last executing test programs: 9.007093223s ago: executing program 1 (id=410): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000900)="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", 0xff10}], 0x2}, 0x0) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000)="8e9490fb211f14563833630cb2ab63a2d107e106215f0fc106e3aefad1c372131b1a6b728e1673fdee46909b398eff3749da645e9ee2cbb9dfe503024e9bdd076229f31fb8b08bc1c527c3c54f8023d91837e9da84a873a36ea99f4484f6928dc3bd3418f15c1361cbb62eab017ca2286c5439a78026a23ecc0f301ee7551ffc656b95e321534d4520819bbc0eb991aa983fab14b25c86bfef9b173c6577e7c3b33f117fd3b03f964343d3e2ed84900780bb3b5e87f8f4028e055f62bbc4f02f260e777a94c06079e5f4608b5771bfc2d0d7b91d7cb3af6e40b4d516d191a6b8237a0c74e916b94e6f17885d6ae1", &(0x7f0000000100)="5bef68a5c014d97c56107ad124756070940f7cd94cace53546445a71e02d0cb3b7fed7982b4f60bc23ed874fc6c9ee646f40cdefc58f2ed8179f2090d38e728ac30d73f1185a91ab8e1794df3c6efc72d9ace5a46cc2290bdc7676c1655ff8b2add7fa8b6d10bf13be1f1f72f4cb91c344590547f4009a6f0b25f6a8f8102bd524d1343d7a265075fc8991e6f29a05dfdd000000000000000000"}}, &(0x7f0000000200)) r1 = socket$kcm(0xa, 0x3, 0x3a) unshare(0x28000400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) r3 = memfd_secret(0x0) mmap$snddsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) modify_ldt$write(0x1, &(0x7f0000000180)={0x200}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c000000290000000419dd1fa30b73c68c1f000000"], 0xc}, 0x8080) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) fcntl$dupfd(r4, 0x406, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x3f, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) r6 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x100}, &(0x7f0000000040), &(0x7f0000000280)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x8, 0x80, 0x0, 0x7ff7fdff}]}) 8.62444391s ago: executing program 3 (id=412): write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000080)={0xc, &(0x7f0000000440)={0x0, 0x7, 0xbf, {0xbf, 0xb, "9691a6e4f1afbf4c8e048eb2b1ffdbfc95da9cfce05bd958ad7db9016c93a3ce4e7a9ea56738e6cff8c54ea9e3a120d45b73197096e56e940b82b7072f9ba2f7200b230f6b3f6514d2448de7e34badba22dcadeeb681a9e137a8bdf2963517efe81d3675604dd4e6e03062c8a0307bca94526ee9be8a871ed35e3be1a8ad61fa890698a9e134cc2c4a83ee8df5ad9d47335e714bc1190d652d5a3c8f0b41e9c6508b1097244edf9ad71978436509d843db167412eef8d93abbe83a3716"}}, &(0x7f0000000300)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "4a77f367c372f01d9e00f3ca5d7407ad312990b6c2753fc3186a3d6b0b89e1881679a6ea804a8b3f7d097c7575a266a92a0ea740f4d94277aad9be6906f04df787b2f4f6fa09653867333c17a5fbc927912cb89919d4e465e24ffd17cac07b5c7767a99a62b05c258c"}}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, 0x0, 0x0, 0x8008801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) geteuid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00M3'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, 'aBT'}, 0x0}) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16], 0x34}}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, 0x0, 0x1e8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000007c0)={0x8, &(0x7f0000000800)=[{0x0, 0x5, 0x70, 0xae8}, {0x4, 0x4, 0x4, 0x8}, {0x5, 0xe9, 0x7, 0x2}, {0x9, 0x2d, 0x1, 0x6}, {0x449, 0x8, 0x2, 0x400}, {0xa, 0x0, 0x3, 0x9}, {0x1ff, 0xa, 0x3b, 0x2}, {0x1, 0x4, 0x3, 0xa}]}, 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f00000000c0)=0x9, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f00000001c0)=0x10) 8.031241026s ago: executing program 1 (id=413): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x10, 0xffffffffffffffff, 0x8210000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x35d3, &(0x7f0000000140)={0x0, 0xbfffffff, 0x0, 0x0, 0x393}, &(0x7f0000002040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000002100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x4004480f, &(0x7f00000000c0)={0x2}) ioctl$EVIOCGBITSND(r7, 0x8000451a, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0xd, 0x81) mount$fuse(0x0, &(0x7f0000002000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004280)=ANY=[@ANYBLOB, @ANYRESHEX=r8, @ANYBLOB="2c726f6f746d6f64653d3030304c68d95c28471e629ab9735e88d2133030303030303030303030303030", @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d60e4bafdbb31f0624aee7f92cf4ea416aa1bb599b1e799906f3c7ae8ced115846487e9370153b209433268c8cf025cdd3036384f7545baa206a89a6a5f302f5dc8052e74aeb216cf4019f9fb2b0e10445dd5cfd7748a91b744849cc7826283340000", @ANYRESDEC=r5]) read$FUSE(r10, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000004200)={0x50, 0x0, r11, {0x7, 0x1f, 0x0, 0x24a2401}}, 0x50) 7.435943716s ago: executing program 2 (id=414): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x200000100000011, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0xd, 0xfffffff9, 0x8, 0x0, 0x7, 0x9, 0xfffffff8}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xfd, 0x9, 0x9}}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0xa}, 0x90) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r2 = fsopen(&(0x7f0000000100)='ncpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='s7^rce', &(0x7f00000000c0)='%(:2', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)=@keyring) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4004011) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) 6.494842425s ago: executing program 2 (id=416): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_subtree(r0, 0x0, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f000001b180)=ANY=[@ANYBLOB="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"], 0x6cc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x7}, 0x90) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000300)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f30281", 0x3c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)}, {&(0x7f0000000640)="e0af4591b12559d22683601448ddbdbb54419e01769776466584cae8f8f679e9f8d8c6d60267b554265cfde8b0a88381808210f3bdd6c24b7d71eea68d068447334ec8d629d8e556126b58276f99fb557dfcf9863b057c093f7269efb29e8b50ea9e33c31595e4a983cfaa26ff63546d0ce55725999149bc0f713b6ec628cd9d1ff11b1865ed8ea3a3e884ed44ebdd400cf8f3b722ef8135b522bde4ae5e8980c3ce3c6afe96a95bc44302a3", 0xac}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="4a2cbab0ec60febe59b7b4148f35f1e8043bc7e3706d916fdcd3e9ad319e0d71da94ad5fab4709fad14eebddbe35077387fb577bcc69c4d64fd4555b7ab501306dde4edd77f95e73fd13d292b300c74b7050537f3b0968059a7517d81a5557a087abea0cade5a057f7393d83064a3a8786b04f1760be65730fc6acfa1957b8650c1953d569fb68be67", 0x89}, {&(0x7f00000007c0)="a2cbe65846bbd4802ff19023d15e13974a055138da6c186208677b87158b9087836da1157f0c3b3730905285d3ba1687e28704ccc09fe67f89f33dbbac2c70c02b403adadd9aa6f5dbef44bda3f0107adce81be498c7357492f873f0badad15d5545b85b288e884be8849508c930ec44fde1dfde466e8cc599b889b284453d67f9d7ba1e4e7e37b795de85cb4ecab54d0dd14afce5752679d043cffec622f3e3876f3695516db06e9c95f8cb465200c4deae1280ddfc0fb5bb723f769969346608a6eb", 0xc3}, {&(0x7f0000000580)="e2b57489b0d7757b5c12a01a247dc8c76dc34f00256190e699cb39da7e09ad3e80d48fdcccad7a190f6389ef10e309fa", 0x30}, {&(0x7f0000000940)="4f3d83d7ff4e82228e5748158abbbdcbc2c472338937b9838160de3622d4f6b7e6bdce656681b72ad4b649057cfead01d6ed0737890e7585252f095629873a6f6bad3f84ec7c692368ff0b04317882efbb3d9d2ee067e41eed282ab81be77bd6668c4741", 0x64}, {&(0x7f00000005c0)="c38bf18ff1f92bc056da9dc8aea80dc61ad83686b7581e5f1596c8cc8b05ddaac3fad17e0fae4b158ff9766b1329e5774bd5", 0x32}, {&(0x7f00000009c0)="9e303c5958f1f6563841d1536785c9368620b5a42899aa2c1a44aff730316bd263c9ddfb5b8922b1b5590962b47b6cadea14867a976ea22f35c44be7cf1673470a8f2a8fec47920228b990aadd31e17001347a94ca6a474b589e5a9e2c1b99d69efc65f7cd99906298df6076250a35459a74d0e8df053fb444de9d609987b5bc129d8e507ec28bbda3da8b39bf8ac8e4d198ecced23b146eed116cc4d7ba57a1fdb53b310721278fbd3a5d8de5e3947d66ef343589c266a59006cf3f8d6468ca6c8c8845918723f6749c3b644ddfb94d8979fb13206bde801bb06c95cbf26c160785bc47d9483edd2eb548fd4b68880c8b1234e6f71dcc994c", 0xf9}, {&(0x7f00000008c0)="4ced0f39bcdabbd6ba39b145f1c38b6c27c41b449d8f41b735410cdaef007645e65ff9b9f060f213f9", 0x29}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="b40000000000000007000000442c5a8000000002fffffffa0001000100000645000000060000000800000003000000040000b4f70000000601071bd1000000007f000001ac1414bbe0000002e0000002ffffffff44148ff0000000030000000900000005ffffffff8645680523b101031e060d041b16c59ebaf6320a98b80610f25384720c9966f413285d96d5790510baad2d2d1fbcc42c16db227f31e1000f404c15f8e915b4869334e180c89404010000000010000000000000000100000000000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414bb180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ffffffffac1414191c0000000000d0c2feba9c9b7b2044d5fdf1000800000008000000000000009b7232db39e9000000"], 0x110}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f000001b600)="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", 0xf00}, {&(0x7f0000000b80)="f911c2b32445aea393792d9d93b48448de805699d8e00fd0b528e051bfb14e19524e1a1e539909b14eabb906539215bfd2dac3ee2a0927553d8cb0c77d021a", 0x3f}, {&(0x7f0000000bc0)="44ad54bb54c9868219773b8b19", 0xd}], 0x3}}], 0x5, 0x4000044) io_uring_enter(r1, 0x7f71, 0xf0f, 0x8, &(0x7f00000001c0)={[0x9, 0x800]}, 0x8) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000040)={0x1, 0x1}, 0x2) 6.203532562s ago: executing program 0 (id=417): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000880eb610050b3f176b9d0102030109021200010000000009040c1f981f81ccfc7b43232a5f6b8f0317000000741a9fe6"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8c0}, 0x4000800) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f000001be40)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/239, 0xef}, {&(0x7f00000008c0)=""/148, 0x94}, {0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f000001aa80)=""/4096, 0x1000}, {&(0x7f000001ba80)=""/212, 0xd4}, {&(0x7f000001bb80)=""/157, 0x9d}, {0x0}, {0x0}], 0xe, 