143] usb 5-1: SerialNumber: syz [ 2220.560332][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.604260][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.623277][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.636491][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2220.654907][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.667650][T16543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2220.701826][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.714958][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.724996][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.735891][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.746135][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.762947][T31255] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2220.773538][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.794721][T31255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.811605][ T5140] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 2220.818072][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.838207][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.854684][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.881322][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.894663][T31255] usb 4-1: config 0 descriptor?? [ 2220.895409][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.916908][T31255] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2220.920325][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2220.933331][T17049] kvm: kvm [17041]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x805 [ 2220.934636][T17049] kvm: kvm [17041]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x805 [ 2220.964531][T16543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2220.986396][T17045] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2220.986523][T16543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.003139][T16543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2221.030151][ T5091] Bluetooth: hci6: command tx timeout [ 2221.079757][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2221.108271][T16543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.124810][T17045] trusted_key: encrypted_key: keyword 'ult' not recognized [ 2221.128999][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2221.153851][T16543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.169261][ T5140] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2221.192254][T31255] gspca_spca508: reg_read err -32 [ 2221.198460][T16543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.211836][ T5143] usb 5-1: 0:2 : does not exist [ 2221.224168][T16543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2221.233243][ T5140] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2221.290945][ T5143] usb 5-1: USB disconnect, device number 67 [ 2221.299305][ T5140] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2221.326755][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2221.349611][ T5140] usb 1-1: SerialNumber: syz [ 2221.415274][T17072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2221.426184][T17072] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 2221.518595][T27333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.544024][T27333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.602865][T30254] udevd[30254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2221.623184][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2221.627612][T17063] netlink: 'syz.3.7884': attribute type 3 has an invalid length. [ 2221.648987][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.687573][T17069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7885'. [ 2221.742222][ T5140] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2221.782931][T31255] gspca_spca508: reg_read err -71 [ 2221.797334][T31255] gspca_spca508: reg_read err -71 [ 2221.809211][ T5140] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 2221.819352][T31255] gspca_spca508: reg write: error -71 [ 2221.830451][T31255] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 2221.849206][ T5140] usb 1-1: USB disconnect, device number 54 [ 2221.874619][T31255] usb 4-1: USB disconnect, device number 92 [ 2222.015265][T17143] xt_TCPMSS: Only works on TCP SYN packets [ 2222.291633][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.298011][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.585538][ T5140] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2222.783727][ T5140] usb 5-1: Using ep0 maxpacket: 16 [ 2222.815570][ T5140] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 2222.831911][ T5140] usb 5-1: config 0 interface 1 altsetting 239 endpoint 0x76 has invalid maxpacket 22850, setting to 64 [ 2222.845386][ T5140] usb 5-1: config 0 interface 1 altsetting 239 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 2222.859208][ T5140] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 2222.869861][ T5140] usb 5-1: config 0 interface 1 has no altsetting 0 [ 2222.883285][ T5140] usb 5-1: New USB device found, idVendor=19d2, idProduct=0012, bcdDevice=15.55 [ 2222.901613][ T5140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.915699][ T5140] usb 5-1: Product: syz [ 2222.919890][ T5140] usb 5-1: Manufacturer: syz [ 2222.926482][ T5140] usb 5-1: SerialNumber: syz [ 2222.942743][ T5140] usb 5-1: config 0 descriptor?? [ 2223.083728][ T9308] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2223.091440][ T5091] Bluetooth: hci6: command tx timeout [ 2223.195316][ T5140] usb 5-1: USB disconnect, device number 68 [ 2223.323697][ T9308] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2223.333370][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.353145][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.384521][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.393075][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.423630][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.443004][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.475773][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.517594][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.533493][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.552210][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.565223][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.586646][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.593415][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7896'. [ 2223.619698][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.653631][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.684070][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.704556][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.713525][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.746389][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.776170][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.793654][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.821820][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.846661][ T9308] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2223.875835][ T9308] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2223.903637][ T9308] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2223.905394][ T5140] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2223.940680][ T9308] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2223.972851][ T9308] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2223.985115][T17202] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2224.009868][ T9308] usb 4-1: Product: syz [ 2224.014176][ T9308] usb 4-1: Manufacturer: syz [ 2224.018819][ T9308] usb 4-1: SerialNumber: syz [ 2224.023615][T14739] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2224.057703][T17202] kvm: pic: non byte write [ 2224.062691][ T9308] usb 4-1: config 0 descriptor?? [ 2224.110426][ T9308] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2224.124074][ T5140] usb 2-1: Using ep0 maxpacket: 8 [ 2224.156680][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2224.188280][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 2224.219999][ T5140] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2224.239504][T14739] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2224.262536][ T5140] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 2224.271916][T14739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2224.282121][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.297427][T14739] usb 1-1: config 0 descriptor?? [ 2224.326788][ T5140] usb 2-1: Product: syz [ 2224.329481][T14739] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2224.331204][ T5140] usb 2-1: Manufacturer: syz [ 2224.376148][T31255] usb 4-1: USB disconnect, device number 93 [ 2224.418745][ T5140] usb 2-1: SerialNumber: syz [ 2224.438763][T31255] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2224.450350][ T5140] usb 2-1: config 0 descriptor?? [ 2224.470563][ T5140] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 2224.601360][T14739] gspca_spca508: reg_read err -32 [ 2224.803799][ T9] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2224.837939][ T5140] pwc: Failed to set LED on/off time (-71) [ 2224.873632][ T5140] pwc: send_video_command error -71 [ 2224.880564][ T5140] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2224.904447][ T5140] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 2224.967862][ T5140] usb 2-1: USB disconnect, device number 42 [ 2225.020525][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2225.043855][T17197] netlink: 'syz.0.7897': attribute type 3 has an invalid length. [ 2225.061265][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2225.079383][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2225.094390][T17245] xt_TCPMSS: Only works on TCP SYN packets [ 2225.102193][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2225.127400][ T9] usb 5-1: SerialNumber: syz [ 2225.139020][T14739] gspca_spca508: reg_read err -71 [ 2225.184541][T14739] gspca_spca508: reg_read err -71 [ 2225.203324][T14739] gspca_spca508: reg write: error -71 [ 2225.213586][T14739] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 2225.266606][T14739] usb 1-1: USB disconnect, device number 55 [ 2225.434179][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x805 [ 2225.482327][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x805 [ 2225.497592][T17214] kvm: kvm [17213]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8fe00000805 [ 2225.527364][T17227] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2225.556642][T17227] trusted_key: encrypted_key: keyword 'ult' not recognized [ 2225.600376][ T9] usb 5-1: 0:2 : does not exist [ 2225.664882][ T9] usb 5-1: USB disconnect, device number 69 [ 2225.882249][T17285] fuse: Bad value for 'fd' [ 2225.975387][T30254] udevd[30254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2226.151829][T17298] sit0: entered promiscuous mode [ 2226.213690][T25684] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 2226.417488][T25684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2226.446277][T25684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2226.470217][T25684] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2226.494674][T25684] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2226.525379][T25684] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2226.540763][T25684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2226.556873][T25684] usb 4-1: SerialNumber: syz [ 2226.577935][T17285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2226.587900][T17285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2226.823220][T17285] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7903'. [ 2226.894529][T25684] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 2226.925025][T25684] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 2226.955348][T25684] usb 4-1: USB disconnect, device number 94 [ 2227.084028][ T5091] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 