last executing test programs: 8.142045121s ago: executing program 3 (id=342): fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3d173085e040f04cee8010203010902fe0101000000020904b5000ee84ffc0009050e03100006e109072501010604000725018015070009050500400005ff0509050900000207dee107250180970900090507100002020ca3072501030bf9ff09050010ff036002030905040c08000c0a0607250102050104090506"], 0x0) r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x20, 0x21, 0xd9, {0xd9, 0x5, "21bfc925ef2ee4be715784e90bef7b91905d9d2434ed30b9e5b4d76a25892171cae4d8268ff346684dcb6c70d8b72f97e238c4821e36f5c2897561f1c49f8271e949fd96f33ee1049b34ac32652c11484017eed54d28fa5768869de063d22e91d2342a59884d727dd9daa523ef91851f0bcb739988eaeccfbd9299057bc2747c12d6b6f561bb19a8d3725505eb986894a952f62084d3dd010937eaefeca0a2a66d95b50edcbff3aae623cd3042d9c94500bc5a92f15a3aa06ccce5a54a0788debf12eefb779e72249c347535f373bc35923478673132ce"}}, &(0x7f0000000840)=ANY=[@ANYBLOB="000336000000360399c1fc19b31e5db83987e2593b6c9a50c866b3fe586344c34a3a4db3306a137c25cd69679627a83af08d165cb5acb4045d4d40f76eed"], &(0x7f0000000200)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x33, 0x7f, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x77, 0x0, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xf, 0x6, 0xc584}, @wireless={0xb, 0x10, 0x1, 0x1c, 0x40, 0x6, 0x18, 0x1, 0x4}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x0, 0x0, 0x1, "d041ee46", "292dec89"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x0, 0x6, 0xc, 0x7, 0x8}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0x31, 0x8b, "c3fd0e427b88ef0a4d6de1112829a41bc6e4345e476aa1c253b75b88497098ba630c6ad4db4fcfab8d2c2bbae3397a8ee033dfda136fe358b90ecfb326dece529c2df97d1e2d1f8e50debc3532f4f573a1af056966c44be46d479354c4a72a081e194591db771a462b426af9877995ca9337f15c9d238bd64ac727c61fe59837127c71eea16acf5a6d9d9c"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0x4, 0x8, [0xff00]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000540)={0x40, 0xb, 0x2, "9260"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x30de}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x19, 0x2, 'Th'}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0x1}}) 7.625818555s ago: executing program 4 (id=345): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x40, 0xd, 0x1, "de"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000000)={0x20, 0x1, 0x8, {0x8, 0x23, "5b34410d0187"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000140)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x7, "54f42e3b"}, @global, @local=@item_012={0x2, 0x2, 0x4, "6a13"}, @global=@item_012={0x2, 0x1, 0x4, "e3ec"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x80, 0x1, {0x22, 0xc41}}}}, &(0x7f0000000780)={0x2c, &(0x7f0000000300)={0x40, 0x23, 0x5a, "9d420c77897a6f4b1831ee44d16ee679cf0fa2b6e0dea28ded7a986aca359e567d77b56c10b931f199e375553e60341e444a10327332a332aa2045b5e490d0592fcb9b39ab68fded58d1756a93dadf823f73a083040b93030f86"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000640)={0x20, 0x1, 0xe7, "1f7f32b8ba73763a2a0713254a2d768d1ecbb946013da8cb22164abce44c927a46783154a67e0a8796b91fe39ca85d5de2ef0ac8c63e806c2a5b83799b61f393a62af3d82f5c031dbabcea3a376c3875efb94b6258adcf02512e45e901f8e3a28340d8af1b67c4941c92fc9e0bbe8c190036a9a7a255541c977bb6bb403b05e055a5d654132848ee0c4f0b7352af7a5a948c59250ff7a1b02d615ecaac84f7b90882ab3bfd9ad97c12450e0d59a7f5154ec7bb0618026febb9d483987441579340f687bede89ba2d85832165c1f4eb9f0b1d0f37dbe15f24432bf8a6ed0a3dbe4c52f89e6608ba"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x52}}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000380)=""/34, 0x22}], 0x2}, 0x0) sendmsg$unix(r2, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000001a80)="1a5173ded7933dfcccc1705361bb1fd89f4305b6f793a9b7d1b34b2696410b8f5b90aa73a30315079d7577976b7628156c5dc317b60a53ea597c1227610aff2c04f44c66123f7e0de85382820c5482f4f9af71fb14429deab47f2238c14de0170e13d4a200f4809f271b795b4f3d2484326758f2fd00708bddf66319ff3a2fc9a3fe161ed28764c3a2762b53e9d8e2fff9681f875348e17a01c9b405336e918e82c314867c5f089a878ce4d27d958e04028117888d387b7772e8eb9bef207c5128e88a5bf0c553ca70e7008d259dd8dc319ffa83ec57f132b871ace75f0ea7ce4f64828413f99408e62272ed9a19110a98f2541e5c62ea", 0xf7}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x3c, 0x20, 0x200, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1aa}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8e9}, @FRA_SRC={0x8, 0x2, @broadcast}]}, 0x3c}}, 0x0) socket$inet6(0xa, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet(0x2, 0x800, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000180)="a000f3ff0bffd782178b14d6495747b64b1a4ec41cbe76ae86207238b7a8597edb9d7c6cf3da7918c68c6fe1ad108904f38c259e22c0dc0f433307ee3209911ac20a40fcb45bf84be4ef00f7b400236e992d47c692e612b2f43dd23b2f73c536a9945c1ddcad1d4ed573ff7f0000dcff09540f7b4a9995b4713b572029593f8057f75f3ec2848db02f07fe9a0525e526e397fad85b415164803f6424018991", 0x9f, 0x40089d0, 0x0, 0x0) 7.203803556s ago: executing program 2 (id=349): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20400) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000080)={0x2, 0x4, 0x6, 0x8, 0x2, 0x40}) 7.031067214s ago: executing program 2 (id=351): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x6, 0x6, {0x6, 0x23, "c9bfbabe"}}, &(0x7f0000000040)={0x0, 0x3, 0x4f, @string={0x4f, 0x3, "31909e8c0488a028377c09923e51e99b0dede106e348cfd2cda6883ab005bc3038ee409f2dff96229b7a2e863a11637742967995c2387d3acffabcd4bcc2a9aa937259bfbd7dfed71cc5aa65b4"}}, &(0x7f00000000c0)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x7, 0x1}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x8, 0x2, 0x8}, @ptm_cap={0x3}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x9, 0x0, "adc00207", "b83f40b3"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0xee, 0x1, 0x1, 0x3, 0x8}}}, &(0x7f0000000800)={0x84, &(0x7f0000000240)={0x0, 0x11, 0x1, "1b"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000340)={0x20, 0x0, 0x8, {0x0, 0x40, [0xff00]}}, &(0x7f0000000380)={0x40, 0x7, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xfc}, &(0x7f0000000480)={0x40, 0xb, 0x2, "369f"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000540)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "c4f2"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xf4}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x5}}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x3}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="0000000000008f83d42e730972498ec40d58db41c00f089d82cc661aa10987f4d32de1f63448e134269fe863ed775589e15132d86ba3b52c8c242da26894868455f8545c4978b0f8c80553212501ee9bab16104135b4a278560d8320990b1b6834f0955cc743789de513ae63452ef8c8847e17a14a3950e3d91880ff8f9532de202ff154837b602ea044d5e587481029094b2722da2bbfd97fd2cec223a386b6ee67db59cd06edc6b712f44ebd4aadb0d20565c2e6c99fc6c086e3785593ec14207ad7b017a55172a0efbc2eea4b30b82c4872"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f00000008c0)={0x20, 0xc, 0x9, "165f6d802bbbafe872"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 6.35342788s ago: executing program 3 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x6, 0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') socket$inet6(0xa, 0x4, 0x7f8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/104, 0x68}], 0x1, 0x0, 0x0) 6.181908081s ago: executing program 3 (id=354): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000000100008020000039"], 0x1c}}, 0x0) r1 = getpgrp(0x0) syz_pidfd_open(r1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESHEX, @ANYRES8=0x0], 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x0}) 4.902387352s ago: executing program 1 (id=357): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000000c0)={0x3, [], 0x5, "b9569d6cc1cea9"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x0, &(0x7f0000000380)}) (async, rerun: 32) open$dir(&(0x7f0000002340)='./file1\x00', 0xc0340, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) (async, rerun: 64) listen(r3, 0x0) (rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x85c}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) (async, rerun: 64) setsockopt$inet6_mreq(r5, 0x29, 0x14, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x7}}, 0x48080) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendto(r6, 0x0, 0x0, 0x4, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.615716072s ago: executing program 1 (id=358): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}], 0x18, 0xffffffff}}], 0x2, 0x0) 4.513299719s ago: executing program 1 (id=359): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x38}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r4], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) 4.461146265s ago: executing program 4 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x6, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}]}, 0x38}}, 0x0) (fail_nth: 11) 4.118635318s ago: executing program 0 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x48}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x4, 0x800, 0x101, {0x0, 0x2710}, {0x3, 0xc, 0xf8, 0xb, 0x1e, 0x80, "46eec369"}, 0x170, 0x2, {}, 0x9}) 4.095760142s ago: executing program 4 (id=362): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @random="bf7d132b5a64", @val, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x9, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r5, @ANYBLOB="000427bd7000fedbdf254400000008000300cf922f9fc815ba41190578a38c8e46ae567210dc052c7fd146a6f89e6084584e5ca93221b0796aafa46f715efbeb2c6cd7ecce7061406287bdbb21e2b0796d64ee44c5d30c40cd7979d224ad410e05e782eba36703011017a984e0", @ANYRES32=r7, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000011) fcntl$notify(r4, 0x402, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) 4.054264107s ago: executing program 0 (id=363): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket(0x10, 0x3, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7", 0xf) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d17, &(0x7f0000000980)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r7, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r7}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYBLOB="330300000000000000", @ANYRES32=0x0, @ANYBLOB], 0x94}, 0x1, 0xa60d000000000000}, 0x0) io_uring_setup(0xc40, &(0x7f0000000100)={0x0, 0x556c, 0x0, 0x2, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) 3.800488551s ago: executing program 4 (id=364): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x7}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x800, 0x5, 0x601, 0x80, r1, 0x81, '\x00', 0x0, r5, 0x0, 0x2, 0x0, 0xc, @void, @value, @void, @value}, 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES64], 0x1c}}, 0x0) unshare(0x400) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x24, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 3.717652864s ago: executing program 1 (id=365): r0 = syz_io_uring_setup(0x7667, &(0x7f0000000100)={0x0, 0x0, 0x13580}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) r2 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r2, 0x1) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x80) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000f8e6010104000000000000000002000000f1dc93db22d90e39c6fa0111180001801400018008000100409b4b9ddbff0e51144ce81d3787de7959dc3051a47d55dc9f6063ae154cb67a2628630e97057006b646570fb20314d4ee714dbc0b9a01dcc73c3eaca2109ecbcf521e1d9261cd3dd3734dc613b37dc133edd836e18858e1ea6fa0b261feb8571b9c6640b671c444f711fa1515197f53fe318ab42da6f3dcbf"], 0x2c}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f4742313081422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) r5 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='\"'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x30, r7, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x182}}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket(0x1d, 0x2, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x40000000}, &(0x7f0000000340), &(0x7f0000000300)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) 3.382987534s ago: executing program 1 (id=366): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r7, &(0x7f0000004a80)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0xe}, 0xffff}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0x18}}], 0x1, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r9, 0x400454dc, &(0x7f0000001700)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r10, 0x0) pread64(r8, &(0x7f0000000280)=""/164, 0xa4, 0x25) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "012674"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.335624694s ago: executing program 2 (id=367): r0 = io_uring_setup(0x3641, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x1}) unshare(0x28000600) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r3, r2, 0x0, 0x1) r4 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000007f00000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) fanotify_init(0x200, 0x0) dup(r0) close_range(r0, 0xffffffffffffffff, 0x0) 3.001181236s ago: executing program 3 (id=368): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x300}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x300, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.677379921s ago: executing program 3 (id=369): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e000000010000000000000014000000000000002900000034000000000000000000000050"], 0x98}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}], 0x18}, 0x29}], 0x2, 0x0) 2.43967854s ago: executing program 2 (id=370): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x2c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}}, 0x0) 2.379285629s ago: executing program 3 (id=371): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x0, "ea"}]}}, 0x0}, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000380)="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", 0xf00) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x80585414, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = gettid() prlimit64(0x0, 0xe, 0x0, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[]) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007d40)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)}, {0x0}], 0x2, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x78, 0x4048080}}, {{&(0x7f0000000a80)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x120, 0x8000}}, {{&(0x7f00000035c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000007ac0)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x78, 0x20000080}}, {{&(0x7f0000007b40)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000007c80)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98, 0x8800}}], 0x4, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 2.115223173s ago: executing program 2 (id=372): syz_open_dev$evdev(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000440), 0x4) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r7, 0x3, r4, 0x5}) 1.867705589s ago: executing program 4 (id=373): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x0, 0x290}}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) (async, rerun: 64) read(r0, 0x0, 0x0) 1.509225405s ago: executing program 4 (id=374): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)={0x1c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) io_uring_setup(0x2881, &(0x7f0000000540)={0x0, 0x1fc3, 0x2, 0x2, 0x12d}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000140)={0x1, &(0x7f00000011c0)=[{0x6}]}) ioctl$sock_ifreq(r3, 0x89b1, &(0x7f0000000040)={'bond0\x00', @ifru_addrs=@l2tp={0x2, 0x0, @private}}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x80, 0x7}) 1.079282208s ago: executing program 2 (id=375): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0xe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@private=0x400000, 0x4, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0xe8) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = socket$inet6(0xa, 0x6, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0xffd}, {0x6, 0x0, 0x0, 0xfffffff9}]}, 0x10) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="ef8651c7", @ANYRES16=r6, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002001100000008000a000000000008001800e000000208001900ffffffff"], 0x44}}, 0x0) socketpair(0x5, 0x1, 0x0, &(0x7f00000002c0)) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f00000000c0)={0x1, 0x6, 0x2, 0xf775, "16200581919f00002000001800"}) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000001180)=ANY=[@ANYRESHEX=r7], &(0x7f0000001580)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x340, 0x3, 0xff, 0x1, 0x40, 0xfb}, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x4, [{0x43, &(0x7f00000012c0)=ANY=[]}, {0xca, &(0x7f0000000380)=ANY=[]}, {0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="02034788a0cad33dcb41210b1e04ec1bdd441fbf7d1200964646c2aa8315e2914ac105a2a9ebb49ba5692cfb138e8bd565b3d6fc6103fa053dbe55b571431ddf51c76f43b2a682145e202a10848b53695ae5c4685a0b33b4fd677c7bb03bf66d6a79ce99a8ede2f9357395fd2c67553e6c197deb97099a0da9946bdc80e07dc31c69119da24ae6d7f55d2f8c0e68d68b0f98b3639870bf85a5da9170c311e3a6e0eb33c388855eff122440a9f4f2577f02"]}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x40e}}]}) r9 = socket$inet6_sctp(0xa, 0xdfcfbdaa5ada3e6a, 0x84) sendmmsg$inet6(r9, &(0x7f0000000140)=[{{&(0x7f0000000380)={0xa, 0x4, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)}}], 0x1, 0x200040d1) sendto$inet6(r9, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 835.698865ms ago: executing program 0 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x8000000000000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f00000010c0)=ANY=[], 0x1a3) r5 = dup(r4) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4, @ANYRES8, @ANYRES8=r4, @ANYRES16, @ANYBLOB="e98a452a5f69a6e21b2dce63155f0b734390e09834b890e39f043ca9604dccb30599756a"], 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300000000000000000000c9ffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551267406c7f306003d8a0f4bd000000000000000000000000000400", [0x400, 0x2]}}) 361.014337ms ago: executing program 0 (id=377): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x10004, 0xc, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000240)) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, 0x0, 0x0) 213.72392ms ago: executing program 0 (id=378): r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) r4 = fcntl$dupfd(r2, 0x0, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x40000010}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r5, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) 43.610429ms ago: executing program 1 (id=379): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086a05c500000008000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = msgget$private(0x0, 0x80) msgrcv(r4, &(0x7f00000004c0)={0x0, ""/186}, 0xc2, 0x1, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8, @ANYBLOB="000000000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="3c801a01000000f3050012"], 0x2c}}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x5b43, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1ea8, &(0x7f0000000300), &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r11, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x400}, 0x1}) (async) io_uring_enter(r1, 0x3a19, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\v'], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=380): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000047c000004000000140001800800030000000018080002"], 0x2c}}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x72) r6 = syz_usb_connect$uac1(0x0, 0xdf, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x5, 0x30, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x18}, [@mixer_unit={0x8, 0x24, 0x4, 0x3, 0x5, "288246"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0xfffa, 0x6, "dc1c0ffc6789"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x4, 0x37, 0x38, "ce9173"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xff, 0x3}, @as_header={0x7, 0x24, 0x1, 0x8e, 0x6, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x2, 0x8a, 0x3, "c889db627e6734"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x6, 0x0, "2c4aba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0xa8, 0xdb, {0x7, 0x25, 0x1, 0x2, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xd, 0x9, 0x1}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x5, 0x4, 0x9, "b6dc900f"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x2, 0xe2, "12559aaa808b8a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0xf9, 0x7ff}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0xc4, 0x4, 0x9, 0x20, 0x7}, 0x61, &(0x7f0000000180)={0x5, 0xf, 0x61, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "09954e2763c6b9a907e63b3ce837f43c"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x5, 0xaf}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x8, 0xf00, 0x3, [0xffffc0, 0xdf80, 0x3f00, 0x0, 0x30, 0xff000f]}, @ssp_cap={0x14, 0x10, 0xa, 0xa3, 0x2, 0x5a7, 0xf, 0x9, [0xff3f30, 0xc0]}]}, 0x1, [{0xe8, &(0x7f0000000500)=@string={0xe8, 0x3, "2e2195d6bfb1a357e1ca33f86eff20bc97b387a665eca2f69c37c50906b73d7bfeec53f5ea01fca427830a67c32b14069f07630998e9f055fad04eef77e55b0e16eea8d60cf72d61335aa3dc7a28af07eb2f984e1c2010f718503bdeeb9cf8aa5599bb5d4ba273f248412e5caffe5af10d1c1835136289e08942b574fc0f1a7fdffa00444c9d65d7ed3a40d2595074a2a366453bfcc19ed83b2931e0e2480bee46eafba79ea62d92d990da1862aefe897ce47a362d9db1094fe7eba55243e4e3549f2716fc62d0f80e6853edf65daa2177f62e5891a8264f7e247b4faffa343df31fef70e9ba"}}]}) syz_usb_control_io$uac1(r6, &(0x7f00000006c0)={0x14, &(0x7f0000000600)={0x20, 0x6, 0x67, {0x67, 0x30, "771a6ad2cdce78a4f30abe3e83f5fb3d43182103bbdedf7cff1aad1f3354661e847e061dbc5ed69491294c4bee74c1447ce6211688fc0b490d50c9a02e0d5eef13c6ba004a5a54c40437441700455d86b0b42e1662bca6449495de91c1674e7dc43857c8f7"}}, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x0, 0xf, 0xf5, "388802e78088859ccb295857119c4f515ed47368e36a415b042ac79f764ad9acc274c3259bf86c69f3421650fb00902a7486294a4b254962a6ee7633884215fa1c2f6ab41ffb1cf1447956c05e69fba4045b116ad43fc6bb29e04dd2bfc9a91c59e84b559900e4d623b779a10696d7ee9a6cfbc13608dad7c5dfa97c11e698d94bc52d8c138ab39ab1a42022b67f746f50e9a12c732fdffde82be3a604a5400999b658a11da710911f907164a3df07e528dfe4113df09a795e0e146b97fb4d90314b365d4989ed5b5c62e1ecb0b7f83a6aa3268851d2643fb946bf28006a16eb788bdeaa03a23bf9bd76bd34ce9f37a531e78bc893"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xe7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000032c0)=ANY=[@ANYBLOB="65c83ff26a98d5887b6762183c62502081010000005c86ab7784f9440e6ac85b2c0144d1bdb01efc925b3297a0b261717747aa911632df48b03e474a09c1d821022afb827764e5f5152a8b47550cac2d9c47b4ba3bd7804351a77c62b2b3e2e415b822dfa11bfbef0f25c8f108fab503758feaf780a32e14c9a79926fd6ef1644db2eff9be83d9f7a3ab35ab2cc61826c1ed79ed82f922a1a6b3c70ea4b1134c7897493e627e38bcff7c1f7d02f7caf96c7c590380c620ae15cb5ebcd658a08166bf0b0c429496c90e8cbf224e4a2a487e00f1c691b51d0df36b4edbf13fac77f3adaeece183733a7140bdfb18997d7cf23af1ef"], &(0x7f00000008c0)={0x20, 0x82, 0x3, "3188cf"}, &(0x7f0000000900)={0x20, 0x83, 0x2, "aeea"}, &(0x7f0000000940)={0x20, 0x84, 0x2, "d37f"}, &(0x7f0000000980)={0x20, 0x85, 0x3, "f7238f"}}) r7 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0xdb59, 0x0, 0x0, 0x340, 0x0, r5}, &(0x7f0000000880)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000100)=0x40) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000000)) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000002300)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000002340)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000002d80)={@remote, @rand_addr, 0x0}, &(0x7f0000002dc0)=0xc) r13 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000040)={0x1d, r14, 0x1}, 0x18) sendmmsg$inet(r5, &(0x7f0000003140)=[{{&(0x7f0000000a80)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="11d20b9e0b49960d2c731801e45ac02f1acbb7ef07548feafbc793bd67fecfdb50041f53d314a2285ee71129beb084fcc0f5c9ed7973db2aeee382c2030591167f60a0eb667f4133d4997f5e21647b93a038e234298927415c1b79335daf5d622c75881816cacc18a68776853c231b87a4d42f45c6e7f18fca6a54ce8f7c9d74307b06d405f5f8df792786db5a24188cf7790f09f536c961a0ffdf7f12de797913ae1b37bfde07be1df9dd90f406ec5b", 0xb0}, {&(0x7f0000000b80)="d6501baf67982a14967d6373c3c03a673fd998818e1c3c9dfd7fb170502ed486a772c60e23d5e579120ed9566b6ee2b288c4230f9376168cafed02ea9604d51ef10cd20c9b014945141df1a52596b583fa7df704f43fd7219e3284dc5d4c60246a737fb17a776dce1c2cacfa367af3777a64ca792be2683187007d4ecbdbe02e94dafc5eed4ea84ab81835e40d3ed5efe61de327fb250ad5c73c59c5ef7f7b05", 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000c80)="55a83e6e363a5c49553b1c75dec04240f29cead75163f903642284118b0220815e3b64e6a02d6d3dae7a0af474041a7e040672af9f53f3a5eb57bda6216b0f59246f073dca1d323783a9c04ed8e709b190ff0f83431d581a934416a3f044afb7733b9f09718457c659d2218779f8f1858671f85e50237bb875d2e30020d361807c57443ed970bb44c0fe33507112c610df3788cc0e250ba687e4", 0x9a}, {&(0x7f0000000d40)="a251838c8c7e8c1ddda248fced5586f5756a1be0877058b5d443c83e52dbdc06e3a22990180d38585c1ef09ba662970f3a6dd9c7795c355f35a46e21bdf836d9413acc1ddba99f439d21cd7d7420963a0bc2547bef137aa727af00cae403919a7880f814014c8809d7c28b1a10edde8616898b9c3a03ff9e510513395c8fab5fd987d6fe599bbab2a26819573836273aeaea32aa1debe9e26023362a27ede61e63e89d40070b03c51fb4939052d6fed9f6058eb846d382d06a55146bac32e790340382e4eeae6de66f93e033aa0ee3bc96cc253daf5eba901658860c20b912164362465415ed96d3819f818c", 0xec}, {&(0x7f0000000e40)="e09afbe75cd67b5ccbd1e9ca4eb535fdb21111a690f116024521d327dd47c3780d099c2e1480936be896a7431f4d0904ee8da07eb15debe31c750fab0818eb5d6b2220402710ca7e888630a4970d6c70bbe420e7ebd553b3a1ce1857f7e5e107c95057c77c0ade9336487240bf8a472c313b55086899e1b89f3edd33fa48db0886d950a297468628e65537e6f68e8f9f58fe8357a7c9e6fd3518447d8d9d2709d74241b85dfed7e9858e8296ad31359514889235ebc352d0f62136131d480b15e1436ebe647c60d1f3459aba38d8cac1144c915a37f7b50abd2db4", 0xdb}, {&(0x7f0000000f40)="2210a8d275f51fcfc500d0df73f702b8bb99e5dd172a60a296fee8fd53060117142e1730c1674cc6c48de9c6268bd84a21e947eff4205764134679fd086c730f040de4bbc2a2a5a075591f9e3c676bf4ebb3bdbdc10f6ab38904ef405d011541d482fddf1326efaabc3b07972d857eeb180c31cca39c986b4fa4ee43cbf0a3cb5dde8281f5001e74", 0x88}, {&(0x7f0000001000)="ac749f3c6835cdaa1bd3e453fa97fb70d8906f2d14103ca29b563690d9f1968de3071b86d624e1eb2902e0bba57ede840445d28c58259fdac6d74ad103fe4533da87663b85d4004a110f5e94069e1b86a75b000bcdc76fa1d6dc0e25fe3dfaf7a62100f821d9a58d623c82bfb0046aa8b5d1b4ca25b650d79ed72d943bf6545bc341ee07df3382ea30a9734ebb8a78a238f8ca2f39dff584d010c2484c8b785f0c347e2eeffd329100cd016e58ca8aac9e5ab6ddaf48fadf4d7eac672ae7e4b1cf127419a5f69442e83ea790540d5bc8b27f701179d7a74a", 0xd8}, {&(0x7f0000001100)="bfc86e191b48c76a21cf54eac66025673bdd4090bca718baff45c7f9a62cb4007214c71a75d80e19a6d8c910ef942785f23477e783acd351e7ffe043d7464ae764e7657f92171bb0bc3719feca431a08947bbd0d0b9d8f0f33713490040b6a29f185230765b5a9dde0f9c9e083fbaec32024b69f134b317e4c1c8d9d50a2d88b697399d463f9e71b8b52faf9aaf6df45a706b7dd38d5d91c48d329607ede05d3c845d8eac0e09cc8435ac50f4e5af57ef67b392b6da041cf8b2ee80bc42be9067225a40f0625cfa5fc64cef47d1605fb859a1d8299952051c63904df76ffbe317ecf2abdd04658928fa7705d4771a8b6a31d35a411657a61fc3cb69f67b7dd5e775654de3b3baa8129cd13bd8462b443a055c756176e4fc88135fd6b1a88c7712e006a2a56e333f005202f0fe99a4c0b64865a41187d458128abe6adccb236cc25678e9685c0133f45d3b39d009856b49beeeb55c0f01831f190ba17dede690ab251b7c5a439220dfb4c7d655ca8a702954029114b30a54ca93dd84c6278fbcc37c2868f4c87eb6de682ea37b924872c85016f0aadf46815309c8f9d95012d6f1e989c44c13ff05ff36db5158a81bfc17847245def06b3292068f9a0d525a5c782f5c06c05f4077c545f2f331cd38a7d0c10402bb76225da73c4d46fcb5a252af9c3941428bb961872a0de9242b2817ee28339d373a1fb23b846f847fb1e9e3cf1997190685253824030bea0cf102b2c1901cff6163406dabb09c2978d9424fc902ccd26634bed7db87e678f6be88a36caf88b17c8b19a10a04e1b0f5c6746b3354b6a0b112af25e271f3f29950b59c72132c35649043024b81d7bfd27e297157c0908069d875a3a00457a81770346a5e8f3e1746cbdf42253c245249210a81a165d5b9fea594a4c25724ec7e089fdee01aea90a3b20d9d36dc6c5c27d030ceb13eb810122c8a4244d499b5ae0af09c1eadba6a8e2514f24d127fdba20f4abb0479c4e891299e49323ea497d9b83e9c6ec3995d4b837725499e2fd7fd5f55ff4f1a6e4a4249e7eb12d6ebd7e66aaa0cc30b0a1cce902d7dfec9c015c7147864ac3ba6efab30f693e7d7e5546a2f19d95b82bc4de31a922dfb0283b83ccb8179d52be11d51be6d9033f89fd40ae9290aa96adae67bc839db4b6bd5dde8f2a1a0806f4b55b5d214429b810ab6380041ee9d06af07c718c8cee9bdebea7e17369d11e7510ff92f48659f1cbda005fdb26376b44601f75ec50db6ffeb195093f7574a6531d38579faef94383d12fbedf1b0ca0709f741d2fdb72f70c201a7a1756235690452fca4e5f1fa62064c55ad3b8a7daff4041f13bfa96b5086179384ababc12a2a14be2045e4a714e8c5a62c8f640f171ad9ab9b8e58dd1fb36abf59750208872c8e15ca3a458d68419b6a45d22e4f560b091988db4ae4ebd0b5280941abe65cdf5620cda62ca4da1b18bde3008ff91e8185e0067398aa7771e2b6c48b8208b7897cad23826763fe05c5857573623ad93e9c83841c14dc713f9c99bd3bd896d2ac2d722539b0f5495509f9111a8fc8c40c729fd5944fc6fb058a6821f41108342fb58cfc50ecc1e5a7f8eb80c9f83d3ed6b273399cf4163b463689584d7b664386bc36a636a0859d78e1d7e93763f6c316ae6e9f1b04e475f922e97059351580b7cb09e0f8d02923735b625d4de77561ae78f34fb73183d211e8ba8f2e935b1e206dec84b75fbdb3089d97d7eefa2b0f4160d09d726b20cb7721f6a0ae20d9d4c1098f303050b001fc21735f38652cf327c03023677121f9b4697bab04835d07662d25a3cb101f8e917ec028a55049a0c76d7b35bff33f14b5cd27f89e0509be0712bf7e4fa5c75f0f5baaf550ea559204d4f01458cc0593d60324db64c27c992370d67b6f3eebb859260743b9fed3a0ef7acdafa3387ab56f2c1e7175b6cb7fa3a7a386697c27bc4f7fa981fb5f93b47202c02f1a4bff55add4c46cfaaf142e4c3870e0d9c0ecb60f511fa252f6e6412a02846081721c6b7b51d47989c7c33228dc8072d1a685ff3c21332b5ef63bc4887ed3c2afd29e151df16298fa5fced67197983ba5565e417217e66ce29547911017ccb1827e4fa8cc59218f2f396f5cd2c6eadb7d16a35dee631fe8617837e3cc02dc7ce76fd18213a3c2f8c17dce31461475261551d338461a16b7258233511b8530d55d2670959635036bc4768a73b5759dc12a570827ea5be9a76c9d1c1497a2be4dc72cc57ac9cea51ff7696172102a9f3a69e624473f3048f709b41877a24cf9a1c6541acc7d813f48efa05bb2f7103863cc580295de1d0f1f017ed54cf583ae271f13f3a99f0634351404072d312f3642968e49f51b235a37cf358842badfbc8cf5a6422c52991e4b8ae9d9926eac37be1176cb61657462ef09428bcfa4b8a214c2a8a19b89a443274c572a6b8a157b24bf71c8360df9723c91378e9598e4c1252fcb81a477fb6023e858d8de4d46cdf352180bb88aa44268f315fc75fb415605d0619c9c80c7d3791d76f8efaed5f3c55d109344dd760110d046df6caa49542c579933f510f099355a709053bf0809f8250ae979332e0ce255ef75cbe49603003c5b227f59e0fc97d83671ed1e16e2ee9e872eb1ac3d2ded75246c9942504e06ab8bdfe8a0baeb5d8a56bb8e94c7f0b4c1e5d2bc3b3da9d4a9395113106255f866fb7cb852f6159d240b2cec6fa4f1edcce662f2f539fb951f69960bf231338f1e9c221ff8400ebefa3bceabb3915b2bbbe16e9b5259dcd84a5e8ac90d2c4bdae69c3c2a9d73e5e8a5c4b22f77584f1b90ea54f10b33264e76d01bac7e4a449570aed7661ac2566cdba555dace09d59af61c8180f597adc31ace9a02e0c1b74f756e73771a6f1dcc20c65825427bc437bc6660c8bdb3f3226f593b816e82a8a3a7eb35b136401efb60af1d410432750972a5eaa61cf76d7bda9211a07b8bb98c6674a3a5d254bd3c2bb54c4892cf618016dfb900e269c95e00001a4dffea83da5e600932657f25ef6b4355b2adb77653688eb425f2b76210dfbdb7d703d59d4deb327b68e13e997e4b33ad1688ae23805f6f2367143cad723a401fc49f1de2c90a82512cc1aa59f30e80ebb626916b9d6542e351503137087312b360e8ad43117fd6adec1c81a2cc78a61181d945901822f9221a379c92f7578b11b7b3157f6e2f8493f3f74f684a427dfd4ccba49cdb13ba93f299650a259253e810aa8a96cb413838d42a13e328ace450f8bf188fd8c630dfe8fb7d5e271eac960cddf49086e05df1ea6cf0db3f8999b4c5a6d9a75825701133aab88ca032ef44a635c567a4c4f44a52a17d2b55c4a3705ef7397f1ba4722d3e5a14cdb052283b3789f8c541e1a36c39d8b5e2e6d508ffb913e3bfd0eaf1b4e6b8668006263ab00ffc01e3ddfc9c73d5168bfccc81700176df1dddc248c4bbae96fe20ff6db10f81bc9bbe5fdb71ee7d4810c475b8bc2d2deb720c81503943fd69ff97df176b1a2e1664981719452b940c3b8eb16f2ea15838d96214f74282d919c6564bf5d9b931e42f4e07139fb185005d39b6f27477715cb5034c449287893de2d477a3e889ff7e0f33bb7735da8c329823f451610faba205b642acafc38b3e06ec2d8737ad6e250ae37665025b6d5cd15603fbd0dc0d552d002171454f0d1d933f521f9546330feb6f27f6fce62c060125585598ba12a00b605db156854fea5f4046246eb65120ae88e47a17f9479d67d0ee76aa4d8db34e2081a8427c19eddbe84240108a5e4bbc8767cc20a2fb36c761e0a5438bb432710b5683d73280dc8407c76e93208cf288aa4436fc7a8e03543a4cb4aa0992512e1bc53f8482c0e7117ed485c2fa1d187f4c5ae1696bb96c9feef3127d1db7e58cc7f095dd6b1e5b7e4c6e6f1705b53dd6274d5772bb7417b344a17f92f041e017bf9d6636f6c5c1adcf74071249069f4f7e1dde95cf492387d5e2f88f9ea090e99ca8fe5a972acd6990971714d1f848f52726295a8be00ce0c354c398b986b3c513167f971c9309ffc8ad8f0d889f12d48b3fa60539364c85ed81d00ce201d7acb682e29aff7f910026c7bc4da964ad36d6a195fa3abf53cd87ed3a75577569b0774f1559f0e4b4eb9eff9b0ca72b7243d510dfaa3ce91ac91b61ec04d62127e304acd7dd544da3b37794dff9e9b179aa15d05ade39e40e07d9dc7adef217c661944eb6642ac492c1048c74ffe1938b266ffd789bce6b86c9f843dd758c1e00d840375ca640241ffc96152dc27d09b9c96ac48d19a281aa483addee708dd4d30b9860020321527238b2a2627f24acdd9e778b0f54b44ee696237820344024789bc0de4722932948cb66fd4e12bda51528f0b5ee19ee93665c1affc5c86d0ad1bb1a1e78ac33a5b6632cc93e8cdaadb5f1cc26b6211c1ce043b6cb22068ee5442610dfc22d8e672920fd816a5a0c50011b582dc8bd172207b5048838bbe95b6a53898351597578c63ffb1f24e7e38c705d26ec5170c75db61aef8ac0770a0c48727546562ea74a8c5a2b2b072237e61c971b0ba9be095a5ed91bdd3d9a0c99ccda07d726e01e14434e4dfe3b212012c64f561e66afabb83c63bf7b26b27da4e1bba8184fe4b5bc376f1c486467d3c7ca98301c57ff9186fb81dd4b58b976bf8ac52fee9bcf9a7f05b20f99710efd706d7d4fcf5c7c8134a6ac85775c6c0175caf963a71f82159b50556aa94b1a515893c4f6b237b2dc0fc927be797a6bcaa331ed29968359383a11b2ca8a06cb7d9ae0f8f8619134104b68fb14ac5c2ecebac5658f325dbcf6ddcabfb7bded7b0d1e24c233ef759176b1feff03f611090a9d39adb446885fe7e48ba85c1bad0aa432508189a2dded4982599994ceb7de6e97418363a6736e13d14d8ec87e9859062cd0d3b21b4b8f54f3d069dbfb37e9341f82c329fd96993daa5a8590c81ad70eb9c0a38b9dc1519f71e1cb3b887392a699d34d9e7b78579460a3cb634a77ddedfff8b6cc77b27cddc08542d0f84d3a990bbadf4507e9bc4d454a6326bd45427af06990958abcc5b3a876ef8e7a786326c3e201bc063387412405bb28fa673e0f9cac2af6dc42ddfdac6558a9482ed7285220e40c435887d6fbfc5f3cec4be775847caca1b6a025dae2724c90a90a94a050a679590a74c28692842bad771b80cb9c493cf08e8701fbdd63ee37d7e22d9f85a9e5908b0208cabf7d65ec5208deae1fc63a53a26076f35e30a69811e40a1575ed6aaff25f01830ff57652d35b828c24991daa29d78f8b04150459fa75273e5a42f1a38448d9f68e24ddeb46453449452adaf0f2babdcb355f6f0dc9740432790d5a26dcf746ca55a1ecea5060671f16f70a29effc4fb55a7b935623c181ea36726e0d129669c75a1aa07de82a7520a592c5eaeec5f306ac1e5630544741dc37da7167bc6adae9f6f6c4ddb9ab9885ed03382012b5df4f7d97b5365fbce4d2e148444336c0f88a250b71910dbff2aef2ea60f05442fa0ec27dd9aa9595c2a6f0499c8b3d864aa4d09481e601a808051dcdf648b586f6073d3f0992f9e32cf69685ace40010acad4c32de9782f24386334aa0a7d83dee1883e73bdf66bdd371e00cefc0d6fb98a105110b30aeed61a4f66ee5cc41367f5cfc0b0a22bef21a3d419a184007d6ce6d45b3dcb237658235531c86e11915bf9bf57d38c40c4f5fd182e2ef218952a29246ddbb7aaad4183682fa870d04ba40d913ef46bb923edf0e509a6aa0ad5e0010f2d94411ee7cd7aecb0a248958a1fb6d97b3f69ba5d15e9", 0x1000}, {&(0x7f0000002100)="cc37188039d6121bf2e5b3b55fbacdb560f391dfa4cdbc2224d514c4232593a91b3a87a4a4fe348fb0fae3d9ae4dba814cc05b39eb90f77ec79de4848fe59d22f68ea00803f59359486efd800b31080df27480339e32bc012fc5e74cecbf72f89fc7c4cc82a0cf868040a37e2c9a2c17c8926ee0e4902a4dc16c65a2a95a72746e3f05014da04e324182b5e2", 0x8c}], 0x7, &(0x7f0000002380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @multicast1}}}, @ip_retopts={{0xf0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0x3e, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x42}, 0x101}, {@local, 0x4}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x8}, {@remote, 0x7}, {@local, 0x1}]}, @timestamp={0x44, 0x2c, 0x37, 0x0, 0xa, [0x3f, 0x7, 0x10001, 0x0, 0xb7ab, 0x5, 0x7, 0x6, 0x40, 0x9]}, @timestamp_addr={0x44, 0x24, 0x96, 0x1, 0x5, [{@loopback, 0xdc32}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb0d5}, {@multicast1, 0xfffff45f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}, @cipso={0x86, 0x43, 0x3, [{0x6, 0x12, "eeeafcb7ea6e7db38529fe0853fd13a5"}, {0x0, 0x3, "ce"}, {0x6, 0xc, "15b11ee3e14bac069fff"}, {0x1, 0x6, "95bd8ccf"}, {0x0, 0xf, "dafbe4c6b469a1ec7f2b97a941"}, {0x5, 0x7, "e81ce9df6b"}]}, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x14, 0xc3, 0x3, 0x0, [{@private=0xa010100, 0xffff3c53}, {@remote, 0x1ac7}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @multicast2}}}, @ip_retopts={{0x88, 0x0, 0x7, {[@noop, @cipso={0x86, 0x15, 0x3, [{0x0, 0x3, 'f'}, {0x7, 0xc, "eacc1dce55bc3e67c26b"}]}, @lsrr={0x83, 0x7, 0xcc, [@multicast1]}, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x5, [{@multicast2, 0x40}, {@local, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x5}, {@loopback, 0x7}]}, @rr={0x7, 0x2b, 0x94, [@private=0xa010101, @broadcast, @loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @remote, @local, @multicast2]}, @end, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @multicast2}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x82, 0x6, "d2021e35"}, @noop]}}}], 0x220}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)="f5648b9de6419501d3a981796815f8b636c804e3a38187c3ea8b42f29b12e3f8346cac08f8934852071e75f884c172c75b076a79ac12d717de97b87587d95602081e346482626a7a181dc5e81af7eeba7843352b75af292d0468157060dcb930d0d1d2b20215e1569e1d1bc27a10582778afe6872cccdbfeed2e3876782d533bf46074e97ad2c2472dc9768ce04ff397d32d6ce6f1aa6e0904", 