0x5c5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x57) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r3) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0xf) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0xf, 0x0, &(0x7f0000000100)) keyctl$get_persistent(0x16, 0x0, r4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) keyctl$invalidate(0x15, 0x0) preadv(r8, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, 0x0) syz_clone(0x14800a00, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000000)) 5.97531804s ago: executing program 3 (id=418): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x80}, @IFLA_BR_MCAST_QUERY_INTVL={0xc}]}}}]}, 0x50}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='virtiofs\x00', &(0x7f0000000140)='\x00', 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x0, &(0x7f0000000040), &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000080)={0x1, 0x951}) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) socket$netlink(0x10, 0x3, 0x4) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x8000010) keyctl$read(0xb, r10, &(0x7f0000000100)=""/8, 0x8) bind$inet6(r8, &(0x7f0000000240)={0xa, 0x4e21, 0x1000, @local, 0x7}, 0x1c) 5.37716027s ago: executing program 2 (id=419): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x3, 0x6, @remote}, 0x10) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc0405627, &(0x7f0000000080)={0x980900}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001b00), 0xd8f41574) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8008743f, &(0x7f0000000180)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x3}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x5b24, 0x0) 5.373584892s ago: executing program 1 (id=430): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000380)=ANY=[@ANYBLOB="03680d28c881e2dc3d2b222ddac56cb91de82f412ddad7f46522e58746d6028f1a120a090d22e9c90b4e73637f42d3af18c5bb1895fcaaba9e99e32693cda4f5fee3a6c22a0f48b8f7d5e1d434"], 0x4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000036680)=""/102388, 0x18ff4}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r1, r1, 0x80000) socket$nl_generic(0x11, 0x3, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e400ff0038"], 0x0) socket$kcm(0xa, 0x2, 0x73) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90010000c000500"], 0x15) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x2, 0x0) set_mempolicy(0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r4, 0xc008af12, &(0x7f00000001c0)) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0/../file0\x00') fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc240, 0x0) listen(0xffffffffffffffff, 0x0) 4.797549378s ago: executing program 3 (id=421): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x0, 0x0, 0x6}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000001800)=ANY=[], 0xfdef) pipe(&(0x7f0000000040)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) readv(r5, &(0x7f0000003480)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(r6, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x20000, 0x0, 0x0, 0x2}}, 0x48) 4.442179574s ago: executing program 3 (id=422): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r1, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000002380)={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x55b6, 0x10100, 0x2}, &(0x7f00000000c0), &(0x7f0000000100)) sched_setaffinity(0x0, 0xffffffffffffff0f, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x5b2b4293}], 0x1, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, 0x0) bind$alg(r5, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000040071108b000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001d00000009b2b2c10d2117f75fe5da000000000000000200000d0000000006000000000000000000000000000097a17fea0f253b5f7b9db000d98c000c1addc9a8b505c8ae3c6f323f9dd9ef4128c2c98850e5c1eb149c9fbf1e165fb102eda723f3d3e2e26c6a630013d20f59112b541f53f019fd1a51e740d05c54de57e6f73262028adb03450083cf388548d85e7aba5251"], &(0x7f0000000180)=""/129, 0x3d, 0x81, 0x1}, 0x20) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2f4}}, 0x0) 3.72373304s ago: executing program 1 (id=424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) r1 = io_uring_setup(0x7814, &(0x7f0000000280)={0x0, 0xe522, 0x400, 0x2, 0x2b8}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000000101"], 0xf8}}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 3.447387583s ago: executing program 0 (id=426): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "140000002300"}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map}, 0x10) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bd"], 0x2c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040), 0x10) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioperm(0x0, 0x0, 0x1f) socket$alg(0x26, 0x5, 0x0) r2 = semget(0x3, 0x4, 0x610) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)) semget(0x1, 0x0, 0x7b1) semctl$IPC_RMID(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x60, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) 3.297500104s ago: executing program 3 (id=427): r0 = socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18009500000000006ede00"/24], &(0x7f00000002c0)='syzkaller\x00', 0xa, 0xfe93, 0x0, 0x0, 0x0, '\x00', r4}, 0xd3) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000003245ac848536db3306272be590be5c710007010000f8ffffffb702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r7, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r6, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}}, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(cast6-generic)\x00'}, 0x58) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000000001000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001007379"], 0x7c}}, 0x0) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000800)={0x10000004}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008c5c100b7"], 0x0}, 0x90) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 3.107334449s ago: executing program 4 (id=429): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000002640), 0x0, 0x0) lseek(r4, 0x4, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300)={&(0x7f0000000100), 0x8}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000140)=0x7) unshare(0x20020400) setns(r1, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.895969475s ago: executing program 0 (id=431): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x1a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x5, 0x2, 0xf6, "b82a15", 0x6b}, {@none, 0x59, 0x5, 0x1, "9f7bb3", 0x4}, {@any, 0x5, 0x6, 0x72, "f6a2fd", 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x60, 0x40, 0xbb, "f6e6ee", 0x7}]}}}, 0x3c) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0xe, 0xc8, 0x15}}}, 0x8) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x14, 0x0, 0x4f6}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="8a8d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) setresuid(0x0, 0xee00, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fdffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000280)={0x2, 0x4e21, @private=0xa010101}, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000004c0)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}, @ip_retopts, @ip_tos_u8={{0x0, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x7}}]}}], 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x301, 0x0, 0x25dfdbfd, {0x24}}, 0xffffffffffffffcf}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4088}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf25060000006b050180060004004e24000008000500000000005c0001800c0007000400000004000000080006006f766600080009000a000000060002006c00000008000b007369700008000500020000000c0007"], 0x84}}, 0x0) 2.536517957s ago: executing program 1 (id=432): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0xbf4, &(0x7f0000000100)) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x0) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x40, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket(0x26, 0xa, 0x3) socket(0xa, 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, &(0x7f0000001ec0)='f'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.374348535s ago: executing program 0 (id=433): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0xc9, &(0x7f0000000340)={'veth1_to_bond\x00', @ifru_names='pim6reg0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r2, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.340276032s ago: executing program 3 (id=434): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000008c00220008000300", @ANYRES32=r5], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0x98}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xcc71) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18fe2}], 0x1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x3c020000) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000500)={0x40000000, 0x0, "0a1f511f900700427ff44fba1abc61019d30fd87819aba0a3fb25f2167d30b0e"}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0xfffeffff}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}]}) syz_open_procfs$namespace(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.221079807s ago: executing program 4 (id=435): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x200000100000011, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000380)=@req3={0xd, 0xfffffff9, 0x8, 0x0, 0x7, 0x9, 0xfffffff8}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0xfd, 0x9, 0x9}}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000140)='GPL\x00', 0xa}, 0x90) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r2 = fsopen(&(0x7f0000000100)='ncpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='s7^rce', &(0x7f00000000c0)='%(:2', 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000280)='asymmetric\x00', &(0x7f0000000340)=@keyring) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4004011) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x88010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8905, 0x0) 2.070271899s ago: executing program 2 (id=436): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e1f0a00cd000001aaaaaa"], 0x22) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x0, r5}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x1, 0x0, 0x1, r5}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r7) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r8, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x25) r10 = dup(r3) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000240)="26360f09b9800000c00f3235000400000f302e672e260f01c30fae3d00000000490fc71cc6c4e1d25934fc673e67470f30f3470f6f5175400f1c180f06"}], 0x1, 0x0, 0x0, 0xfffffffffffffda3) 1.844392175s ago: executing program 4 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0xbf, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x4}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x80108906, 0x0) close(r2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x20000078) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r3, 0x1c3c4000) close(0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x32, 0x0, 0x0) shutdown(r1, 0x1) r4 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x2) sendto$inet6(r5, &(0x7f00000001c0)='E', 0x1, 0x840, 0x0, 0xffffffffffffff8a) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000140)={'veth0_to_hsr\x00', {0x2, 0x0, @multicast2}}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) getsockopt$sock_buf(r4, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x18) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x2f6, 0x4) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000200), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5}, 0x1c) 1.531296836s ago: executing program 4 (id=438): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000480)}) socket(0x840000000002, 0x3, 0x100) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x0, 0x8, 0x1}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}}, 0x0) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r5, &(0x7f0000000380)=""/167, 0xa7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2c41, 0x122) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r7, r8, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0xf3, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1, 0x10, 0x0, 0x0, 0x3}}) 1.344994746s ago: executing program 1 (id=439): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000880eb610050b3f176b9d0102030109021200010000000009040c1f981f81ccfc7b43232a5f6b8f0317000000741a9fe6"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc8c0}, 0x4000800) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f000001be40)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000006c0)=""/251, 0xfb}, {&(0x7f00000007c0)=""/239, 0xef}, {&(0x7f00000008c0)=""/148, 0x94}, {0x0}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f000001aa80)=""/4096, 0x1000}, {&(0x7f000001ba80)=""/212, 0xd4}, {&(0x7f000001bb80)=""/157, 0x9d}, {0x0}, {0x0}], 0xe, 0x5c5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r3) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0x57) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r3) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0xf) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r7, 0x1, 0xf, 0x0, &(0x7f0000000100)) keyctl$get_persistent(0x16, 0x0, r4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) keyctl$invalidate(0x15, 0x0) preadv(r8, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r8, 0x5411, 0x0) syz_clone(0x14800a00, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000000)) 1.238115357s ago: executing program 0 (id=440): socket$tipc(0x1e, 0x5, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x49, 0x4) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000003c0)={0xa, 0x30, 0x1}) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2016}}}, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000000c0), r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xec}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xfffffffffffffe59) r9 = getgid() prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x5, 0x10, 0x9, 0x401}, {0x2a, 0x80, 0x2}, {0xf0, 0x4, 0x3, 0x8a9}, {0x5, 0x6, 0x8, 0x8}, {0xffff, 0x0, 0x5, 0xffffffff}, {0x564d, 0x79, 0x0, 0x9}]}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r7, r8, r9}, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28) 795.320165ms ago: executing program 4 (id=441): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1d, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000001840000000000000000000000000000018410000feffffff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"/184], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket(0x22, 0x806, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0xd, &(0x7f0000000040)={0x0, 0x1bc}, 0x8) keyctl$KEYCTL_WATCH_KEY(0x3, r4, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r8 = syz_open_procfs(0x0, &(0x7f0000001180)='oom_adj\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r9, &(0x7f0000001080)="fe065acf3795036e0100000009260f5838cf9fdf425d4862955655a863eb37e12e6f2b83ebd5c74acd07cb769d94251107b63f3962021365512e03eade17c8ea251b43fa215a2dbd93c94ddff4242b1fc3ad4b742c6208f646c7375c3e85d1be37869692c0bc1123a5dd05734500156cde069e95a7b030be22eb8a4090ecc972e964c1a8912ef31609b653482219a1", 0x8f, 0x81, &(0x7f000005ffe4)={0xa, 0x4e26, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10000}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) 744.905385ms ago: executing program 2 (id=442): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x5f, 0x0, 0x30, 0x0, 0x0, 0x0]}}, 0x0, 0x21}, 0x20) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="4b000000da230602996ec8d8a6f72ac4e8552692a332aefad73591c66f8087a1d035c5f8b95833fc", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572300000"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @local}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r15}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x9, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 611.567483ms ago: executing program 0 (id=443): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e01"], 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x10, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x4044) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000480)={0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="00018800"], 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x9003}, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r4, r5, 0x0, 0x8000fb00) 218.082962ms ago: executing program 2 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x1c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001180)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000011c0)={&(0x7f000001af00)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r5, @ANYBLOB="200f28bd7000ffdbdf", @ANYRES8=r2, @ANYRESOCT=r0], 0x3540}, 0x1, 0x0, 0x0, 0x4004850}, 0x4048896) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000001240)=[{&(0x7f0000001f00)=""/102382, 0x18fee}, {0x0}, {&(0x7f00000010c0)=""/169, 0xa9}], 0x3, 0x0, 0xc3e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0xb, 0x3, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)=""/4103, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000130900010073797a30000000000900020073797a3200000000140000001100010000000f00000000000000000a978566b02ea20e4b3a68640c60a370bd"], 0x78}}, 0x0) close(r7) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 0s ago: executing program 4 (id=445): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="3a583ef06edd358890c626e56402cb91e0dcdd13f4f3cd4ae2aa2db3d3e68ab05d69032abf706a878912e2bd533c74e72151862a76dbc85fe2b3dc9148ed5e803fd7fcda934708c6aced7a1c05e98b9426fa2cda144aa9f89e7c1ab1b82146e5e05186624f071845611d78ed664d32da52af1d5cdff77764df44ce4bc378efaaed07f6dd", 0x84}], 0x1, &(0x7f0000000040), 0x0, 0x40004}}], 0x1, 0x0) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f00000000c0)=0x0) timer_gettime(r3, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1100, &(0x7f0000000380)={0x1, 0xf5, 0x20000}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008280)={0x2020}, 0x2020) ftruncate(r6, 0xc17a) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064000000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)={0xa0000001}) epoll_pwait(r8, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r8, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait2(r8, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ver returned -16 [ 170.950681][ T5297] ath6kl: Failed to submit usb control message: -71 [ 170.961294][ T5297] ath6kl: unable to send the bmi data to the device: -71 [ 170.968947][ T5297] ath6kl: Unable to send get target info: -71 [ 170.980387][ T5297] ath6kl: Failed to init ath6kl core: -71 [ 170.987586][ T5297] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 171.002605][ T5297] usb 1-1: USB disconnect, device number 6 [ 171.240360][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.262593][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.273748][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.286345][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.296300][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.307857][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.320022][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.331917][ T6397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.341527][ T6397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.351259][ T6397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.360465][ T6397] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.390384][ T6503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.495716][ T6503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.950800][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.979945][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.028794][ T6617] bridge_slave_0: entered allmulticast mode [ 172.060791][ T6617] bridge_slave_0: entered promiscuous mode [ 172.138976][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.164656][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.173167][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.205342][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.245014][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.274245][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.281629][ T6617] bridge_slave_1: entered allmulticast mode [ 172.300479][ T6617] bridge_slave_1: entered promiscuous mode [ 172.465068][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.591613][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.702509][ T5235] Bluetooth: hci6: command tx timeout [ 172.847173][ T6617] team0: Port device team_slave_0 added [ 172.875256][ T6435] veth0_vlan: entered promiscuous mode [ 172.961650][ T6617] team0: Port device team_slave_1 added [ 173.058408][ T46] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 173.092047][ T6435] veth1_vlan: entered promiscuous mode [ 173.146067][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.169114][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.195061][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.217362][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.235067][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 173.255472][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.270764][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.281453][ T46] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 173.293380][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64 [ 173.306668][ T46] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.310742][ T5284] vhci_hcd: vhci_device speed not set [ 173.316014][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.376235][ T6685] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.386796][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.396408][ T46] hub 3-1:1.0: bad descriptor, ignoring hub [ 173.412391][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.412918][ T46] hub 3-1:1.0: probe with driver hub failed with error -5 [ 173.442447][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.491849][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 173.511381][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 173.535651][ T46] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 173.564732][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.756970][ T6617] hsr_slave_0: entered promiscuous mode [ 173.776324][ T6617] hsr_slave_1: entered promiscuous mode [ 173.794252][ T6617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.814946][ T6617] Cannot create hsr debugfs directory [ 173.831891][ T6503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.878927][ T6707] netlink: 96 bytes leftover after parsing attributes in process `syz.0.197'. [ 173.917069][ T6435] veth0_macvtap: entered promiscuous mode [ 174.021304][ T6435] veth1_macvtap: entered promiscuous mode [ 174.113297][ T5286] usb 3-1: USB disconnect, device number 7 [ 174.267773][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.297351][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.310404][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.322567][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.333886][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.352971][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.364967][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.378966][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.431710][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.456172][ T6503] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.536921][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.578519][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.601971][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.621650][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.632591][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.644102][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.656554][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.670028][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.681679][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.718011][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.725323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.782997][ T5235] Bluetooth: hci6: command tx timeout [ 174.809369][ T6204] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.816592][ T6204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.851143][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.886211][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.922549][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.959144][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.018175][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 175.423142][ T5282] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.639444][ T5282] usb 3-1: Using ep0 maxpacket: 32 [ 175.661100][ T5282] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.703993][ T5282] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.731315][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.744657][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.757555][ T5282] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 175.816810][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.884562][ T5282] hub 3-1:4.0: USB hub found [ 175.938328][ T6206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.965934][ T6206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.091570][ T6617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.106374][ T5282] hub 3-1:4.0: 2 ports detected [ 176.111333][ T5282] usb 3-1: selecting invalid altsetting 1 [ 176.134129][ T6617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.165506][ T5282] hub 3-1:4.0: Using single TT (err -22) [ 176.173675][ T6617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.259459][ T6751] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.275590][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.293419][ T5282] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 176.300216][ T5282] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 176.303901][ T6617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.433983][ T5282] usb 3-1: USB disconnect, device number 8 [ 176.489343][ T6752] netlink: 'syz.4.172': attribute type 10 has an invalid length. [ 176.498785][ T6752] bridge0: port 3(netdevsim0) entered blocking state [ 176.508381][ T6752] bridge0: port 3(netdevsim0) entered disabled state [ 176.516087][ T6752] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 176.532801][ T6752] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 176.545876][ T6752] bridge0: port 3(netdevsim0) entered blocking state [ 176.552767][ T6752] bridge0: port 3(netdevsim0) entered forwarding state [ 176.652613][ T2643] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.828403][ T6503] veth0_vlan: entered promiscuous mode [ 176.975326][ T6503] veth1_vlan: entered promiscuous mode [ 177.291605][ T5235] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 177.399577][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.415190][ T6503] veth0_macvtap: entered promiscuous mode [ 177.521073][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.596354][ T6503] veth1_macvtap: entered promiscuous mode [ 177.746797][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.754078][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.952839][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.108397][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.145451][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.211944][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.408529][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.446253][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.717588][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.906669][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.009781][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.020560][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.035814][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.086970][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.094319][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.191512][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.236583][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.255228][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.268845][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.282366][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.294349][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.308216][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.321166][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.338807][ T6503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.359446][ T6503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.375195][ T6503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.406209][ T6503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.417468][ T6503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.427081][ T6503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.444188][ T6503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.795480][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.834013][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.967992][ T6206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.982029][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.982368][ T6206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.187444][ T6617] veth0_vlan: entered promiscuous mode [ 180.318807][ T6617] veth1_vlan: entered promiscuous mode [ 180.515163][ T6617] veth0_macvtap: entered promiscuous mode [ 180.560522][ T6617] veth1_macvtap: entered promiscuous mode [ 