2227.804302][T17341] xt_TCPMSS: Only works on TCP SYN packets [ 2227.813745][ T5140] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 2228.031307][ T5140] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2228.056847][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.093353][ T5140] usb 5-1: config 0 descriptor?? [ 2228.121928][ T5140] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2228.371191][ T5140] gspca_spca508: reg_read err -32 [ 2228.391500][ T5140] gspca_spca508: reg_read err -32 [ 2228.806732][T17333] netlink: 'syz.4.7910': attribute type 3 has an invalid length. [ 2228.905449][ T5140] gspca_spca508: reg_read err -71 [ 2228.920738][ T5140] gspca_spca508: reg write: error -71 [ 2228.949491][ T5140] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 2228.998854][ T5140] usb 5-1: USB disconnect, device number 70 [ 2229.083980][ T5091] Bluetooth: hci6: command tx timeout [ 2229.720622][T17391] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2229.727180][T17391] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2229.737937][T17391] vhci_hcd vhci_hcd.0: Device attached [ 2229.943840][ T5140] vhci_hcd: vhci_device speed not set [ 2229.984804][T17400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2229.991354][T17400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2230.006029][T17400] vhci_hcd vhci_hcd.0: Device attached [ 2230.025174][ T5140] usb 15-1: new full-speed USB device number 24 using vhci_hcd [ 2230.203903][T25684] vhci_hcd: vhci_device speed not set [ 2230.273755][T25684] usb 13-1: new full-speed USB device number 26 using vhci_hcd [ 2230.341167][T17410] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2230.356372][T17414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2230.360819][T17410] kvm: pic: non byte write [ 2230.474048][T17393] vhci_hcd: connection reset by peer [ 2230.484970][ T136] vhci_hcd: stop threads [ 2230.497236][ T136] vhci_hcd: release socket [ 2230.509369][ T136] vhci_hcd: disconnect device [ 2230.571907][T17423] fuse: Bad value for 'fd' [ 2230.601451][ T5091] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 2230.636155][T17428] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2230.642666][T17428] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2230.649242][T17428] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2230.655699][T17428] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2230.662118][T17428] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2230.668588][T17428] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2230.675058][T17428] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2230.681452][T17428] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2230.688032][T17428] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2230.720874][T17402] vhci_hcd: connection reset by peer [ 2230.727427][ T136] vhci_hcd: stop threads [ 2230.732101][ T136] vhci_hcd: release socket [ 2230.736747][ T136] vhci_hcd: disconnect device [ 2230.853607][ T9308] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 2230.921187][T17439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7930'. [ 2231.056630][ T9308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2231.074273][ T9308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 2231.085898][ T9308] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 2231.101554][ T9308] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2231.119714][ T9308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2231.130396][ T9308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2231.139370][ T9308] usb 1-1: SerialNumber: syz [ 2231.149539][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2231.157491][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2231.190146][T17449] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2231.196705][T17449] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2231.220908][T17449] vhci_hcd vhci_hcd.0: Device attached [ 2231.370652][T17423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7927'. [ 2231.417723][ T9308] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 2231.443913][ T9308] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 2231.460671][ T9308] usb 1-1: USB disconnect, device number 56 [ 2231.521345][T17463] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2231.537057][T17463] kvm: pic: non byte write [ 2231.689674][ T29] audit: type=1326 audit(1720325750.552:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17484 comm="syz.1.7938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5960575bd9 code=0x0 [ 2231.909571][T17451] vhci_hcd: connection closed [ 2231.909932][ T51] vhci_hcd: stop threads [ 2231.922980][ T51] vhci_hcd: release socket [ 2231.928845][ T51] vhci_hcd: disconnect device [ 2232.025753][ T5091] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 2232.210674][T17515] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 2232.217237][T17515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2232.235621][T17515] vhci_hcd vhci_hcd.0: Device attached [ 2232.443754][ T9308] vhci_hcd: vhci_device speed not set [ 2232.537977][ T9308] usb 9-1: new full-speed USB device number 26 using vhci_hcd [ 2232.612043][ T5091] Bluetooth: hci6: command tx timeout [ 2232.899074][T17550] fuse: Unknown parameter 'f²"0x0000000000000005' [ 2232.899872][T17561] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 2232.962095][T17517] vhci_hcd: connection reset by peer [ 2232.980216][ T136] vhci_hcd: stop threads [ 2232.990519][ T136] vhci_hcd: release socket [ 2232.997582][T17561] kvm: pic: non byte write [ 2233.023604][ T136] vhci_hcd: disconnect device [ 2233.195113][T17568] xt_TCPMSS: Only works on TCP SYN packets [ 2233.284639][T17572] netlink: 'syz.1.7952': attribute type 7 has an invalid length. [ 2233.292523][T17572] netlink: 'syz.1.7952': attribute type 39 has an invalid length. [ 2233.337541][ T5091] Bluetooth: hci6: ISO packet too small [ 2233.376974][T17540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7947'. [ 