0x99}, {&(0x7f0000002680)="a11509fa3f52b46c02a7bf6c8d119113df9a48d5ab1ff0d9a7754aadb442bf31dc5540b44139fc9b681f75aaac", 0x2d}], 0x2, &(0x7f0000002700)}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002740)="3f2f7383251221a770e0f1ba6ce765", 0xf}, {&(0x7f0000002780)="bfd931df91d5cd10b1e225e55aad173ca3780aa622303671d24308ed6c3571ccaf8baad4c74a35392c5a13079f94635c3985fd91b7073f3f053726bacb5691", 0x3f}, {&(0x7f00000027c0)="473c2d8c77c21e32bc258de5509392d5ff306ef0fde0ab1f7936d115dfd463ab43fa24f73922fa357e22ab682acd64c3d13feea7e1b83f5fe20786e4036e6cb6cc242d9790f56ae8b673bdbdff8a6e31f378336f48e86733c9b755f9765c6660b63f2795b31943553f967ec972b3228dec5b0d2959a650bf428239696cd2f5202bddd3bc5e3bf9be", 0x88}], 0x3, &(0x7f00000028c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x32}}], 0x80}}, {{&(0x7f0000002940)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000002980)="996edc08115bb2053eca8970be3b5d7109bc1affb2fd33d312d4e2865ff1d624af17a9a4efae", 0x26}, {&(0x7f00000029c0)="7f8e7d4e0e2495027153ef988fcaeb5fabd836", 0x13}, {&(0x7f0000002a00)="4d4f85a5e9345748df436446deaa1b5341a3fd950fb5b7a08ac04a3be489207c7094e40d87e0d0d64c8aa766ca787d4040b2ea55ce74863606110ef9c4a5e9702049cd381519d08ac7a7eff479b7af6f892b084de1eadf6ac6f71db684fa96a867cdaad9fa25bec073236e3e7894d7df0b3bf2995748b4b32ef5168c070578d212749e3f7abac66f94e2", 0x8a}, {&(0x7f0000002ac0)="3046e82cbf17b2eeb4308830bb8db989ec4b16d707557be85519b7a87cb8adb77d3459c63dbb4b6f23bc133c0e1769d74a358a26766c744d7f1d06a2fd994160d42e5960c7af77d64864101e07", 0x4d}, {&(0x7f0000002b40)="fecfcd7051a305efabd2ee0d7a871f903aa2b1070105585de628aa8b5532f439290db87a324bdf3db8a7cef95fe3d0eb579cce6a3e09f28c4ea739889e1d95266f7fe964f386227a6a63cfdd2e3955e206b957ed43d7ecfaf31542a2fb16513b92c3b2796d0dfe5c6e09ea933f970c8b7bac28af2580f4f2e170626aa62f3630a7442732a85dc4726ed030fe59cc1ce7f2eb948913ec2310cc3a9e95d7ceb1389d8c1002057071bb02b0df8092b8e8ccf6ac598b52d48146009fc9dd01984f427ac7d6de96a7cd25ac722f129fed8131bc5c94fe3e3b1e323e4f8f130fdc6eedde13e8730992fbe1eeec2ec75f9c04c4e4748f317635", 0xf6}, {&(0x7f0000002c40)="e88ad9981ec51e34918c94598693d68dc61d87f53934b7f0135c129312806ec0cc21d9df321826b18a6640ff3534b4fd39bdef32e450604dc2a3d4fbe8f7cfd774b3beccb6b398f48ac268d91b1204e801ac7753288d5462ccf1f2210d85d5789d36e1b110bfb5d4dddd0705ec7cdba9e30255228a93a049b658b4eac0fc96ec38f4493e18cd00", 0x87}], 0x6, &(0x7f0000002e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @local, @multicast1}}}], 0x20}}, {{&(0x7f0000002e40)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000003080)=[{&(0x7f0000002e80)="ed5a3fe64239b6f08f8c7c8db566cda2598ae99a168b6770cdf51206f2ea5101e6e488b8051738263056717cc765c461a8183643f1ffc2b2824d5403c4bd1e2366a2ea4396a11b23ddeba3093cb78604cfb5b068bcf67d6c5bb66cf6641dbd4bac0c74470616f7d915afc2210306ea63670ffbd58878749d918dea955a0a50a4fb4ba557711175cb079bbb9b96d8e81940703577ecdd17b1580d1787c64deb8a1751f25a68f820b35ddd1e8b232f3d439626fd30a766abb069d1a0fa5786e5df0c5d4a", 0xc3}, {&(0x7f0000002240)="d064", 0x2}, {&(0x7f0000002fc0)="17c4bcae01318b00cafdb43dba32542c0f03259cb77039812758b8cf83b2edc264137d61355f795052b9d6ddf9ec89299e78b860605c9f00591b67192346823e8f792bed69563ad0ebb7adef2cccf6879b17f83add15f3234d7cca0a78f50da00326b94b191cf95eab56f788351592f34d3d64675ceed84dcc28027e8f9499813486f18fd5bf2493", 0x88}], 0x3, &(0x7f00000030c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @private=0xa010101, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x48, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x8, 0xd5, 0x0, 0xf, [0x4]}, @lsrr={0x83, 0x1b, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback, @remote, @broadcast, @multicast1]}, @ra={0x94, 0x4}, @end, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x2, [{@remote, 0x5}]}]}}}], 0x80}}], 0x6, 0x20000005) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000040a02030000000000000000466700080800000002"], 0x24}, 0x1, 0x0, 0x0, 0x24004005}, 0x44000) kernel console output (not intermixed with test programs): 72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 136.662373][ T6180] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.754367][ T6180] lowmem_reserve[]: 0 2467 2468 0 0 [ 136.803352][ T6180] Node 0 DMA32 free:1260872kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:38712kB inactive_anon:0kB active_file:9216kB inactive_file:152048kB unevictable:1536kB writepending:336kB present:3129332kB managed:2554552kB mlocked:0kB bounce:0kB free_pcp:5840kB local_pcp:340kB free_cma:0kB [ 136.833611][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.863285][ T6180] lowmem_reserve[]: 0 0 0 0 0 [ 136.903527][ T1124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.906034][ T6180] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 136.985810][ T6180] lowmem_reserve[]: 0 0 0 0 0 [ 136.993917][ T6180] Node 1 Normal free:3921000kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.136409][ T6180] lowmem_reserve[]: 0 0 0 0 0 [ 137.154021][ T1124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.174254][ T6180] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.219647][ T6180] Node 0 DMA32: 2*4kB (UE) 13*8kB (UE) 29*16kB (UME) 30*32kB (UME) 8*64kB (UE) 34*128kB (UME) 23*256kB (UM) 19*512kB (UME) 8*1024kB (UM) 4*2048kB (UME) 302*4096kB (UM) = 1275392kB [ 137.268380][ T6180] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 137.305178][ T1124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.306185][ T6180] Node 1 [ 137.336298][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.360165][ T6180] Normal: 178*4kB (UME) 52*8kB (UME) 32*16kB (UME) 192*32kB (UME) 90*64kB (UE) 31*128kB (UE) 16*256kB (UME) 8*512kB (UME) 4*1024kB (UE) 4*2048kB (UE) 948*4096kB (ME) = 3921000kB [ 137.381050][ T6180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.391325][ T6180] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.401172][ T6180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 137.411141][ T6180] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 137.426034][ T6180] 47519 total pagecache pages [ 137.433134][ T6180] 0 pages in swap cache [ 137.444272][ T6180] Free swap = 124700kB [ 137.457594][ T6180] Total swap = 124996kB [ 137.471130][ T6180] 2097051 pages RAM [ 137.488922][ T6180] 0 pages HighMem/MovableOnly [ 137.505582][ T6180] 427075 pages reserved [ 137.519166][ T6180] 0 pages cma reserved [ 137.526188][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 137.540459][ T8] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 137.570338][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.622934][ T8] usb 2-1: Product: syz [ 137.647400][ T8] usb 2-1: Manufacturer: syz [ 137.652071][ T8] usb 2-1: SerialNumber: syz [ 137.660893][ T1124] bridge_slave_1: left allmulticast mode [ 137.702321][ T1124] bridge_slave_1: left promiscuous mode [ 137.717182][ T8] usb 2-1: config 0 descriptor?? [ 137.737159][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 137.747255][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.811132][ T6262] loop8: detected capacity change from 0 to 7 [ 137.848998][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.859034][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.870847][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.882602][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.900618][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.907633][ T6262] Dev loop8: unable to read RDB block 7 [ 137.907667][ T6262] loop8: AHDI p1 p2 [ 137.907694][ T6262] loop8: partition table partially beyond EOD, truncated [ 137.907872][ T6262] loop8: p1 size 7567738 extends beyond EOD, [ 137.929093][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.934246][ T1124] bridge_slave_0: left allmulticast mode [ 137.995664][ T6262] truncated [ 138.022384][ T1124] bridge_slave_0: left promiscuous mode [ 138.066833][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.071618][ T6221] udevd[6221]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 138.457587][ T8] gspca_stk1135: reg_w 0x0 err -110 [ 138.516367][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 138.617457][ T8] gspca_stk1135: Sensor write failed [ 138.685542][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 138.710614][ T8] gspca_stk1135: Sensor write failed [ 138.746943][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 138.780777][ T8] gspca_stk1135: Sensor read failed [ 138.838408][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 138.874607][ T8] gspca_stk1135: Sensor read failed [ 138.903722][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 139.019517][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 139.142900][ T8] gspca_stk1135: Sensor read failed [ 139.196066][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 139.248457][ T8] gspca_stk1135: Sensor read failed [ 139.318769][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 139.400124][ T8] gspca_stk1135: Sensor write failed [ 139.405517][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 139.553226][ T8] gspca_stk1135: Sensor write failed [ 139.586437][ T8] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 139.958311][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.015997][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.046657][ T4623] Bluetooth: hci0: command tx timeout [ 140.065301][ T1124] bond0 (unregistering): Released all slaves [ 140.120866][ T5275] usb 1-1: USB disconnect, device number 8 [ 140.283976][ T941] usb 2-1: USB disconnect, device number 19 [ 140.790508][ T5278] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.856137][ T5275] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 140.986917][ T5278] usb 1-1: Using ep0 maxpacket: 8 [ 141.004277][ T5278] usb 1-1: config index 0 descriptor too short (expected 2084, got 36) [ 141.026127][ T5279] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 141.058459][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.089685][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.137877][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.148306][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.194381][ T5278] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.210103][ T5275] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 141.236213][ T1124] hsr_slave_0: left promiscuous mode [ 141.266517][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.286809][ T5278] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 141.306464][ T1124] hsr_slave_1: left promiscuous mode [ 141.313490][ T5279] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 141.346651][ T5275] usb 2-1: config 0 descriptor?? [ 141.352624][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.356475][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.373277][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.391403][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.416011][ T5279] usb 5-1: Product: syz [ 141.420461][ T5279] usb 5-1: Manufacturer: syz [ 141.425122][ T5279] usb 5-1: SerialNumber: syz [ 141.433773][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.438121][ T5278] usb 1-1: config 0 descriptor?? [ 141.483828][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.526237][ T5279] usb 5-1: config 0 descriptor?? [ 141.626502][ T1124] veth1_macvtap: left promiscuous mode [ 141.652515][ T1124] veth0_macvtap: left promiscuous mode [ 141.676411][ T1124] veth1_vlan: left promiscuous mode [ 141.692649][ T1124] veth0_vlan: left promiscuous mode [ 141.774696][ T6295] delete_channel: no stack [ 141.841751][ T5275] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 142.009437][ T6294] delete_channel: no stack [ 142.010465][ T8] usb 2-1: USB disconnect, device number 20 [ 142.128620][ T4623] Bluetooth: hci0: command tx timeout [ 142.270646][ T5278] usbhid 1-1:0.0: can't add hid device: -71 [ 142.270754][ T5278] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 142.272874][ T5278] usb 1-1: USB disconnect, device number 9 [ 142.505423][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 142.514905][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 142.518447][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 142.556221][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 142.563607][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 142.571129][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 142.803096][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.014303][ T5278] usb 5-1: USB disconnect, device number 14 [ 143.212925][ T6329] loop8: detected capacity change from 0 to 7 [ 143.228186][ T6329] Dev loop8: unable to read RDB block 7 [ 143.244281][ T6329] loop8: AHDI p1 p2 [ 143.251574][ T6329] loop8: partition table partially beyond EOD, truncated [ 143.276349][ T6329] loop8: p1 start 18631 is beyond EOD, truncated [ 143.848352][ T6339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.046273][ T9] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 144.137122][ T5230] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 144.206082][ T4623] Bluetooth: hci0: command tx timeout [ 144.230928][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.266513][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.306074][ T5230] usb 5-1: device descriptor read/64, error -71 [ 144.317644][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 144.344956][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 144.358982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.409554][ T6337] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.428279][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 144.434266][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 144.461660][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 144.468106][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 144.490590][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 144.515665][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 144.556157][ T5230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 144.607547][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 144.686624][ T4623] Bluetooth: hci5: command tx timeout [ 144.716064][ T5230] usb 5-1: device descriptor read/64, error -71 [ 144.717772][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.729076][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.735366][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.742033][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.748852][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.755456][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.761686][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.768313][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.774590][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.781272][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.787531][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.794139][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.800373][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.806985][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.813259][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.819859][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.826128][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.832817][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.839113][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 144.845734][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 144.883054][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 144.937770][ T8] usb 2-1: USB disconnect, device number 21 [ 144.965436][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 144.987663][ T5230] usb usb5-port1: attempt power cycle [ 145.362507][ T5230] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 145.406972][ T5230] usb 5-1: device descriptor read/8, error -71 [ 145.666012][ T5230] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 145.717147][ T5230] usb 5-1: device descriptor read/8, error -71 [ 145.866307][ T5230] usb usb5-port1: unable to enumerate USB device [ 146.287977][ T4623] Bluetooth: hci0: command tx timeout [ 146.340726][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 146.426954][ T6268] chnl_net:caif_netlink_parms(): no params data found [ 146.746088][ T5275] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 146.766413][ T4623] Bluetooth: hci5: command tx timeout [ 146.845425][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.875617][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.904586][ T6268] bridge_slave_0: entered allmulticast mode [ 146.925231][ T6268] bridge_slave_0: entered promiscuous mode [ 146.948687][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.956145][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 146.978047][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.989787][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.004151][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.016434][ T6268] bridge_slave_1: entered allmulticast mode [ 147.029566][ T6268] bridge_slave_1: entered promiscuous mode [ 147.033001][ T5275] usb 1-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 147.087887][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.115306][ T5275] usb 1-1: config 0 descriptor?? [ 147.190578][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.255260][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.326559][ T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 147.549156][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.560612][ T5275] thrustmaster 0003:044F:B323.000A: hidraw0: USB HID v0.04 Device [HID 044f:b323] on usb-dummy_hcd.0-1/input0 [ 147.597381][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.616587][ T5275] thrustmaster 0003:044F:B323.000A: no inputs found [ 147.636140][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.641683][ T6268] team0: Port device team_slave_0 added [ 147.659877][ T51] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.694911][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.713337][ T51] usb 5-1: config 0 descriptor?? [ 147.808050][ T6268] team0: Port device team_slave_1 added [ 147.819417][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 147.912671][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.938190][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.996725][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.149166][ T51] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 148.176750][ T51] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 148.184615][ T1124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.235580][ T51] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 148.279753][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.303329][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.343553][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.461436][ T1124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.529993][ T6351] usb 5-1: string descriptor 0 read error: -71 [ 148.530038][ T5275] usb 5-1: USB disconnect, device number 19 [ 148.617564][ T1124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.656586][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 148.668199][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 148.677641][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 148.687181][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 148.697755][ T6268] hsr_slave_0: entered promiscuous mode [ 148.705666][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 148.717261][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 148.723785][ T6268] hsr_slave_1: entered promiscuous mode [ 148.794857][ T1124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.846052][ T5236] Bluetooth: hci5: command tx timeout [ 148.871927][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.882111][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.895381][ T6323] bridge_slave_0: entered allmulticast mode [ 148.904402][ T6323] bridge_slave_0: entered promiscuous mode [ 148.954424][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.965573][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.973559][ T6323] bridge_slave_1: entered allmulticast mode [ 148.981839][ T6323] bridge_slave_1: entered promiscuous mode [ 149.065218][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.108562][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.238198][ T6323] team0: Port device team_slave_0 added [ 149.297054][ T6323] team0: Port device team_slave_1 added [ 149.492815][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.512483][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.539934][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.567747][ T1124] bridge_slave_1: left allmulticast mode [ 149.573663][ T1124] bridge_slave_1: left promiscuous mode [ 149.580308][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.591261][ T1124] bridge_slave_0: left allmulticast mode [ 149.600544][ T1124] bridge_slave_0: left promiscuous mode [ 149.612457][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.078118][ T5275] usb 1-1: USB disconnect, device number 10 [ 150.141864][ T6396] mmap: syz.4.219 (6396) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.342823][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.354148][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.369206][ T1124] bond0 (unregistering): Released all slaves [ 150.381128][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.390696][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.417356][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.498476][ T6401] netlink: 'syz.0.221': attribute type 21 has an invalid length. [ 150.524295][ T6401] netlink: 156 bytes leftover after parsing attributes in process `syz.0.221'. [ 150.560735][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 150.766284][ T5236] Bluetooth: hci3: command tx timeout [ 150.871329][ T6323] hsr_slave_0: entered promiscuous mode [ 150.900154][ T6323] hsr_slave_1: entered promiscuous mode [ 150.917615][ T6323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.925265][ T6323] Cannot create hsr debugfs directory [ 150.929187][ T5236] Bluetooth: hci5: command tx timeout [ 151.177315][ T6375] chnl_net:caif_netlink_parms(): no params data found [ 151.301794][ T1124] hsr_slave_0: left promiscuous mode [ 151.308556][ T1124] hsr_slave_1: left promiscuous mode [ 151.314388][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.322855][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.331176][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.339315][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.362412][ T1124] veth1_macvtap: left promiscuous mode [ 151.369082][ T1124] veth0_macvtap: left promiscuous mode [ 151.374803][ T1124] veth1_vlan: left promiscuous mode [ 151.380376][ T1124] veth0_vlan: left promiscuous mode [ 151.406017][ T51] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 151.568113][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 151.580447][ T51] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.601095][ T51] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.624295][ T51] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.649196][ T51] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.684913][ T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 151.695332][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.703893][ T51] usb 5-1: SerialNumber: syz [ 151.736559][ T51] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 151.756564][ T51] usb-storage 5-1:1.0: USB Mass Storage device detected [ 151.770876][ T51] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 152.010186][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.032764][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.155654][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 152.242389][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 152.853133][ T5236] Bluetooth: hci3: command tx timeout [ 153.578041][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.601879][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.617532][ T6375] bridge_slave_0: entered allmulticast mode [ 153.662270][ T6375] bridge_slave_0: entered promiscuous mode [ 153.693935][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.727490][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.755382][ T6375] bridge_slave_1: entered allmulticast mode [ 153.763277][ T6375] bridge_slave_1: entered promiscuous mode [ 153.978771][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.059168][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.192797][ T9] usb 5-1: USB disconnect, device number 20 [ 154.227469][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.238538][ T6268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 154.262979][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.286599][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.304518][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.313169][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.321668][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.346317][ T6268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 154.367646][ T6268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 154.406886][ T6375] team0: Port device team_slave_0 added [ 154.414956][ T6375] team0: Port device team_slave_1 added [ 154.423248][ T6470] input: syz1 as /devices/virtual/input/input10 [ 154.431309][ T6268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 154.552342][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.561129][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.588433][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.630098][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.640849][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.667406][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.756869][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 154.813523][ T6375] hsr_slave_0: entered promiscuous mode [ 154.820967][ T6375] hsr_slave_1: entered promiscuous mode [ 154.828552][ T6375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.836228][ T6375] Cannot create hsr debugfs directory [ 154.864759][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.896330][ T8] usb 5-1: device descriptor read/64, error -71 [ 154.931082][ T4623] Bluetooth: hci3: command tx timeout [ 154.970406][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.028265][ T6471] chnl_net:caif_netlink_parms(): no params data found [ 155.055006][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.111147][ T6323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.122889][ T6323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.133922][ T6323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.149306][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 155.193131][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.215665][ T6323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.278660][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.306474][ T8] usb 5-1: device descriptor read/64, error -71 [ 155.350660][ T6375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.416311][ T8] usb usb5-port1: attempt power cycle [ 155.448940][ T6471] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.457094][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.464324][ T6471] bridge_slave_0: entered allmulticast mode [ 155.472014][ T6471] bridge_slave_0: entered promiscuous mode [ 155.513936][ T6375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.530051][ T6471] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.540798][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.548557][ T6471] bridge_slave_1: entered allmulticast mode [ 155.555441][ T6471] bridge_slave_1: entered promiscuous mode [ 155.601734][ T6375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.629938][ T6471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.644781][ T6471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.677066][ T6268] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.704028][ T6375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.733377][ T6471] team0: Port device team_slave_0 added [ 155.743656][ T6471] team0: Port device team_slave_1 added [ 155.760450][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 155.781185][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.790585][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.817358][ T8] usb 5-1: device descriptor read/8, error -71 [ 155.823960][ T6471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.845729][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.852927][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.877081][ T6471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.891495][ T6471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.919213][ T6471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.942945][ T1124] bridge_slave_1: left allmulticast mode [ 155.948804][ T1124] bridge_slave_1: left promiscuous mode [ 155.954525][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.964126][ T1124] bridge_slave_0: left allmulticast mode [ 155.970369][ T1124] bridge_slave_0: left promiscuous mode [ 155.976444][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.987861][ T1124] bridge_slave_1: left allmulticast mode [ 155.993541][ T1124] bridge_slave_1: left promiscuous mode [ 156.000136][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.010161][ T1124] bridge_slave_0: left allmulticast mode [ 156.016893][ T1124] bridge_slave_0: left promiscuous mode [ 156.022675][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.057477][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 156.090454][ T8] usb 5-1: device descriptor read/8, error -71 [ 156.216687][ T8] usb usb5-port1: unable to enumerate USB device [ 156.366119][ T4623] Bluetooth: hci1: command tx timeout [ 156.614021][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.629525][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.640450][ T1124] bond0 (unregistering): Released all slaves [ 156.753166][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.764836][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.776853][ T1124] bond0 (unregistering): Released all slaves [ 156.808364][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.815491][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.006230][ T4623] Bluetooth: hci3: command tx timeout [ 157.060069][ T6471] hsr_slave_0: entered promiscuous mode [ 157.074979][ T6471] hsr_slave_1: entered promiscuous mode [ 157.082109][ T6471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.103219][ T6471] Cannot create hsr debugfs directory [ 157.145178][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.196560][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.377311][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.384533][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.456313][ T6375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.468661][ T6375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.487902][ T6375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.532217][ T6375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.544388][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.551592][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.934002][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.139741][ T1124] hsr_slave_0: left promiscuous mode [ 158.145837][ T1124] hsr_slave_1: left promiscuous mode [ 158.152282][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.160532][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.173981][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.182180][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.203480][ T1124] hsr_slave_0: left promiscuous mode [ 158.213571][ T1124] hsr_slave_1: left promiscuous mode [ 158.226929][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.226952][ T5290] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 158.234502][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.259799][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.270733][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.328397][ T1124] veth1_macvtap: left promiscuous mode [ 158.334007][ T1124] veth0_macvtap: left promiscuous mode [ 158.348019][ T1124] veth1_vlan: left promiscuous mode [ 158.353485][ T1124] veth0_vlan: left promiscuous mode [ 158.367824][ T1124] veth1_macvtap: left promiscuous mode [ 158.373868][ T1124] veth0_macvtap: left promiscuous mode [ 158.380134][ T1124] veth1_vlan: left promiscuous mode [ 158.385489][ T1124] veth0_vlan: left promiscuous mode [ 158.427382][ T5290] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 158.439576][ T5290] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 158.448254][ T4623] Bluetooth: hci1: command tx timeout [ 158.487590][ T5290] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 158.502469][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.514135][ T5290] usb 5-1: Product: syz [ 158.519278][ T5290] usb 5-1: Manufacturer: syz [ 158.535916][ T5290] usb 5-1: SerialNumber: syz [ 158.561103][ T5290] usb 5-1: config 0 descriptor?? [ 158.578814][ T5290] redrat3 5-1:0.0: Couldn't find all endpoints [ 159.315146][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 159.363977][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 160.174775][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 160.222281][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 160.526747][ T4623] Bluetooth: hci1: command tx timeout [ 160.680104][ T5279] usb 5-1: USB disconnect, device number 25 [ 160.732494][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.832322][ T6268] veth0_vlan: entered promiscuous mode [ 160.864450][ T6268] veth1_vlan: entered promiscuous mode [ 161.044973][ T6268] veth0_macvtap: entered promiscuous mode [ 161.063484][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.090581][ T6323] veth0_vlan: entered promiscuous mode [ 161.144802][ T6268] veth1_macvtap: entered promiscuous mode [ 161.187506][ T6471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.199888][ T6471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.222981][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.233942][ T6323] veth1_vlan: entered promiscuous mode [ 161.286139][ T6471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.327728][ T6471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.361980][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.369271][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.423482][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.441539][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.453697][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.473031][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.480206][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.521732][ T6268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.544449][ T6268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.562303][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.597959][ T5275] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 161.622813][ T6268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.633616][ T6268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.643636][ T6268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.657554][ T6268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.737601][ T6323] veth0_macvtap: entered promiscuous mode [ 161.758708][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 161.783832][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.807212][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 161.832423][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 161.848545][ T6323] veth1_macvtap: entered promiscuous mode [ 161.866318][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.895934][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.941158][ T5275] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 161.963867][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.976782][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.004265][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.006842][ T5275] usb 5-1: Product: syz [ 162.026055][ T5275] usb 5-1: Manufacturer: syz [ 162.027442][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.030738][ T5275] usb 5-1: SerialNumber: syz [ 162.057841][ T5275] usb 5-1: config 0 descriptor?? [ 162.061095][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.073858][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.112764][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.126492][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.141662][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.149273][ T5275] rc_core: IR keymap rc-imon-rsc not found [ 162.159544][ T5275] Registered IR keymap rc-empty [ 162.171587][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.182778][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.185524][ T5275] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 162.204569][ T5275] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 162.206595][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.225941][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.237047][ T5275] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 162.238415][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.289306][ T5275] usb 5-1: USB disconnect, device number 26 [ 162.292117][ T6323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.308602][ T6323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.318687][ T6323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.328473][ T6323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.367277][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.375351][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.391928][ T6471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.414476][ T6375] veth0_vlan: entered promiscuous mode [ 162.450111][ T6375] veth1_vlan: entered promiscuous mode [ 162.529687][ T6589] netlink: 'syz.2.193': attribute type 4 has an invalid length. [ 162.564883][ T6471] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.578612][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.592725][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.605923][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.606203][ T4623] Bluetooth: hci1: command tx timeout [ 162.613089][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.636931][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.644081][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.733963][ T6375] veth0_macvtap: entered promiscuous mode [ 162.748075][ T6375] veth1_macvtap: entered promiscuous mode [ 162.760923][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.772494][ T6471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.783080][ T6471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.793497][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.930398][ T6591] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.935109][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.944646][ T6591] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 162.959534][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.971152][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.990119][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.002833][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.052788][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.081277][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.092392][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.103061][ T6591] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.109876][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.120522][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.133004][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.144612][ T6375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.160153][ T6375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.172766][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.186463][ T6591] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.192448][ T6591] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.202991][ T6471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.233438][ T6591] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.245241][ T6375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.254951][ T6375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.264673][ T6375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.275276][ T6375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.305135][ T6591] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 163.312452][ T6591] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 163.325541][ T6591] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 163.370795][ T6591] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.378916][ T6591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.388657][ T6591] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 163.401379][ T6591] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.406541][ T6471] veth0_vlan: entered promiscuous mode [ 163.413030][ T6591] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.422245][ T6591] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 163.433408][ T6471] veth1_vlan: entered promiscuous mode [ 163.524744][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.539405][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.577908][ T6471] veth0_macvtap: entered promiscuous mode [ 163.591406][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.600018][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.602762][ T6471] veth1_macvtap: entered promiscuous mode [ 163.640040][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.653742][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.664302][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.692991][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.703261][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.714049][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.729707][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.742219][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.755550][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.785278][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.797288][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.808874][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.820917][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.832484][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.846359][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.856932][ T6471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.868354][ T6471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.880993][ T6471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.911954][ T6471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.922825][ T6471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.932619][ T6471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.942040][ T6471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.025692][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.042845][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.092412][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.118914][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.350660][ T6619] netlink: 'syz.4.241': attribute type 4 has an invalid length. [ 164.706448][ T5278] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 164.846256][ T5229] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.858474][ T5278] usb 1-1: config 254 has an invalid interface number: 93 but max is 0 [ 164.866932][ T5278] usb 1-1: config 254 has no interface number 0 [ 164.873234][ T5278] usb 1-1: config 254 interface 93 has no altsetting 0 [ 164.885071][ T5278] usb 1-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice= d.38 [ 164.894515][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.902855][ T5278] usb 1-1: Product: syz [ 164.908242][ T5278] usb 1-1: Manufacturer: syz [ 164.914413][ T5278] usb 1-1: SerialNumber: syz [ 164.919405][ T51] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 164.983998][ T68] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.066105][ T51] usb 5-1: device descriptor read/64, error -71 [ 165.098963][ T68] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.173216][ T68] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.237374][ T68] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.246318][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.254564][ T4623] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 165.279154][ T5278] gspca_main: jeilinj-2.14.0 probing 0979:0280 [ 165.299716][ T5278] usb 1-1: USB disconnect, device number 11 [ 165.311070][ T51] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 165.410105][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.410114][ T5229] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.476550][ T51] usb 5-1: device descriptor read/64, error -71 [ 165.605004][ T51] usb usb5-port1: attempt power cycle [ 165.627191][ T68] bridge_slave_1: left allmulticast mode [ 165.632980][ T68] bridge_slave_1: left promiscuous mode [ 165.670786][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.703202][ T68] bridge_slave_0: left allmulticast mode [ 165.706109][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.731610][ T68] bridge_slave_0: left promiscuous mode [ 165.752902][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.823031][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.837173][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.840666][ T6640] fuse: Unknown parameter ' ' [ 165.851113][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.859787][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.867684][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 165.875009][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.890925][ T5275] usb 3-1: Using ep0 maxpacket: 16 [ 165.921383][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 165.952167][ T4623] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 165.967136][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 166.003794][ T5275] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 166.027000][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.051628][ T51] usb 5-1: device descriptor read/8, error -71 [ 166.064774][ T5275] usb 3-1: Product: syz [ 166.079580][ T5275] usb 3-1: Manufacturer: syz [ 166.084258][ T5275] usb 3-1: SerialNumber: syz [ 166.099198][ T5275] usb 3-1: config 0 descriptor?? [ 166.314933][ T6635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.316169][ T51] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 166.331891][ T6635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.341944][ T5275] usb 3-1: USB disconnect, device number 10 [ 166.361098][ T51] usb 5-1: device descriptor read/8, error -71 [ 166.477283][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.488103][ T51] usb usb5-port1: unable to enumerate USB device [ 166.498241][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.510102][ T68] bond0 (unregistering): Released all slaves [ 166.534340][ T6648] netlink: 'syz.0.253': attribute type 4 has an invalid length. [ 166.927735][ T4623] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.115479][ T5275] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 167.228487][ T68] hsr_slave_0: left promiscuous mode [ 167.243913][ T68] hsr_slave_1: left promiscuous mode [ 167.268588][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.281120][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.297293][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.308899][ T5275] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.319781][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.327526][ T4623] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.336018][ T5275] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 167.365650][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.395146][ T5275] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 167.406592][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.433099][ T68] veth1_macvtap: left promiscuous mode [ 167.455782][ T6665] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 167.467004][ T5275] hub 1-1:1.0: bad descriptor, ignoring hub [ 167.479176][ T68] veth0_macvtap: left promiscuous mode [ 167.486186][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.487868][ T5229] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.512035][ T5275] hub 1-1:1.0: probe with driver hub failed with error -5 [ 167.520468][ T68] veth1_vlan: left promiscuous mode [ 167.529100][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 167.534564][ T5275] cdc_wdm 1-1:1.0: skipping garbage [ 167.542247][ T68] veth0_vlan: left promiscuous mode [ 167.545586][ T5275] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 167.560458][ T5275] cdc_wdm 1-1:1.0: Unknown control protocol [ 167.966344][ T5229] Bluetooth: hci4: command tx timeout [ 168.084241][ T6682] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.261'. [ 168.652177][ T6665] cdc_wdm 1-1:1.0: Error autopm - -16 [ 168.660663][ T941] usb 1-1: USB disconnect, device number 12 [ 168.841613][ T68] team0 (unregistering): Port device team_slave_1 removed [ 168.915778][ T68] team0 (unregistering): Port device team_slave_0 removed [ 169.018799][ T5229] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.421293][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.479946][ T6644] chnl_net:caif_netlink_parms(): no params data found [ 169.533500][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 169.566517][ T4623] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.572849][ T5229] Bluetooth: hci1: command 0x0c1a tx timeout [ 169.609488][ T6695] syz_tun: entered promiscuous mode [ 169.669306][ T6695] batadv_slave_0: entered promiscuous mode [ 170.045263][ T6703] netlink: 'syz.1.264': attribute type 4 has an invalid length. [ 170.053149][ T5229] Bluetooth: hci4: command tx timeout [ 170.418644][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.449204][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.467718][ T6644] bridge_slave_0: entered allmulticast mode [ 170.475537][ T6644] bridge_slave_0: entered promiscuous mode [ 170.532793][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.559631][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.602491][ T6644] bridge_slave_1: entered allmulticast mode [ 170.631871][ T6644] bridge_slave_1: entered promiscuous mode [ 170.800149][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.855400][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.962414][ T6731] raw_sendmsg: syz.2.271 forgot to set AF_INET. Fix it! [ 171.114778][ T6644] team0: Port device team_slave_0 added [ 171.142719][ T6644] team0: Port device team_slave_1 added [ 171.149107][ T6738] xt_nat: multiple ranges no longer supported [ 171.326532][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.349426][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.398366][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.415537][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.423267][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.449517][ T5275] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 171.471022][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.486575][ T5229] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.630312][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 171.685228][ T5275] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 171.723096][ T5275] usb 5-1: config 0 has no interface number 0 [ 171.748066][ T5275] usb 5-1: config 0 interface 249 has no altsetting 0 [ 171.769304][ T5275] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=a5.06 [ 171.809486][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.838436][ T5275] usb 5-1: Product: syz [ 171.842661][ T5275] usb 5-1: Manufacturer: syz [ 171.861796][ T5275] usb 5-1: SerialNumber: syz [ 171.871063][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.924096][ T5275] usb 5-1: config 0 descriptor?? [ 171.990689][ T6644] hsr_slave_0: entered promiscuous mode [ 172.036697][ T6644] hsr_slave_1: entered promiscuous mode [ 172.062783][ T6644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.074393][ T6644] Cannot create hsr debugfs directory [ 172.126037][ T5229] Bluetooth: hci4: command tx timeout [ 172.309749][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.332902][ T6754] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 172.339858][ T6754] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.409706][ T6754] vhci_hcd vhci_hcd.0: Device attached [ 172.512827][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.690920][ T8] usb 12-1: SetAddress Request (2) to port 0 [ 172.691963][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.716047][ T8] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 172.733263][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.743444][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.752916][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.763053][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.772160][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.781829][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 173.019814][ T6756] vhci_hcd: connection reset by peer [ 173.066943][ T2951] vhci_hcd: stop threads [ 173.079239][ T2951] vhci_hcd: release socket [ 173.105388][ T2951] vhci_hcd: disconnect device [ 173.359586][ T6773] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.281'. [ 173.372121][ T68] bridge_slave_1: left allmulticast mode [ 173.383032][ T68] bridge_slave_1: left promiscuous mode [ 173.400549][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.449531][ T68] bridge_slave_0: left allmulticast mode [ 173.469880][ T68] bridge_slave_0: left promiscuous mode [ 173.488356][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.085413][ T5275] ljca 5-1:0.249: bulk endpoints not found [ 174.125755][ T6738] syz.4.272 (6738) used greatest stack depth: 18552 bytes left [ 174.153630][ T5275] usb 5-1: USB disconnect, device number 31 [ 174.209937][ T5229] Bluetooth: hci4: command tx timeout [ 174.352815][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.365297][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.379054][ T68] bond0 (unregistering): Released all slaves [ 174.846297][ T5229] Bluetooth: hci1: command tx timeout [ 175.107484][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.118581][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.127733][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.142988][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.164587][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.186422][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.279553][ T68] hsr_slave_0: left promiscuous mode [ 175.296424][ T68] hsr_slave_1: left promiscuous mode [ 175.312218][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.319781][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.330123][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.339925][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.380669][ T68] veth1_macvtap: left promiscuous mode [ 175.387312][ T68] veth0_macvtap: left promiscuous mode [ 175.394679][ T68] veth1_vlan: left promiscuous mode [ 175.406099][ T68] veth0_vlan: left promiscuous mode [ 175.468151][ T5230] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 175.646718][ T5230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.657690][ T5230] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 175.691445][ T5230] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 175.700816][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.753464][ T5230] usb 5-1: config 0 descriptor?? [ 176.183207][ T5230] Bluetooth: Can't get version to change to load ram patch err [ 176.196424][ T5230] Bluetooth: Loading sysconfig file failed [ 176.202323][ T5230] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 176.218841][ T5230] usb 5-1: USB