180.734899][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.840429][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.860463][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.883306][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.902411][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.913863][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.924672][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.937232][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.948708][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.959681][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.971706][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.982958][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.996757][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.075527][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.101172][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.111740][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.124678][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.153979][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.183928][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.227515][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.248652][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.269187][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.309130][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.346317][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.367286][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.389465][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.465749][ T6617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.507062][ T6617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.529185][ T6617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.552462][ T6617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.900662][ T6812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 181.907238][ T6812] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 181.921131][ T6812] vhci_hcd vhci_hcd.0: Device attached [ 181.958829][ T6206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.988676][ T6206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.010317][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz.1.211'. [ 182.158500][ T6204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.177270][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.207122][ T6204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.232201][ T6816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.242568][ T2643] usb 18-1: SetAddress Request (2) to port 0 [ 182.248921][ T2643] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 182.281768][ T6814] vhci_hcd: connection closed [ 182.286692][ T6204] vhci_hcd: stop threads [ 182.319361][ T6204] vhci_hcd: release socket [ 182.338937][ T6204] vhci_hcd: disconnect device [ 182.532468][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 182.723140][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 182.736084][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.751500][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.770828][ T25] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 182.785410][ T5230] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.811407][ T25] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 182.825130][ T25] usb 2-1: Product: syz [ 182.829420][ T25] usb 2-1: Manufacturer: syz [ 182.837943][ T25] usb 2-1: SerialNumber: syz [ 182.850085][ T25] usb 2-1: config 0 descriptor?? [ 182.868499][ T25] usb 2-1: NFC: intf ffff88806bdbe000 id ffffffff8f2d2180 [ 182.952690][ T5230] usb 4-1: device descriptor read/64, error -71 [ 183.059809][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 183.106555][ T25] usb 2-1: USB disconnect, device number 14 [ 183.232472][ T5230] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.392635][ T5230] usb 4-1: device descriptor read/64, error -71 [ 183.432616][ T5285] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 183.526067][ T5230] usb usb4-port1: attempt power cycle [ 183.627532][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 183.646431][ T5285] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.667899][ T5285] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.682896][ T5285] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.692574][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.709813][ T5285] hub 5-1:4.0: USB hub found [ 183.938938][ T5285] hub 5-1:4.0: 2 ports detected [ 183.944083][ T5230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 183.952682][ T5285] usb 5-1: selecting invalid altsetting 1 [ 183.964590][ T5285] hub 5-1:4.0: Using single TT (err -22) [ 183.993487][ T5230] usb 4-1: device descriptor read/8, error -71 [ 184.141993][ T5285] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 184.153115][ T5285] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 184.196748][ T5285] usb 5-1: USB disconnect, device number 13 [ 184.232426][ T25] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 184.283309][ T5230] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 184.347242][ T5230] usb 4-1: device descriptor read/8, error -71 [ 184.427875][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.451856][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 184.483517][ T5230] usb usb4-port1: unable to enumerate USB device [ 184.491781][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.501078][ T25] usb 2-1: Product: syz [ 184.505755][ T25] usb 2-1: Manufacturer: syz [ 184.512103][ T25] usb 2-1: SerialNumber: syz [ 184.523757][ T25] usb 2-1: config 0 descriptor?? [ 184.831077][ T25] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 184.847332][ T25] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 184.867507][ T25] usb 2-1: USB disconnect, device number 15 [ 185.182635][ T5286] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.392412][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 185.399844][ T5286] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 185.424359][ T5286] usb 5-1: config 0 has no interface number 0 [ 185.431318][ T5286] usb 5-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 185.463280][ T5286] usb 5-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 185.480232][ T5286] usb 5-1: config 0 interface 12 has no altsetting 0 [ 185.492556][ T5286] usb 5-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 185.501979][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.520651][ T5286] usb 5-1: Product: syz [ 185.529270][ T5286] usb 5-1: Manufacturer: syz [ 185.545442][ T5286] usb 5-1: SerialNumber: syz [ 185.563624][ T5286] usb 5-1: config 0 descriptor?? [ 186.152467][ T5285] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.221129][ T5286] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 186.285215][ T6862] input: syz0 as /devices/virtual/input/input7 [ 186.298175][ T5286] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.332022][ T5286] dib0700: firmware download failed at 7 with -22 [ 186.353448][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 186.363096][ T5286] usb 5-1: USB disconnect, device number 14 [ 186.400701][ T5285] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 186.424039][ T5285] usb 2-1: config 0 has no interface number 0 [ 186.438763][ T5285] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 186.501755][ T5285] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.552459][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.567809][ T5285] usb 2-1: config 0 descriptor?? [ 186.587472][ T5285] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 186.879988][ T6868] vivid-001: ================= START STATUS ================= [ 186.893501][ T6868] vivid-001: Radio HW Seek Mode: Bounded [ 186.908004][ T6869] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.219'. [ 186.917470][ T6868] vivid-001: Radio Programmable HW Seek: false [ 186.917627][ T6869] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.219'. [ 186.939879][ T6868] vivid-001: RDS Rx I/O Mode: Block I/O [ 186.987030][ T6868] vivid-001: Generate RBDS Instead of RDS: false [ 186.993887][ T6868] vivid-001: RDS Reception: true [ 187.006236][ T6868] vivid-001: RDS Program Type: 0 inactive [ 187.050076][ T6868] vivid-001: RDS PS Name: inactive [ 187.069759][ T6868] vivid-001: RDS Radio Text: inactive [ 187.121555][ T6868] vivid-001: RDS Traffic Announcement: false inactive [ 187.130917][ T6868] vivid-001: RDS Traffic Program: false inactive [ 187.171637][ T6868] vivid-001: RDS Music: false inactive [ 187.179553][ T6868] vivid-001: ================== END STATUS ================== [ 187.182258][ T5285] usb 2-1: USB disconnect, device number 16 [ 187.343752][ T2643] usb 18-1: device descriptor read/8, error -110 [ 187.473305][ T29] audit: type=1326 audit(1725697734.730:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.4.224" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73dd579 code=0x0 [ 187.508422][ T6881] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 187.515064][ T6881] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 187.538656][ T6881] vhci_hcd vhci_hcd.0: Device attached [ 187.601703][ T6886] fuse: Unknown parameter '&d' [ 187.764746][ T2643] usb usb18-port1: attempt power cycle [ 187.873589][ T5286] usb 16-1: SetAddress Request (2) to port 0 [ 187.880188][ T6882] vhci_hcd: connection closed [ 187.880913][ T3977] vhci_hcd: stop threads [ 187.906732][ T5286] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 187.911616][ T3977] vhci_hcd: release socket [ 187.919345][ T3977] vhci_hcd: disconnect device [ 187.972679][ T5286] usb 16-1: enqueue for inactive port 0 [ 188.322640][ T5284] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.404837][ T5286] usb usb16-port1: attempt power cycle [ 188.433676][ T2643] usb usb18-port1: unable to enumerate USB device [ 188.477841][ T6901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 188.553268][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 188.609294][ T5284] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 