2233.781077][ T5091] Bluetooth: hci6: ACL packet for unknown connection handle 0 [ 2233.876990][T17593] netlink: 'syz.2.7958': attribute type 2 has an invalid length. [ 2233.889253][T17593] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7958'. [ 2234.043871][ T5091] Bluetooth: hci1: command tx timeout [ 2235.022722][T17636] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2235.029293][T17636] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2235.054998][T17636] vhci_hcd vhci_hcd.0: Device attached [ 2235.164602][ T5140] vhci_hcd: vhci_device speed not set [ 2235.286572][T14739] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2235.397388][T31255] vhci_hcd: vhci_device speed not set [ 2235.464019][T25684] vhci_hcd: vhci_device speed not set [ 2235.971720][ T5091] Bluetooth: hci6: command tx timeout [ 2235.977784][T31255] usb 17-1: new full-speed USB device number 28 using vhci_hcd [ 2235.994182][T14739] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2236.003281][T14739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.013223][T17645] vhci_hcd: connection closed [ 2236.015657][T17646] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2236.038760][T27333] vhci_hcd: stop threads [ 2236.043069][T27333] vhci_hcd: release socket [ 2236.047539][T27333] vhci_hcd: disconnect device [ 2236.063015][T14739] usb 4-1: config 0 descriptor?? [ 2236.670395][ T29] audit: type=1326 audit(1720325755.502:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17647 comm="syz.2.7969" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd74575bd9 code=0x0 [ 2236.694761][T14739] gspca_main: spca508-2.14.0 probing 8086:0110 [ 2237.185142][T14739] gspca_spca508: reg_read err -32 [ 2237.596814][T17638] netlink: 'syz.3.7967': attribute type 3 has an invalid length. [ 2237.664078][ T9308] vhci_hcd: vhci_device speed not set [ 2237.922135][T14739] gspca_spca508: reg_read err -71 [ 2237.928417][T14739] gspca_spca508: reg_read err -71 [ 2237.934414][T14739] gspca_spca508: reg write: error -71 [ 2237.940115][T14739] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 2237.959808][T14739] usb 4-1: USB disconnect, device number 95 [ 2241.313705][ T45] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2242.296229][T31255] vhci_hcd: vhci_device speed not set [ 2242.380423][T17690] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 2242.389041][T17690] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 2243.257598][T17690] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 2248.211900][ C1] vkms_vblank_simulate: vblank timer overrun [ 2248.644689][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.093753][ C1] vkms_vblank_simulate: vblank timer overrun [ 2249.661056][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.147370][ C1] vkms_vblank_simulate: vblank timer overrun [ 2250.561091][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.011880][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.478962][ C1] vkms_vblank_simulate: vblank timer overrun [ 2251.961741][ C1] vkms_vblank_simulate: vblank timer overrun [ 2252.561447][ C1] vkms_vblank_simulate: vblank timer overrun [ 2252.761233][T14980] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2252.772503][T14980] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2252.782479][T14980] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2252.791785][T14980] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2252.799757][T14980] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2252.811384][T14980] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2253.103214][T17743] chnl_net:caif_netlink_parms(): no params data found [ 2253.330497][ C1] vkms_vblank_simulate: vblank timer overrun [ 2254.003256][ C1] vkms_vblank_simulate: vblank timer overrun [ 2254.620428][T17733] Cannot find add_set index 0 as target [ 2256.849079][T14980] Bluetooth: hci8: command tx timeout [ 2256.857158][T14980] Bluetooth: hci7: command tx timeout [ 2257.227060][T14980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2257.238262][T14980] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2257.247168][T14980] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2257.257375][T14980] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2257.265355][T14980] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2257.272846][T14980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2257.303973][T25684] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2257.555627][T25684] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 2258.873714][ T5091] Bluetooth: hci8: command tx timeout [ 2261.371249][T25684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2263.114989][ T5091] Bluetooth: hci0: command tx timeout [ 2263.122192][ T5091] Bluetooth: hci8: command tx timeout [ 2266.479410][T14980] Bluetooth: hci8: command tx timeout [ 2266.484827][T14980] Bluetooth: hci0: command tx timeout [ 2267.050714][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2267.061549][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2267.069379][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2267.077524][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2267.085488][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2267.092774][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2268.161077][T25684] usb 4-1: config 0 descriptor?? [ 2268.171871][T25684] usb 4-1: can't set config #0, error -71 [ 2268.183801][T25684] usb 4-1: USB disconnect, device number 96 [ 2269.131653][T21822] Bluetooth: hci0: command tx timeout [ 2270.303944][T14980] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2270.318115][T14980] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2270.326254][T14980] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2271.196617][ T5091] Bluetooth: hci0: command tx timeout [ 2271.586614][ T5091] Bluetooth: hci1: command tx timeout [ 