disconnect, device number 32 [ 176.238497][ T68] team0 (unregistering): Port device team_slave_1 removed [ 176.281637][ T68] team0 (unregistering): Port device team_slave_0 removed [ 176.829762][ T6644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.863039][ T6644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.889331][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 176.916432][ T6644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.926166][ T5229] Bluetooth: hci1: command tx timeout [ 176.989801][ T6644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.195450][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.225203][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.233521][ T6761] bridge_slave_0: entered allmulticast mode [ 177.246153][ T5229] Bluetooth: hci0: command tx timeout [ 177.247381][ T6761] bridge_slave_0: entered promiscuous mode [ 177.259291][ T6836] FAULT_INJECTION: forcing a failure. [ 177.259291][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.291693][ T6836] CPU: 0 UID: 0 PID: 6836 Comm: syz.4.298 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 177.302011][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.312146][ T6836] Call Trace: [ 177.315458][ T6836] [ 177.318420][ T6836] dump_stack_lvl+0x241/0x360 [ 177.323165][ T6836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.328412][ T6836] ? __pfx__printk+0x10/0x10 [ 177.333061][ T6836] ? __pfx_lock_release+0x10/0x10 [ 177.338159][ T6836] should_fail_ex+0x3b0/0x4e0 [ 177.342886][ T6836] _copy_from_iter+0x1ed/0x1d60 [ 177.347831][ T6836] ? __virt_addr_valid+0x183/0x530 [ 177.352979][ T6836] ? __pfx_lock_release+0x10/0x10 [ 177.358060][ T6836] ? __alloc_skb+0x28f/0x440 [ 177.362697][ T6836] ? __pfx__copy_from_iter+0x10/0x10 [ 177.368032][ T6836] ? __virt_addr_valid+0x183/0x530 [ 177.373191][ T6836] ? __virt_addr_valid+0x183/0x530 [ 177.378350][ T6836] ? __virt_addr_valid+0x45f/0x530 [ 177.383511][ T6836] ? __check_object_size+0x49c/0x900 [ 177.388849][ T6836] netlink_sendmsg+0x73d/0xcb0 [ 177.393682][ T6836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.399028][ T6836] ? aa_sock_msg_perm+0x91/0x160 [ 177.404015][ T6836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.409351][ T6836] __sock_sendmsg+0x221/0x270 [ 177.414082][ T6836] ____sys_sendmsg+0x52a/0x7e0 [ 177.418914][ T6836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.424277][ T6836] __sys_sendmsg+0x2aa/0x390 [ 177.428921][ T6836] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.434088][ T6836] ? vfs_write+0x7bf/0xc90 [ 177.438608][ T6836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.440051][ T6644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.444994][ T6836] ? do_syscall_64+0x100/0x230 [ 177.455076][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.456342][ T6836] ? do_syscall_64+0xb6/0x230 [ 177.456384][ T6836] do_syscall_64+0xf3/0x230 [ 177.456417][ T6836] ? clear_bhb_loop+0x35/0x90 [ 177.456454][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.466296][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.468166][ T6836] RIP: 0033:0x7f264717def9 [ 177.473671][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.477333][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.477357][ T6836] RSP: 002b:00007f2647fe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.477384][ T6836] RAX: ffffffffffffffda RBX: 00007f2647335f80 RCX: 00007f264717def9 [ 177.477402][ T6836] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 177.477418][ T6836] RBP: 00007f2647fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.477434][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.477450][ T6836] R13: 0000000000000000 R14: 00007f2647335f80 R15: 00007f264745fa28 [ 177.477480][ T6836] [ 177.581335][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.589418][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.597385][ T6761] bridge_slave_1: entered allmulticast mode [ 177.604607][ T6761] bridge_slave_1: entered promiscuous mode [ 177.612466][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.625507][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.633231][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.809914][ T8] usb 12-1: device descriptor read/8, error -110 [ 177.834947][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.871720][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.939773][ T6644] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.113041][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.113109][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.174721][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.200115][ T6761] team0: Port device team_slave_0 added [ 178.213372][ T6761] team0: Port device team_slave_1 added [ 178.247232][ T8] usb usb12-port1: attempt power cycle [ 178.271888][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.271963][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.364649][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.440214][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.471898][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.508532][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.531618][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 178.583299][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.610977][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.621996][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.660298][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.746415][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.906880][ T8] usb usb12-port1: unable to enumerate USB device [ 178.936050][ T5279] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 178.983304][ T6761] hsr_slave_0: entered promiscuous mode [ 179.003519][ T6761] hsr_slave_1: entered promiscuous mode [ 179.016008][ T4623] Bluetooth: hci1: command tx timeout [ 179.032536][ T6761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.044868][ T6761] Cannot create hsr debugfs directory [ 179.099685][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 179.131161][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.143970][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 179.167268][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.188060][ T5279] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.197786][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.209975][ T5279] usb 5-1: config 0 descriptor?? [ 179.216464][ T6868] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.265507][ T5279] hub 5-1:0.0: USB hub found [ 179.300975][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.310848][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.321028][ T6812] bridge_slave_0: entered allmulticast mode [ 179.327260][ T4623] Bluetooth: hci0: command tx timeout [ 179.334886][ T6812] bridge_slave_0: entered promiscuous mode [ 179.446336][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.453527][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.482589][ T6812] bridge_slave_1: entered allmulticast mode [ 179.495071][ T6812] bridge_slave_1: entered promiscuous mode [ 179.597113][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.646084][ T4623] Bluetooth: hci3: command tx timeout [ 179.652947][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 179.697786][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.759660][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.827276][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.907884][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.021296][ T6644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.062605][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.088109][ T6812] team0: Port device team_slave_0 added [ 180.132843][ T6812] team0: Port device team_slave_1 added [ 180.353756][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.369465][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.392323][ T6840] bridge_slave_0: entered allmulticast mode [ 180.420724][ T6840] bridge_slave_0: entered promiscuous mode [ 180.452251][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.471116][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.510501][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.533991][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.541319][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.584939][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.614805][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.630686][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.641580][ T6840] bridge_slave_1: entered allmulticast mode [ 180.662753][ T6840] bridge_slave_1: entered promiscuous mode [ 181.092447][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.105911][ T4623] Bluetooth: hci1: command tx timeout [ 181.230235][ T6812] hsr_slave_0: entered promiscuous mode [ 181.238917][ T6812] hsr_slave_1: entered promiscuous mode [ 181.251317][ T6812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.264294][ T6812] Cannot create hsr debugfs directory [ 181.295321][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.305486][ T68] bridge_slave_1: left allmulticast mode [ 181.311968][ T68] bridge_slave_1: left promiscuous mode [ 181.319021][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.342300][ T68] bridge_slave_0: left allmulticast mode [ 181.348350][ T68] bridge_slave_0: left promiscuous mode [ 181.354666][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.370529][ T68] bridge_slave_1: left allmulticast mode [ 181.377843][ T68] bridge_slave_1: left promiscuous mode [ 181.383715][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.395371][ T68] bridge_slave_0: left allmulticast mode [ 181.401419][ T68] bridge_slave_0: left promiscuous mode [ 181.408092][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.417349][ T4623] Bluetooth: hci0: command tx timeout [ 181.553211][ T5279] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 181.572634][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 181.593177][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 181.646720][ T5279] usb 5-1: USB disconnect, device number 33 [ 181.734435][ T4623] Bluetooth: hci3: command tx timeout [ 182.126221][ T5279] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 182.303954][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 182.328842][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.368337][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 182.380729][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.394628][ T5279] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.404488][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.436385][ T5279] usb 5-1: config 0 descriptor?? [ 182.442519][ T6900] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.481760][ T5279] hub 5-1:0.0: USB hub found [ 182.554367][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.580840][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.600784][ T68] bond0 (unregistering): Released all slaves [ 182.753583][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.774483][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.792109][ T68] bond0 (unregistering): Released all slaves [ 183.069947][ T6840] team0: Port device team_slave_0 added [ 183.149777][ T6840] team0: Port device team_slave_1 added [ 183.292517][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.299982][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.333711][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.350172][ T6644] veth0_vlan: entered promiscuous mode [ 183.384447][ T6644] veth1_vlan: entered promiscuous mode [ 183.399428][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.408128][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.443455][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.486452][ T4623] Bluetooth: hci0: command tx timeout [ 183.674699][ T6840] hsr_slave_0: entered promiscuous mode [ 183.694372][ T6840] hsr_slave_1: entered promiscuous mode [ 183.709449][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.717579][ T6840] Cannot create hsr debugfs directory [ 183.750996][ T6644] veth0_macvtap: entered promiscuous mode [ 183.806518][ T4623] Bluetooth: hci3: command tx timeout [ 183.894752][ T6761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.951438][ T6761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.982439][ T6644] veth1_macvtap: entered promiscuous mode [ 184.054589][ T6761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.130972][ T68] hsr_slave_0: left promiscuous mode [ 184.153546][ T68] hsr_slave_1: left promiscuous mode [ 184.171674][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.179370][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.188683][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.198992][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.230655][ T68] hsr_slave_0: left promiscuous mode [ 184.240484][ T68] hsr_slave_1: left promiscuous mode [ 184.255521][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.275513][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.286555][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.302790][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.366772][ T68] veth1_macvtap: left promiscuous mode [ 184.372647][ T68] veth0_macvtap: left promiscuous mode [ 184.386288][ T68] veth1_vlan: left promiscuous mode [ 184.392114][ T68] veth0_vlan: left promiscuous mode [ 184.411091][ T68] veth1_macvtap: left promiscuous mode [ 184.426298][ T68] veth0_macvtap: left promiscuous mode [ 184.434457][ T68] veth1_vlan: left promiscuous mode [ 184.440970][ T68] veth0_vlan: left promiscuous mode [ 184.746228][ T5279] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 184.797670][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 184.803823][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 184.856971][ T5279] usb 5-1: USB disconnect, device number 34 [ 184.988707][ T6924] capability: warning: `syz.4.305' uses deprecated v2 capabilities in a way that may be insecure [ 185.541601][ T68] team0 (unregistering): Port device team_slave_1 removed [ 185.592870][ T68] team0 (unregistering): Port device team_slave_0 removed [ 185.886113][ T4623] Bluetooth: hci3: command tx timeout [ 186.354325][ T68] team0 (unregistering): Port device team_slave_1 removed [ 186.402362][ T68] team0 (unregistering): Port device team_slave_0 removed [ 186.813163][ T6761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.942979][ T6937] FAULT_INJECTION: forcing a failure. [ 186.942979][ T6937] name failslab, interval 1, probability 0, space 0, times 1 [ 186.960555][ T6937] CPU: 1 UID: 0 PID: 6937 Comm: syz.4.306 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 186.970857][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 186.980957][ T6937] Call Trace: [ 186.984282][ T6937] [ 186.987220][ T6937] dump_stack_lvl+0x241/0x360 [ 186.991915][ T6937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.997121][ T6937] ? __pfx__printk+0x10/0x10 [ 187.001723][ T6937] ? ref_tracker_alloc+0x332/0x490 [ 187.006874][ T6937] should_fail_ex+0x3b0/0x4e0 [ 187.011600][ T6937] ? skb_clone+0x20c/0x390 [ 187.016043][ T6937] should_failslab+0xac/0x100 [ 187.020735][ T6937] ? skb_clone+0x20c/0x390 [ 187.025162][ T6937] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 187.030550][ T6937] skb_clone+0x20c/0x390 [ 187.034802][ T6937] __netlink_deliver_tap+0x3cc/0x7c0 [ 187.040105][ T6937] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.045313][ T6937] netlink_deliver_tap+0x19d/0x1b0 [ 187.050435][ T6937] netlink_unicast+0x7c4/0x990 [ 187.055231][ T6937] ? __pfx_netlink_unicast+0x10/0x10 [ 187.060540][ T6937] ? __virt_addr_valid+0x183/0x530 [ 187.065657][ T6937] ? __check_object_size+0x49c/0x900 [ 187.070965][ T6937] netlink_sendmsg+0x8e4/0xcb0 [ 187.075766][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.081063][ T6937] ? aa_sock_msg_perm+0x91/0x160 [ 187.086029][ T6937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.091323][ T6937] __sock_sendmsg+0x221/0x270 [ 187.096030][ T6937] ____sys_sendmsg+0x52a/0x7e0 [ 187.100814][ T6937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.106311][ T6937] __sys_sendmsg+0x2aa/0x390 [ 187.111018][ T6937] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.116145][ T6937] ? vfs_write+0x7bf/0xc90 [ 187.120595][ T6937] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.126933][ T6937] ? do_syscall_64+0x100/0x230 [ 187.131706][ T6937] ? do_syscall_64+0xb6/0x230 [ 187.136412][ T6937] do_syscall_64+0xf3/0x230 [ 187.140923][ T6937] ? clear_bhb_loop+0x35/0x90 [ 187.145610][ T6937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.151510][ T6937] RIP: 0033:0x7f264717def9 [ 187.155939][ T6937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.175575][ T6937] RSP: 002b:00007f2647fe4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.184117][ T6937] RAX: ffffffffffffffda RBX: 00007f2647335f80 RCX: 00007f264717def9 [ 187.192091][ T6937] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 187.200093][ T6937] RBP: 00007f2647fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 187.208082][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.216086][ T6937] R13: 0000000000000000 R14: 00007f2647335f80 R15: 00007f264745fa28 [ 187.224125][ T6937] [ 187.259351][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.270818][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.282000][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.330898][ T6644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.344831][ T6644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.368024][ T6644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.401401][ T6644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.430429][ T6644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.440499][ T6644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.451738][ T6644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.608176][ T6944] xt_l2tp: v2 sid > 0xffff: 536870912 [ 187.933890][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.943942][ T6812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.970958][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.002031][ T6812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.078136][ T6812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.104860][ T6812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.153321][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.172293][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.463253][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.490442][ T6966] loop8: detected capacity change from 0 to 7 [ 188.519913][ T6966] Dev loop8: unable to read RDB