188.639926][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.694242][ T5284] usb 2-1: config 0 descriptor?? [ 188.721976][ T5284] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 188.811130][ T6908] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 188.844335][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.854632][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.863072][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.874091][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.882034][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 188.891177][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.063385][ T5286] usb usb16-port1: unable to enumerate USB device [ 189.132472][ T5282] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.379869][ T6911] chnl_net:caif_netlink_parms(): no params data found [ 189.416342][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 189.425120][ T5282] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 189.435215][ T5282] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 189.462406][ T2643] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 189.463977][ T5282] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.483093][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.540904][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 189.688671][ T2643] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 189.720525][ T2643] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 189.765728][ T2643] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.794092][ T6911] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.820410][ T2643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.833796][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.847339][ T6911] bridge_slave_0: entered allmulticast mode [ 189.857259][ T6911] bridge_slave_0: entered promiscuous mode [ 189.865264][ T6914] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 189.873989][ T6914] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 189.884477][ T2643] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 189.902480][ T5284] gspca_sunplus: reg_w_riv err -71 [ 189.907069][ T6911] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.907683][ T5284] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 189.922502][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.954592][ T5284] usb 2-1: USB disconnect, device number 17 [ 189.961101][ T6911] bridge_slave_1: entered allmulticast mode [ 189.974116][ T6911] bridge_slave_1: entered promiscuous mode [ 190.156312][ T6911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.213804][ T6930] team_slave_0: entered promiscuous mode [ 190.219599][ T6930] team_slave_1: entered promiscuous mode [ 190.237749][ T6911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.295607][ T6930] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 190.321878][ T6930] team_slave_0: left promiscuous mode [ 190.329174][ T6930] team_slave_1: left promiscuous mode [ 190.368645][ T6930] team_slave_0: entered promiscuous mode [ 190.374455][ T6930] team_slave_1: entered promiscuous mode [ 190.381542][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.395847][ T6930] bond0: (slave team0): Enslaving as an active interface with an up link [ 190.476144][ T6933] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.485602][ T6933] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.493042][ T2643] usb 4-1: USB disconnect, device number 10 [ 190.494374][ T6933] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.509024][ T6933] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.598662][ T6911] team0: Port device team_slave_0 added [ 190.652576][ T6911] team0: Port device team_slave_1 added [ 190.735638][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.759296][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.790214][ T6911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.810261][ T6911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.818816][ T6911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.898435][ T6911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.942563][ T5244] Bluetooth: hci7: command tx timeout [ 191.096087][ T6911] hsr_slave_0: entered promiscuous mode [ 191.104104][ T6911] hsr_slave_1: entered promiscuous mode [ 191.119268][ T6911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.127509][ T6911] Cannot create hsr debugfs directory [ 191.221867][ T6942] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 191.470163][ T6942] No such timeout policy "syz0" [ 191.574007][ T6911] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.703814][ T5284] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 191.802880][ T6911] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.932921][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 191.940330][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.952108][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 191.967932][ T5284] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 191.977510][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.990871][ T5284] usb 4-1: config 0 descriptor?? [ 192.039472][ T6911] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.161188][ T6934] team_slave_0: left promiscuous mode [ 192.166861][ T6934] team_slave_1: left promiscuous mode [ 192.188626][ T5230] usb 5-1: USB disconnect, device number 15 [ 192.365915][ T6911] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.447725][ T6957] team_slave_0: entered promiscuous mode [ 192.453629][ T6957] team_slave_1: entered promiscuous mode [ 192.965988][ T5282] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.005783][ T5284] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input8 [ 193.034344][ T5244] Bluetooth: hci7: command tx timeout [ 193.143494][ T6911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.168498][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.181380][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.191224][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 193.201818][ T5282] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 193.225718][ T5282] usb 5-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 193.255490][ T5284] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 193.268481][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.282922][ T5282] usb 5-1: Product: syz [ 193.287206][ T5282] usb 5-1: Manufacturer: syz [ 193.292815][ T5282] usb 5-1: SerialNumber: syz [ 193.299360][ T5282] usb 5-1: config 0 descriptor?? [ 193.313572][ T5282] pl2303 5-1:0.0: required interrupt-in endpoint missing [ 193.353131][ T6911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.440082][ T6911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.487407][ T6911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.746487][ T5282] usb 4-1: USB disconnect, device number 11 [ 193.869293][ T6957] netlink: 'syz.4.239': attribute type 10 has an invalid length. [ 193.926916][ T6957] team_slave_0: left promiscuous mode [ 193.938718][ T6957] team_slave_1: left promiscuous mode [ 194.135479][ T5284] usb 5-1: USB disconnect, device number 16 [ 194.249931][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.280826][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.305437][ T3977] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.312660][ T3977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.375186][ T3977] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.382464][ T3977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.662092][ T6911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.669428][ T5285] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 194.719013][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.727030][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.788138][ T6911] veth0_vlan: entered promiscuous mode [ 194.806144][ T6911] veth1_vlan: entered promiscuous mode [ 194.860624][ T6911] veth0_macvtap: entered promiscuous mode [ 194.873298][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.897271][ T6911] veth1_macvtap: entered promiscuous mode [ 194.923847][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.934560][ T5285] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 194.945132][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.957186][ T5285] usb 2-1: config 0 descriptor?? [ 194.962039][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.962243][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.962257][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.962271][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.045871][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.066212][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.086344][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.086590][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.086873][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.086891][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.087197][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.087475][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.087757][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.087955][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.094248][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.098337][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 195.111159][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111179][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111191][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111204][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111216][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111229][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111241][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111255][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111266][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111276][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111283][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111291][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.111298][ T6911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.111305][ T6911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.112838][ T5244] Bluetooth: hci7: command tx timeout [ 195.113802][ T6911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.121999][ T6911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.122036][ T6911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.122061][ T6911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.122086][ T6911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.160719][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.246'. [ 195.625020][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 195.641462][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.695867][ T5285] usb 2-1: USB disconnect, device number 18 [ 195.789433][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.838006][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.001931][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.042540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.271049][ T5244] Bluetooth: Unknown LE signaling command 0x31 [ 196.277810][ T5244] Bluetooth: Wrong link type (-22) [ 196.295046][ T5244] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 196.715870][ T7007] hub 9-0:1.0: USB hub found [ 196.733984][ T7007] hub 9-0:1.0: 8 ports detected [ 197.172491][ T5284] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 197.182677][ T5244] Bluetooth: hci7: command tx timeout [ 197.414014][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 197.450217][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 197.461739][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.475761][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.485622][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.503481][ T5284] usb 5-1: config 0 descriptor?? [ 197.509500][ T7011] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 197.925811][ T7028] syz.1.255 uses obsolete (PF_INET,SOCK_PACKET) [ 197.948591][ T5284] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 197.978131][ T5284] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 198.016907][ T5284] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 198.455800][ T5301] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.500636][ T2643] usb 5-1: USB disconnect, device number 17 [ 198.652721][ T5301] usb 1-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice=33.c2 [ 198.698398][ T5301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.718242][ T5301] usb 1-1: config 0 descriptor?? [ 198.728866][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 198.740153][ T5301] usb 1-1: unknown interface protocol 0x9a, assuming v1 [ 198.753178][ T5301] usb 1-1: cannot find UAC_HEADER [ 198.786320][ T5301] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 198.816856][ T5247] udevd[5247]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.049017][ T7031] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 199.077951][ T7031] macvlan2: entered promiscuous mode [ 199.084806][ T7031] macvlan2: entered allmulticast mode [ 199.098683][ T7031] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 199.127318][ T5286] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 199.148710][ T7031] mac80211_hwsim hwsim27 wlan1: left allmulticast mode [ 199.148945][ T7031] mac80211_hwsim hwsim27 wlan1: left promiscuous mode [ 199.332583][ T5286] usb 2-1: Using ep0 maxpacket: 32 [ 199.353996][ T5286] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.392443][ T2643] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 199.409874][ T5286] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.432157][ T5286] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 199.445238][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.504378][ T5286] hub 2-1:4.0: USB hub found [ 199.632581][ T2643] usb 4-1: Using ep0 maxpacket: 16 [ 199.666892][ T2643] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 199.696097][ T2643] usb 4-1: config 0 has no interface number 0 [ 199.709934][ T5286] hub 2-1:4.0: 2 ports detected [ 199.711552][ T2643] usb 4-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 199.730758][ T2643] usb 4-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 199.744948][ T2643] usb 4-1: config 0 interface 12 has no altsetting 0 [ 199.755636][ T2643] usb 4-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 199.765275][ T2643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.768729][ T5286] usb 2-1: selecting invalid altsetting 1 [ 199.775870][ T2643] usb 4-1: Product: syz [ 199.786744][ T2643] usb 4-1: Manufacturer: syz [ 199.791431][ T2643] usb 4-1: SerialNumber: syz [ 199.798536][ T2643] usb 4-1: config 0 descriptor?? [ 199.819493][ T5286] hub 2-1:4.0: Using single TT (err -22) [ 199.945328][ T5286] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 199.951732][ T5286] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 199.998683][ T5286] usb 2-1: USB disconnect, device number 19 [ 200.910539][ T7060] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 201.090575][ T25] usb 1-1: USB disconnect, device number 7 [ 201.246446][ T7061] No such timeout policy "syz0" [ 201.422877][ T2643] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 201.463809][ T2643] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 201.474134][ T2643] dib0700: firmware download failed at 7 with -22 [ 201.499978][ T2643] usb 4-1: USB disconnect, device number 12 [ 201.672385][ T7066] capability: warning: `syz.0.264' uses deprecated v2 capabilities in a way that may be insecure [ 202.225210][ T5230] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 202.392482][ T5230] usb 5-1: device descriptor read/64, error -71 [ 202.671994][ T5230] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 202.832501][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.843074][ T5230] usb 5-1: device descriptor read/64, error -71 [ 202.906645][ T7087] fuse: Unknown parameter '&d' [ 202.999337][ T5230] usb usb5-port1: attempt power cycle [ 203.068958][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 203.111079][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 203.122959][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.136676][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.146789][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.179913][ T25] usb 4-1: config 0 descriptor?? [ 203.186503][ T7083] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 203.454541][ T5230] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 203.534228][ T5230] usb 5-1: device descriptor read/8, error -71 [ 203.645620][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 203.674708][ T25] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 203.732764][ T25] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 203.852591][ T5230] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.947271][ T5230] usb 5-1: device descriptor read/8, error -71 [ 204.083061][ T5230] usb usb5-port1: unable to enumerate USB device [ 204.250924][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 204.292587][ T5230] usb 4-1: USB disconnect, device number 13 [ 205.141722][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.276'. [ 205.176406][ T7110] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 205.213025][ T29] audit: type=1326 audit(1725697752.470:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7103 comm="syz.0.286" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744d579 code=0x0 [ 205.575215][ T7111] No such timeout policy "syz0" [ 205.965002][ T2993] bond0: (slave team0): link status definitely down, disabling slave [ 206.095815][ T5284] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.242643][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 206.312551][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 206.338156][ T5284] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 206.353157][ T5284] usb 4-1: config 0 has no interface number 0 [ 206.361725][ T7101] syz.1.275 (7101): drop_caches: 2 [ 206.377399][ T7100] syz.1.275 (7100): drop_caches: 2 [ 206.380907][ T5284] usb 4-1: config 0 interface 88 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA [ 206.406001][ T5284] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 206.433434][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.447875][ T5284] usb 4-1: Product: syz [ 206.452243][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.471062][ T5284] usb 4-1: Manufacturer: syz [ 206.484391][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.502734][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 206.511844][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.524706][ T25] usb 5-1: config 0 descriptor?? [ 206.557344][ T5284] usb 4-1: SerialNumber: syz [ 206.598943][ T5284] usb 4-1: config 0 descriptor?? [ 206.771085][ T7123] No such timeout policy "syz1" [ 206.780317][ T7123] program syz.1.