2271.653105][T14980] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2271.661066][T14980] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2271.670691][T14980] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2271.679495][T17743] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.701587][T17743] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.708976][T17743] bridge_slave_0: entered allmulticast mode [ 2272.715707][T17743] bridge_slave_0: entered promiscuous mode [ 2272.723250][T17743] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.730322][T17743] bridge0: port 2(bridge_slave_1) entered disabled state [ 2272.737477][T17743] bridge_slave_1: entered allmulticast mode [ 2272.744177][T17743] bridge_slave_1: entered promiscuous mode [ 2272.768056][T17743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2272.779286][T17743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2273.663721][T14980] Bluetooth: hci1: command tx timeout [ 2274.531272][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7991'. [ 2275.664594][T14980] Bluetooth: hci6: command tx timeout [ 2275.753229][T21822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2275.773482][T21822] Bluetooth: hci1: command tx timeout [ 2275.780426][T21822] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2275.788630][T21822] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2275.797539][T21822] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2275.805227][T21822] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2275.812549][T21822] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2276.145841][T27336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2278.206438][T21822] Bluetooth: hci6: command tx timeout [ 2278.212537][T21822] Bluetooth: hci1: command tx timeout [ 2278.218367][T21822] Bluetooth: hci9: command tx timeout [ 2278.241729][T17743] team0: Port device team_slave_0 added [ 2280.027408][T17743] team0: Port device team_slave_1 added [ 2280.203959][T21822] Bluetooth: hci6: command tx timeout [ 2281.106302][T21822] Bluetooth: hci9: command tx timeout [ 2282.461844][T21822] Bluetooth: hci6: command tx timeout [ 2283.164085][T21822] Bluetooth: hci9: command tx timeout [ 2283.929416][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.938759][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.018405][T17743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.027984][T17743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2284.062999][T17743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2286.352559][T21822] Bluetooth: hci9: command tx timeout [ 2286.381030][T17743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2286.395155][T17743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2286.421063][T17743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2287.669505][T27336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.581199][T17743] hsr_slave_0: entered promiscuous mode [ 2291.587843][T17743] hsr_slave_1: entered promiscuous mode [ 2291.594508][T17743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2291.602054][T17743] Cannot create hsr debugfs directory [ 2296.081707][T17903] chnl_net:caif_netlink_parms(): no params data found [ 2298.520526][T18038] chnl_net:caif_netlink_parms(): no params data found [ 2301.768073][T27336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2307.171458][T18027] chnl_net:caif_netlink_parms(): no params data found [ 2307.190094][T17935] chnl_net:caif_netlink_parms(): no params data found [ 2310.488334][T27336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2313.975377][T17903] bridge0: port 1(bridge_slave_0) entered blocking state [ 2313.982534][T17903] bridge0: port 1(bridge_slave_0) entered disabled state [ 2314.003733][T17903] bridge_slave_0: entered allmulticast mode [ 2314.021839][T17903] bridge_slave_0: entered promiscuous mode [ 2314.030605][T17903] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.038225][T17903] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.062609][T17903] bridge_slave_1: entered allmulticast mode [ 2314.072431][T17903] bridge_slave_1: entered promiscuous mode [ 2315.632558][T21822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2315.656689][T18038] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.685418][T14980] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2315.694426][T14980] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2315.702479][T14980] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2315.710546][T14980] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2315.718669][T14980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2315.750497][T18038] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.773849][T18038] bridge_slave_0: entered allmulticast mode [ 2315.804568][T18038] bridge_slave_0: entered promiscuous mode [ 2319.873712][T14980] Bluetooth: hci3: command tx timeout [ 2319.995080][ T1532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2320.005287][ T1532] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2320.013990][ T1532] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2320.022336][ T1532] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2320.030262][ T1532] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2320.038130][ T1532] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2321.914229][T14980] Bluetooth: hci3: command tx timeout [ 2322.056821][T18038] bridge0: port 2(bridge_slave_1) entered blocking state [ 2322.064649][T14980] Bluetooth: hci7: command tx timeout [ 2322.083588][T18038] bridge0: port 2(bridge_slave_1) entered disabled state [ 2322.091100][T18038] bridge_slave_1: entered allmulticast mode [ 2322.101804][T18038] bridge_slave_1: entered promiscuous mode [ 2323.996078][T14980] Bluetooth: hci3: command tx timeout [ 2326.302329][T14980] Bluetooth: hci7: command tx timeout [ 2326.309299][T14980] Bluetooth: hci3: command tx timeout [ 2328.123185][T17935] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.132132][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.183700][T17935] bridge_slave_0: entered allmulticast mode [ 