block 7 [ 188.569551][ T6966] loop8: AHDI p1 p2 [ 188.574008][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.584781][ T6966] loop8: partition table partially beyond EOD, truncated [ 188.602339][ T6966] loop8: p1 size 7567738 extends beyond EOD, truncated [ 188.612566][ T6969] netlink: 44 bytes leftover after parsing attributes in process `syz.4.308'. [ 188.645335][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.652606][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.682286][ T5307] udevd[5307]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 188.694761][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.725400][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.732613][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.824665][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.950594][ T6840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 189.024322][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.052604][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.059870][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.069607][ T6840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 189.083662][ T6840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 189.115246][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.122431][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.138185][ T6840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 189.409834][ T6761] veth0_vlan: entered promiscuous mode [ 189.459096][ T51] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 189.475588][ T6761] veth1_vlan: entered promiscuous mode [ 189.497544][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.534508][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.635987][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 189.669643][ T51] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 189.689151][ T6761] veth0_macvtap: entered promiscuous mode [ 189.706463][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 189.720243][ T6761] veth1_macvtap: entered promiscuous mode [ 189.732233][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 189.775212][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.788656][ T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.803841][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.844588][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.856311][ T51] usb 5-1: config 0 descriptor?? [ 189.866944][ T6987] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 189.889335][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.910357][ T51] hub 5-1:0.0: USB hub found [ 189.931570][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.944632][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.984489][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.051147][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.058433][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.111043][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.118269][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.149837][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.186245][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.220679][ T6761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.235657][ T6761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.266302][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.313792][ T6812] veth0_vlan: entered promiscuous mode [ 190.387370][ T6761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.412841][ T6761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.423863][ T6761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.433420][ T6761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.517319][ T6812] veth1_vlan: entered promiscuous mode [ 190.860377][ T6812] veth0_macvtap: entered promiscuous mode [ 190.924094][ T6812] veth1_macvtap: entered promiscuous mode [ 190.970760][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.016164][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.032644][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.200151][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.202958][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.220193][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.243633][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.269627][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.295459][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.313201][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.326308][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.370188][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.464550][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.492170][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.508687][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.520924][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.535170][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.550328][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.615243][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.735155][ T6812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.751649][ T6812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.762865][ T6812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.778318][ T6812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.821641][ T7021] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 191.986976][ T6840] veth0_vlan: entered promiscuous mode [ 192.156999][ T6840] veth1_vlan: entered promiscuous mode [ 192.192629][ T51] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 192.281845][ T51] usbhid 5-1:0.0: can't add hid device: -71 [ 192.302321][ T51] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 192.338063][ T51] usb 5-1: USB disconnect, device number 35 [ 192.367463][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.414477][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.601335][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.628174][ T6840] veth0_macvtap: entered promiscuous mode [ 192.640202][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.738475][ T7032] ebtables: ebtables: counters copy to user failed while replacing table [ 192.744398][ T6840] veth1_macvtap: entered promiscuous mode [ 192.816638][ T5275] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.853523][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.886015][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.915984][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.963009][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.978181][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.991554][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.012228][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.029336][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 193.045580][ T5275] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 193.059953][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.087670][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.104440][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.119323][ T5275] usb 1-1: Product: syz [ 193.125524][ T5275] usb 1-1: Manufacturer: syz [ 193.139494][ T5275] usb 1-1: SerialNumber: syz [ 193.169685][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.202610][ T5275] usb 1-1: config 0 descriptor?? [ 193.206427][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.232150][ T7050] vivid-008: disconnect [ 193.260342][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.294628][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.306248][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.334280][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.365947][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.376948][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.408349][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.424473][ T7059] loop8: detected capacity change from 0 to 7 [ 193.441132][ T7038] loop3: detected capacity change from 0 to 7 [ 193.446734][ T6840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.467271][ T7059] Dev loop8: unable to read RDB block 7 [ 193.473784][ T7059] loop8: AHDI p1 p2 [ 193.480915][ T6840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.482792][ T7038] Dev loop3: unable to read RDB block 7 [ 193.496174][ T7062] capability: warning: `syz.3.320' uses 32-bit capabilities (legacy support in use) [ 193.501308][ T7059] loop8: partition table partially beyond EOD, [ 193.512840][ T6840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.534206][ T7059] truncated [ 193.539950][ T7059] loop8: p1 size 7567738 extends beyond EOD, truncated [ 193.546019][ T7038] loop3: AHDI p1 p2 [ 193.550831][ T7038] loop3: partition table partially beyond EOD, truncated [ 193.554339][ T6840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.586100][ T7038] loop3: p1 size 7567738 extends beyond EOD, truncated [ 193.617716][ T5230] usb 1-1: USB disconnect, device number 13 [ 193.623901][ T5307] udevd[5307]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 193.701014][ T6221] udevd[6221]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 193.867845][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.869105][ T7048] vivid-008: reconnect [ 193.892774][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.926439][ T5278] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.974068][ T1837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.993100][ T1837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.086114][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 194.107130][ T5278] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 194.147028][ T5278] usb 4-1: config 0 has no interface number 0 [ 194.155529][ T5278] usb 4-1: config 0 interface 194 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.204396][ T5278] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 194.229095][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.272118][ T5278] usb 4-1: Product: syz [ 194.281071][ T5278] usb 4-1: Manufacturer: syz [ 194.285752][ T5278] usb 4-1: SerialNumber: syz [ 194.319636][ T5278] usb 4-1: config 0 descriptor?? [ 194.380692][ T5278] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now attached [ 194.449616][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456163][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594667][ T5275] usb 4-1: USB disconnect, device number 7 [ 194.615587][ T5275] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now disconnected [ 194.908070][ T7097] ebtables: ebtables: counters copy to user failed while replacing table [ 195.223656][ T7114] FAULT_INJECTION: forcing a failure. [ 195.223656][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 195.304445][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.0.329 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 195.314758][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.324863][ T7114] Call Trace: [ 195.328184][ T7114] [ 195.331149][ T7114] dump_stack_lvl+0x241/0x360 [ 195.335881][ T7114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.341136][ T7114] ? __pfx__printk+0x10/0x10 [ 195.345768][ T7114] ? fs_reclaim_acquire+0x93/0x140 [ 195.350907][ T7114] ? __pfx___might_resched+0x10/0x10 [ 195.356253][ T7114] should_fail_ex+0x3b0/0x4e0 [ 195.360985][ T7114] ? tomoyo_encode+0x26f/0x540 [ 195.365790][ T7114] should_failslab+0xac/0x100 [ 195.370512][ T7114] ? tomoyo_encode+0x26f/0x540 [ 195.375326][ T7114] __kmalloc_noprof+0xd8/0x400 [ 195.380170][ T7114] tomoyo_encode+0x26f/0x540 [ 195.384779][ T7114] tomoyo_realpath_from_path+0x59e/0x5e0 [ 195.390447][ T7114] tomoyo_path_number_perm+0x23a/0x880 [ 195.395961][ T7114] ? tomoyo_path_number_perm+0x208/0x880 [ 195.401638][ T7114] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.407673][ T7114] ? __fget_files+0x29/0x470 [ 195.412287][ T7114] ? __fget_files+0x3f3/0x470 [ 195.416992][ T7114] security_file_ioctl+0xc6/0x2a0 [ 195.422060][ T7114] __se_sys_ioctl+0x47/0x170 [ 195.426701][ T7114] do_syscall_64+0xf3/0x230 [ 195.431225][ T7114] ? clear_bhb_loop+0x35/0x90 [ 195.435933][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.441857][ T7114] RIP: 0033:0x7fd8d7b7def9 [ 195.446295][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.465916][ T7114] RSP: 002b:00007fd8d8a2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.474368][ T7114] RAX: ffffffffffffffda RBX: 00007fd8d7d35f80 RCX: 00007fd8d7b7def9 [ 195.482351][ T7114] RDX: 0000000020000080 RSI: 00000000c058534b RDI: 0000000000000004 [ 195.490333][ T7114] RBP: 00007fd8d8a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 195.498320][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.506302][ T7114] R13: 0000000000000000 R14: 00007fd8d7d35f80 R15: 00007fd8d7e5fa28 [ 195.514295][ T7114] [ 195.563390][ T7114] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.110688][ T7146] fuse: Unknown parameter 'Ö0E–-#¨¿)k' [ 196.117916][ T7146] netlink: 'syz.2.337': attribute type 2 has an invalid length. [ 196.125701][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.337'. [ 196.196561][ T941] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.232054][ T7148] [U]  [ 196.398427][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.430395][ T941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.454018][ T941] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 196.501364][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.538844][ T941] usb 1-1: config 0 descriptor?? [ 196.641583][ T7173] FAULT_INJECTION: forcing a failure. [ 196.641583][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.655487][ T7173] CPU: 1 UID: 0 PID: 7173 Comm: syz.1.343 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 196.665787][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 196.675884][ T7173] Call Trace: [ 196.679208][ T7173] [ 196.682185][ T7173] dump_stack_lvl+0x241/0x360 [ 196.686930][ T7173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.692193][ T7173] ? __pfx__printk+0x10/0x10 [ 196.696843][ T7173] ? __pfx_lock_release+0x10/0x10 [ 196.701930][ T7173] should_fail_ex+0x3b0/0x4e0 [ 196.706665][ T7173] _copy_from_user+0x2f/0xe0 [ 196.711316][ T7173] snd_seq_ioctl+0x1b9/0x400 [ 196.715960][ T7173] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 196.721136][ T7173] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 196.726278][ T7173] __se_sys_ioctl+0xf9/0x170 [ 196.730891][ T7173] do_syscall_64+0xf3/0x230 [ 196.735419][ T7173] ? clear_bhb_loop+0x35/0x90 [ 196.740126][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.746217][ T7173] RIP: 0033:0x7f85a9d7def9 [ 196.750660][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.770296][ T7173] RSP: 002b:00007f85aaad1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.778734][ T7173] RAX: ffffffffffffffda RBX: 00007f85a9f35f80 RCX: 00007f85a9d7def9 [ 196.786729][ T7173] RDX: 0000000020000080 RSI: 00000000c058534b RDI: 0000000000000004 [ 196.794719][ T7173] RBP: 00007f85aaad1090 R08: 0000000000000000 R09: 0000000000000000 [ 196.802706][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.810783][ T7173] R13: 0000000000000000 R14: 00007f85a9f35f80 R15: 00007f85aa05fa28 [ 196.818779][ T7173] [ 196.860316][ T7164] ebtables: ebtables: counters copy to user failed while replacing table [ 196.994057][ T941] usb 1-1: string descriptor 0 read error: -71 [ 196.996109][ T51] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 197.002575][ T941] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 197.071780][ T941] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 197.119317][ T941] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 197.157791][ T941] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 197.189718][ T941] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 197.189728][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 197.191476][ T51] usb 4-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config [ 197.229785][ T941] usb 1-1: USB disconnect, device number 14 [ 197.286226][ T51] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 197.339930][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 197.357985][ T7198] netlink: 168 bytes leftover after parsing attributes in process `syz.0.348'. [ 197.364820][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 197.378959][ T5275] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 197.399545][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 197.402265][ T51] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.428394][ T51] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.438108][ T51] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.447840][ T51] usb 4-1: Manufacturer: syz [ 197.458924][ T51] usb 4-1: config 0 descriptor?? [ 197.464705][ T7170] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 197.482067][ T51] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 197.547801][ T5275] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 197.568172][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.607503][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.622905][ T5275] usb 5-1: config 0 descriptor?? [ 197.645055][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.657813][ T5275] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 197.680847][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.685028][ T51] usb 4-1: USB disconnect, device number 8 [ 197.733563][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.752838][ T9] usb 2-1: SerialNumber: syz [ 197.976117][ T5279] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 198.166818][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 198.191476][ T5279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.221754][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.242341][ T5279] usb 3-1: Product: syz [ 198.253751][ T5279] usb 3-1: Manufacturer: syz [ 198.261058][ T5279] usb 3-1: SerialNumber: syz [ 198.287396][ T5279] usb 3-1: config 0 descriptor?? [ 198.435841][ C1] hrtimer: interrupt took 62425 ns [ 198.482582][ T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 198.520098][ T5279] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.628210][ T7238] syz.4.345 (7238): /proc/7182/oom_adj is deprecated, please use /proc/7182/oom_score_adj instead. [ 198.654860][ T9] usb 2-1: 0:2 : does not exist [ 198.670760][ T9] usb 2-1: unit 95 not found! [ 198.708590][ T51] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 198.740220][ T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.754675][ T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 198.782684][ T51] usb 1-1: config 1 has no interface number 0 [ 198.803698][ T51] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 198.843316][ T9] usb 2-1: USB disconnect, device number 22 [ 198.857264][ T51] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 198.896995][ T7244] FAULT_INJECTION: forcing a failure. [ 198.896995][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.938997][ T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 198.952481][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.957105][ T5307] udevd[5307]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.979952][ T7244] CPU: 1 UID: 0 PID: 7244 Comm: syz.1.355 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 198.990251][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 199.000329][ T7244] Call Trace: [ 199.003615][ T7244] [ 199.006576][ T7244] dump_stack_lvl+0x241/0x360 [ 199.011387][ T7244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.016615][ T7244] ? __pfx__printk+0x10/0x10 [ 199.021240][ T7244] should_fail_ex+0x3b0/0x4e0 [ 199.025959][ T7244] _copy_to_user+0x2f/0xb0 [ 199.030437][ T7244] simple_read_from_buffer+0xca/0x150 [ 199.035831][ T7244] proc_fail_nth_read+0x1e9/0x250 [ 199.040892][ T7244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.046474][ T7244] ? rw_verify_area+0x55e/0x6f0 [ 199.051367][ T7244] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.056931][ T7244] vfs_read+0x201/0xbc0 [ 199.061100][ T7244] ? __pfx_lock_release+0x10/0x10 [ 199.066165][ T7244] ? __pfx_vfs_read+0x10/0x10 [ 199.070856][ T7244] ? __fget_files+0x3f3/0x470 [ 199.075566][ T7244] ? __fdget_pos+0x24e/0x320 [ 199.080164][ T7244] ksys_read+0x1a0/0x2c0 [ 199.084424][ T7244] ? __pfx_ksys_read+0x10/0x10 [ 199.089308][ T7244] ? do_syscall_64+0x100/0x230 [ 199.094101][ T7244] ? do_syscall_64+0xb6/0x230 [ 199.098791][ T7244] do_syscall_64+0xf3/0x230 [ 199.103304][ T7244] ? clear_bhb_loop+0x35/0x90 [ 199.107991][ T7244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.113893][ T7244] RIP: 0033:0x7f85a9d7c93c [ 199.118318][ T7244] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 199.137943][ T7244] RSP: 002b:00007f85aaad1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 199.146403][ T7244] RAX: ffffffffffffffda RBX: 00007f85a9f35f80 RCX: 00007f85a9d7c93c [ 199.154383][ T7244] RDX: 000000000000000f RSI: 00007f85aaad10a0 RDI: 0000000000000005 [ 199.162376][ T7244] RBP: 00007f85aaad1090 R08: 0000000000000000 R09: 0000000000000000 [ 199.170366][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.178353][ T7244] R13: 0000000000000000 R14: 00007f85a9f35f80 R15: 00007f85aa05fa28 [ 199.186348][ T7244] [ 199.199587][ T51] usb 1-1: Product: syz [ 199.212614][ T51] usb 1-1: Manufacturer: syz [ 199.222426][ T51] usb 1-1: SerialNumber: syz [ 199.336564][ T5230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.506212][ T5230] usb 4-1: device descriptor read/64, error -71 [ 199.655012][ T7248] ebtables: ebtables: counters copy to user failed while replacing table [ 199.680997][ T8] usb 1-1: USB disconnect, device number 15 [ 199.776097][ T5230] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 199.836819][ T7253] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 199.845780][ T7253] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.357'. [ 199.936008][ T5230] usb 4-1: device descriptor read/64, error -71 [ 200.033783][ T5279] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 200.066302][ T5230] usb usb4-port1: attempt power cycle [ 200.126674][ T5275] gp8psk: usb in 146 operation failed. [ 200.152052][ T5275] gp8psk: failed to get FW version [ 200.164926][ T5275] gp8psk: usb in 149 operation failed. [ 200.192534][ T5275] gp8psk: failed to get FPGA version [ 200.209833][ T5275] gp8psk: usb out operation failed. [ 200.215685][ T5275] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 200.231404][ T5275] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 200.243937][ T5275] usb 5-1: USB disconnect, device number 36 [ 200.253369][ T7261] FAULT_INJECTION: forcing a failure. [ 200.253369][ T7261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.271475][ T7261] CPU: 1 UID: 0 PID: 7261 Comm: syz.4.360 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 200.281876][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 200.291980][ T7261] Call Trace: [ 200.295301][ T7261] [ 200.298269][ T7261] dump_stack_lvl+0x241/0x360 [ 200.303056][ T7261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.308316][ T7261] ? __pfx__printk+0x10/0x10 [ 200.312963][ T7261] ? __pfx_lock_release+0x10/0x10 [ 200.318043][ T7261] ? __lock_acquire+0x1384/0x2050 [ 200.323145][ T7261] should_fail_ex+0x3b0/0x4e0 [ 200.327884][ T7261] _copy_from_user+0x2f/0xe0 [ 200.332526][ T7261] kstrtouint_from_user+0xc6/0x190 [ 200.337686][ T7261] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 200.343455][ T7261] ? __pfx_lock_acquire+0x10/0x10 [ 200.348584][ T7261] proc_fail_nth_write+0xaa/0x2d0 [ 200.353655][ T7261] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 200.359589][ T7261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.365248][ T7261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.370899][ T7261] vfs_write+0x29c/0xc90 [ 200.375167][ T7261] ? __pfx_vfs_write+0x10/0x10 [ 200.379954][ T7261] ? __fget_files+0x3f3/0x470 [ 200.384666][ T7261] ? __fdget_pos+0x24e/0x320 [ 200.389274][ T7261] ksys_write+0x1a0/0x2c0 [ 200.393659][ T7261] ? __pfx_ksys_write+0x10/0x10 [ 200.398529][ T7261] ? do_syscall_64+0x100/0x230 [ 200.403314][ T7261] ? do_syscall_64+0xb6/0x230 [ 200.408016][ T7261] do_syscall_64+0xf3/0x230 [ 200.412548][ T7261] ? clear_bhb_loop+0x35/0x90 [ 200.417421][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.423356][ T7261] RIP: 0033:0x7f264717c9df [ 200.427810][ T7261] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 200.447431][ T7261] RSP: 002b:00007f2647fe4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 200.455868][ T7261] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f264717c9df [ 200.463949][ T7261] RDX: 0000000000000001 RSI: 00007f2647fe40a0 RDI: 0000000000000004 [ 200.471965][ T7261] RBP: 00007f2647fe4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.480213][ T7261] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 200.488198][ T7261] R13: 0000000000000000 R14: 00007f2647335f80 R15: 00007f264745fa28 [ 200.496192][ T7261] [ 200.558845][ T5230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 200.594539][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'. [ 200.647488][ T5230] usb 4-1: device descriptor read/8, error -71 [ 200.848346][ T29] audit: type=1326 audit(1726742229.279:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 200.930526][ T29] audit: type=1326 audit(1726742229.279:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 200.956811][ T5230] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.984349][ T5275] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 200.996993][ T5230] usb 4-1: device descriptor read/8, error -71 [ 201.046924][ T29] audit: type=1326 audit(1726742229.309:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.096062][ T29] audit: type=1326 audit(1726742229.309:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.130370][ T29] audit: type=1326 audit(1726742229.309:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.155965][ T5275] usb 1-1: Using ep0 maxpacket: 32 [ 201.193513][ T5275] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.195040][ T9] usb 3-1: USB disconnect, device number 11 [ 201.213469][ T5230] usb usb4-port1: unable to enumerate USB device [ 201.265675][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 201.286901][ T29] audit: type=1326 audit(1726742229.309:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.350996][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 201.416209][ T5275] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.455324][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.455619][ T29] audit: type=1326 audit(1726742229.319:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2647174ea7 code=0x7ffc0000 [ 201.496862][ T29] audit: type=1326 audit(1726742229.319:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2647119869 code=0x7ffc0000 [ 201.529033][ T29] audit: type=1326 audit(1726742229.319:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.577868][ T5275] usb 1-1: config 0 descriptor?? [ 201.615390][ T7276] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.638823][ T5275] hub 1-1:0.0: USB hub found [ 201.646432][ T5230] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 201.711056][ T29] audit: type=1326 audit(1726742229.319:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f264717def9 code=0x7ffc0000 [ 201.806089][ T5230] usb 2-1: Using ep0 maxpacket: 16 [ 201.814561][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.876891][ T5230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.922629][ T7288] ebtables: ebtables: counters copy to user failed while replacing table [ 201.933215][ T5230] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 201.984765][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.035379][ T5230] usb 2-1: config 0 descriptor?? [ 202.542453][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.582933][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.626065][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.698491][ T5230] microsoft 0003:045E:00F9.000D: unknown main item tag 0x0 [ 202.735562][ T5230] microsoft 0003:045E:00F9.000D: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0 [ 202.761838][ T5230] microsoft 0003:045E:00F9.000D: no inputs found [ 202.783616][ T5230] microsoft 0003:045E:00F9.000D: could not initialize ff, continuing anyway [ 202.835980][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 202.852504][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.870299][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.885753][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 202.898666][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.943314][ T9] usb 4-1: config 0 descriptor?? [ 203.386091][ T9] thrustmaster 0003:044F:B323.000E: hidraw1: USB HID v0.04 Device [HID 044f:b323] on usb-dummy_hcd.3-1/input0 [ 203.401774][ T9] thrustmaster 0003:044F:B323.000E: no inputs found [ 203.719328][ T5275] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 203.779475][ T5275] usbhid 1-1:0.0: can't add hid device: -71 [ 203.810132][ T5275] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.859380][ T5275] usb 1-1: USB disconnect, device number 16 [ 203.939249][ T7322] loop8: detected capacity change from 0 to 7 [ 203.977151][ T7322] Dev loop8: unable to read RDB block 7 [ 204.038642][ T7322] loop8: AHDI p1 p2 [ 204.043250][ T7322] loop8: partition table partially beyond EOD, truncated [ 204.089567][ T7322] loop8: p1 start 18631 is beyond EOD, truncated [ 204.317539][ T7326] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 204.527721][ T9] usb 2-1: USB disconnect, device number 23 [ 204.732995][ T7333] openvswitch: netlink: Port 402653184 exceeds max allowable 65535 [ 204.977522][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 205.056004][ T51] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 205.156007][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 205.201664][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.216850][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 205.227532][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.254925][ T51] usb 1-1: config 1 has an invalid interface number: 3 but max is 2 [ 205.258245][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 205.272828][ T51] usb 1-1: config 1 has no interface number 1 [ 205.299206][ T9] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 205.315253][ T9] usb 2-1: Manufacturer: syz [ 205.343922][ T51] usb 1-1: too many endpoints for config 1 interface 3 altsetting 5: 40, using maximum allowed: 30 [ 205.351403][ T9] usb 2-1: config 0 descriptor?? [ 205.389822][ T51] usb 1-1: config 1 interface 3 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 40 [ 205.425570][ T51] usb 1-1: config 1 interface 3 has no altsetting 0 [ 205.447626][ T51] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.473151][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.496860][ T51] usb 1-1: Product: syz [ 205.509322][ T51] usb 1-1: Manufacturer: syz [ 205.523267][ T51] usb 1-1: SerialNumber: syz [ 205.578734][ T7331] ------------[ cut here ]------------ [ 205.584371][ T7331] WARNING: CPU: 1 PID: 7331 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 205.594723][ T7331] Modules linked in: [ 205.598727][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.1.379 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 205.609115][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.619304][ T7331] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 205.625375][ T7331] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 cc 4c 3e f6 e9 95 f3 ff ff e8 d2 c9 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 205.645240][ T7331] RSP: 0018:ffffc900092cfc40 EFLAGS: 00010293 [ 205.651621][ T7331] RAX: ffffffff8bbd152e RBX: ffffc900092cfe0c RCX: ffff888021735a00 [ 205.659764][ T7331] RDX: 0000000000000000 RSI: 0000000000000504 RDI: 0000000000000007 [ 205.667986][ T7331] RBP: ffffc900092cfd40 R08: ffffffff8bbd121b R09: 1ffffffff2037f35 [ 205.676853][ T7331] R10: dffffc0000000000 R11: fffffbfff2037f36 R12: ffff888064d72000 [ 205.684941][ T7331] R13: 0000000000000504 R14: 1ffff92001259f94 R15: ffffc900092cfcc0 [ 205.693297][ T7331] FS: 00007f85aaad16c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 205.702387][ T7331] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.709112][ T7331] CR2: 00007f85aaaaff98 CR3: 000000004a680000 CR4: 00000000003506f0 [ 205.717252][ T7331] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.725323][ T7331] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.733668][ T7331] Call Trace: [ 205.737088][ T7331] [ 205.740089][ T7331] ? __warn+0x168/0x4e0 [ 205.744296][ T7331] ? io_sq_offload_create+0xd2f/0xfd0 [ 205.749866][ T7331] ? report_bug+0x2b3/0x500 [ 205.754424][ T7331] ? io_sq_offload_create+0xd2f/0xfd0 [ 205.759929][ T7331] ? handle_bug+0x60/0x90 [ 205.764361][ T7331] ? exc_invalid_op+0x1a/0x50 [ 205.769160][ T7331] ? asm_exc_invalid_op+0x1a/0x20 [ 205.774322][ T7331] ? io_sq_offload_create+0xa1b/0xfd0 [ 205.780278][ T7331] ? io_sq_offload_create+0xd2e/0xfd0 [ 205.786097][ T7331] ? io_sq_offload_create+0xd2f/0xfd0 [ 205.791568][ T7331] ? __pfx_io_sq_offload_create+0x10/0x10 [ 205.797563][ T7331] ? io_allocate_scq_urings+0x426/0x640 [ 205.803216][ T7331] io_uring_create+0x792/0x1360 [ 205.808305][ T7331] __se_sys_io_uring_setup+0x2ba/0x330 [ 205.813861][ T7331] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 205.820105][ T7331] ? do_syscall_64+0x100/0x230 [ 205.824937][ T7331] ? do_syscall_64+0xb6/0x230 [ 205.829816][ T7331] do_syscall_64+0xf3/0x230 [ 205.834393][ T7331] ? clear_bhb_loop+0x35/0x90 [ 205.839196][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.845154][ T7331] RIP: 0033:0x7f85a9d7def9 [ 205.849793][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.869561][ T7331] RSP: 002b:00007f85aaad0fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 205.878140][ T7331] RAX: ffffffffffffffda RBX: 00007f85a9f35f80 RCX: 00007f85a9d7def9 [ 205.887000][ T7331] RDX: 0000000020000380 RSI: 0000000020000080 RDI: 0000000000002ddd [ 205.895384][ T7331] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000380 [ 205.903568][ T7331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.911753][ T7331] R13: 0000000020000240 R14: 0000000000002ddd R15: 0000000020000380 [ 205.919826][ T7331] [ 205.922878][ T7331] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 205.930205][ T7331] CPU: 1 UID: 0 PID: 7331 Comm: syz.1.379 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 205.940461][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.950529][ T7331] Call Trace: [ 205.953822][ T7331] [ 205.956762][ T7331] dump_stack_lvl+0x241/0x360 [ 205.961469][ T7331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.966687][ T7331] ? __pfx__printk+0x10/0x10 [ 205.971321][ T7331] ? vscnprintf+0x5d/0x90 [ 205.975665][ T7331] panic+0x349/0x870 [ 205.979622][ T7331] ? __warn+0x177/0x4e0 [ 205.983822][ T7331] ? __pfx_panic+0x10/0x10 [ 205.988294][ T7331] __warn+0x34b/0x4e0 [ 205.992306][ T7331] ? io_sq_offload_create+0xd2f/0xfd0 [ 205.997709][ T7331] report_bug+0x2b3/0x500 [ 206.002070][ T7331] ? io_sq_offload_create+0xd2f/0xfd0 [ 206.007468][ T7331] handle_bug+0x60/0x90 [ 206.011657][ T7331] exc_invalid_op+0x1a/0x50 [ 206.016274][ T7331] asm_exc_invalid_op+0x1a/0x20 [ 206.021156][ T7331] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 206.027170][ T7331] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 cc 4c 3e f6 e9 95 f3 ff ff e8 d2 c9 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 206.046814][ T7331] RSP: 0018:ffffc900092cfc40 EFLAGS: 00010293 [ 206.052995][ T7331] RAX: ffffffff8bbd152e RBX: ffffc900092cfe0c RCX: ffff888021735a00 [ 206.060982][ T7331] RDX: 0000000000000000 RSI: 0000000000000504 RDI: 0000000000000007 [ 206.069054][ T7331] RBP: ffffc900092cfd40 R08: ffffffff8bbd121b R09: 1ffffffff2037f35 [ 206.077141][ T7331] R10: dffffc0000000000 R11: fffffbfff2037f36 R12: ffff888064d72000 [ 206.085218][ T7331] R13: 0000000000000504 R14: 1ffff92001259f94 R15: ffffc900092cfcc0 [ 206.093221][ T7331] ? io_sq_offload_create+0xa1b/0xfd0 [ 206.098620][ T7331] ? io_sq_offload_create+0xd2e/0xfd0 [ 206.104022][ T7331] ? __pfx_io_sq_offload_create+0x10/0x10 [ 206.109763][ T7331] ? io_allocate_scq_urings+0x426/0x640 [ 206.115333][ T7331] io_uring_create+0x792/0x1360 [ 206.120205][ T7331] __se_sys_io_uring_setup+0x2ba/0x330 [ 206.125707][ T7331] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 206.131714][ T7331] ? do_syscall_64+0x100/0x230 [ 206.136508][ T7331] ? do_syscall_64+0xb6/0x230 [ 206.141214][ T7331] do_syscall_64+0xf3/0x230 [ 206.145736][ T7331] ? clear_bhb_loop+0x35/0x90 [ 206.150433][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.156351][ T7331] RIP: 0033:0x7f85a9d7def9 [ 206.160778][ T7331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.180413][ T7331] RSP: 002b:00007f85aaad0fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 206.188861][ T7331] RAX: ffffffffffffffda RBX: 00007f85a9f35f80 RCX: 00007f85a9d7def9 [ 206.196854][ T7331] RDX: 0000000020000380 RSI: 0000000020000080 RDI: 0000000000002ddd [ 206.204841][ T7331] RBP: 0000000020000080 R08: 0000000000000000 R09: 0000000020000380 [ 206.212829][ T7331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 206.220813][ T7331] R13: 0000000020000240 R14: 0000000000002ddd R15: 0000000020000380 [ 206.228818][ T7331] [ 206.232138][ T7331] Kernel Offset: disabled [ 206.236489][ T7331] Rebooting in 86400 seconds..