2328.191127][T17935] bridge_slave_0: entered promiscuous mode [ 2330.043510][ T1532] Bluetooth: hci7: command tx timeout [ 2330.337615][ T1532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2330.348434][ T1532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2330.371760][ T1532] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2330.380180][ T1532] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2330.388783][ T1532] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2330.396369][ T1532] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2332.627959][T18038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2332.643036][ T1532] Bluetooth: hci7: command tx timeout [ 2332.648574][ T1532] Bluetooth: hci0: command tx timeout [ 2335.463175][ T1532] Bluetooth: hci0: command tx timeout [ 2335.469586][T14980] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2335.535582][T14980] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2338.948324][T18795] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 2338.967068][T14980] Bluetooth: hci0: command tx timeout [ 2342.899524][T14980] Bluetooth: hci0: command tx timeout [ 2347.596781][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2347.603121][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2347.768277][ T1532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2352.746509][T14980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2352.754931][T14980] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2352.766954][T14980] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2352.777103][T14980] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2352.786002][T14980] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2352.794252][T14980] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2352.801585][T14980] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2352.812895][T14980] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2358.869474][T21822] Bluetooth: hci1: Opcode 0x1009 failed: -110 [ 2365.293533][T18859] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2365.307612][ T1532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2381.176334][T14980] Bluetooth: hci8: command tx timeout [ 2390.323569][T21822] Bluetooth: hci8: command tx timeout [ 2399.903161][T14980] Bluetooth: hci8: command tx timeout [ 2410.255790][T21822] Bluetooth: hci8: command tx timeout [ 2410.261246][T21822] Bluetooth: hci9: command 0x0406 tx timeout [ 2410.294557][ T1532] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2410.362656][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2410.732765][T18891] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2410.736026][ T5091] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2410.737083][ T5091] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2410.738788][ T5091] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2410.739524][ T5091] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2410.740443][ T5091] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2423.174051][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 2423.180383][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 2437.331542][ T1532] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2437.429264][ T1532] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2437.764086][T18891] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2437.834236][T18903] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2453.939563][T18874] Bluetooth: hci1: Opcode 0x1005 failed: -110 [ 2453.949884][ T1532] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 2474.264108][ T30] INFO: task kworker/1:5:5143 blocked for more than 141 seconds. [ 2474.271882][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2474.323942][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2474.332740][ T30] task:kworker/1:5 state:D stack:19352 pid:5143 tgid:5143 ppid:2 flags:0x00004000 [ 2474.384535][ T30] Workqueue: events switchdev_deferred_process_work [ 2474.391194][ T30] Call Trace: [ 2474.413490][ T30] [ 2474.416468][ T30] __schedule+0x17e8/0x4a20 [ 2474.421270][ T30] ? __pfx___schedule+0x10/0x10 [ 2474.444712][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2474.450734][ T30] ? __pfx_lock_release+0x10/0x10 [ 2474.463488][ T30] ? kick_pool+0x45c/0x620 [ 2474.467938][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2474.473152][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2474.503493][ T30] ? schedule+0x90/0x320 [ 2474.507781][ T30] schedule+0x14b/0x320 [ 2474.511949][ T30] schedule_preempt_disabled+0x13/0x30 [ 2474.538513][T21822] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2474.552321][ T30] __mutex_lock+0x6a4/0xd70 [ 2474.563506][ T30] ? __mutex_lock+0x527/0xd70 [ 2474.568229][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 2474.583486][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2474.588552][ T30] ? process_scheduled_works+0x945/0x1830 [ 2474.603710][ T30] switchdev_deferred_process_work+0xe/0x20 [ 2474.609661][ T30] process_scheduled_works+0xa2c/0x1830 [ 2474.633519][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 2474.639550][ T30] ? assign_work+0x364/0x3d0 [ 2474.649565][ T30] worker_thread+0x86d/0xd50 [ 2474.654214][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2474.660120][ T30] ? __kthread_parkme+0x169/0x1d0 [ 2474.665194][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2474.670316][ T30] kthread+0x2f0/0x390 [ 2474.674895][ T30] ? __pfx_worker_thread+0x10/0x10 [ 2474.680019][ T30] ? __pfx_kthread+0x10/0x10 [ 2474.684657][ T30] ret_from_fork+0x4b/0x80 [ 2474.689089][ T30] ? __pfx_kthread+0x10/0x10 [ 2474.693742][ T30] ret_from_fork_asm+0x1a/0x30 [ 2474.698536][ T30] [ 2474.701607][ T30] INFO: task syz-executor:18715 blocked for more than 142 seconds. [ 2474.710652][ T30] Not tainted 6.10.0-rc6-syzkaller-00215-g22f902dfc51e #0 [ 2474.742347][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2474.773843][ T30] task:syz-executor state:D stack:25536 pid:18715 tgid:18715 ppid:1 flags:0x00004006