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.862255][ T7123] bond0: entered promiscuous mode [ 206.878913][ T7123] bond_slave_0: entered promiscuous mode [ 206.922944][ T7123] bond_slave_1: entered promiscuous mode [ 206.986672][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 207.021327][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 207.092600][ T25] usb 5-1: USB disconnect, device number 22 [ 207.307806][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 207.322903][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 207.341668][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 207.356364][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 207.366803][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 207.374726][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 207.510142][ T5284] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -5 [ 207.530645][ T5284] f81534a_ctrl 4-1:0.88: failed to enable ports: -5 [ 207.539061][ T5284] f81534a_ctrl 4-1:0.88: probe with driver f81534a_ctrl failed with error -5 [ 207.570982][ T5284] usb 4-1: USB disconnect, device number 14 [ 207.806889][ T25] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 207.913661][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 207.956589][ T7140] fuse: Unknown parameter '&d' [ 207.980699][ T7141] random: crng reseeded on system resumption [ 208.029793][ T25] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 208.040819][ T25] usb 2-1: config 0 has no interface number 0 [ 208.049735][ T25] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x82 has invalid maxpacket 975, setting to 64 [ 208.088201][ T25] usb 2-1: New USB device found, idVendor=05c6, idProduct=7102, bcdDevice=10.5f [ 208.097784][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.112559][ T25] usb 2-1: Product: syz [ 208.116734][ T25] usb 2-1: Manufacturer: syz [ 208.125178][ T25] usb 2-1: SerialNumber: syz [ 208.135329][ T25] usb 2-1: config 0 descriptor?? [ 208.147994][ T7131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.365107][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.435970][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.459879][ T7129] bridge_slave_0: entered allmulticast mode [ 208.469796][ T7129] bridge_slave_0: entered promiscuous mode [ 208.480748][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.489239][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.504487][ T7129] bridge_slave_1: entered allmulticast mode [ 208.520767][ T7129] bridge_slave_1: entered promiscuous mode [ 208.700085][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.794606][ T7131] xt_HMARK: spi-set and port-set can't be combined [ 208.800847][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.930590][ T25] usb 2-1: USB disconnect, device number 20 [ 209.128859][ T7129] team0: Port device team_slave_0 added [ 209.143158][ T7129] team0: Port device team_slave_1 added [ 209.178045][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.226108][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.256963][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.279770][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 209.282950][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.329030][ T5230] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.338668][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.381869][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.391011][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.410832][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 209.420203][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.432690][ T5235] Bluetooth: hci8: command tx timeout [ 209.525995][ T7129] hsr_slave_0: entered promiscuous mode [ 209.542404][ T7129] hsr_slave_1: entered promiscuous mode [ 209.544547][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 209.570088][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 209.589646][ T5230] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.616855][ T5230] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.628889][ T7129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.639839][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.667382][ T7129] Cannot create hsr debugfs directory [ 209.676667][ T5230] usb 1-1: config 0 descriptor?? [ 209.682856][ T7154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.707393][ T7158] dvmrp2: entered allmulticast mode [ 210.098633][ T5230] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 210.160214][ T5230] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 210.224214][ T5230] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 210.356752][ T7129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.363619][ T7172] usb usb8: usbfs: process 7172 (syz.4.292) did not claim interface 0 before use [ 210.535846][ T7129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.563707][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 210.663812][ T7129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.720800][ T5285] usb 1-1: USB disconnect, device number 8 [ 210.810993][ T7129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.057479][ T7129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.076085][ T7129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.096083][ T7129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.111739][ T7129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.152689][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 211.382478][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 211.395621][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 211.412591][ T25] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 211.439831][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.451600][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 211.463895][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.511715][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.535618][ T5244] Bluetooth: hci8: command tx timeout [ 211.616263][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.623403][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.702558][ T5297] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 211.702747][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.717318][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.742177][ T7187] program syz.4.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.752727][ T7188] hub 9-0:1.0: USB hub found [ 211.768015][ T7188] hub 9-0:1.0: 8 ports detected [ 211.816450][ T7187] netlink: 64 bytes leftover after parsing attributes in process `syz.4.297'. [ 211.932387][ T5297] usb 2-1: Using ep0 maxpacket: 16 [ 211.968252][ T5297] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 212.038194][ T5297] usb 2-1: config 0 has no interface number 0 [ 212.077296][ T5297] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 212.090048][ T5297] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.114235][ T5297] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 212.132671][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 212.133132][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.154283][ T5297] usb 2-1: Product: syz [ 212.158739][ T5297] usb 2-1: SerialNumber: syz [ 212.189946][ T5297] usb 2-1: config 0 descriptor?? [ 212.229152][ T5297] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 212.240401][ T5297] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input13 [ 212.261461][ T7193] team_slave_0: entered promiscuous mode [ 212.267309][ T7193] team_slave_1: entered promiscuous mode [ 212.380130][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'. [ 212.494683][ T7196] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 212.643551][ T7196] team_slave_0: left promiscuous mode [ 212.649322][ T7196] team_slave_1: left promiscuous mode [ 212.726421][ T7196] team_slave_0: entered promiscuous mode [ 212.732216][ T7196] team_slave_1: entered promiscuous mode [ 212.756143][ T7196] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.799555][ T7196] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.820240][ T7129] veth0_vlan: entered promiscuous mode [ 212.862249][ T7129] veth1_vlan: entered promiscuous mode [ 212.998227][ T7129] veth0_macvtap: entered promiscuous mode [ 213.051082][ T7129] veth1_macvtap: entered promiscuous mode [ 213.132524][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.140047][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.147359][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.154858][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.162055][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.162208][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.169195][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.187612][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.194889][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.202150][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.202789][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.209299][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 213.228073][ T5297] usb 2-1: USB disconnect, device number 21 [ 213.228121][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 213.292992][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.304240][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.320405][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.335057][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.348986][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.361754][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.374034][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.385287][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.402506][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.413611][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.425021][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.436125][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.447035][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.457843][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.468764][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.479795][ T25] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 213.489613][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.500503][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.515465][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.523890][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.535455][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.545115][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.555515][ T5297] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 213.568543][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.585636][ T5244] Bluetooth: hci8: command tx timeout [ 213.592518][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.605440][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.616952][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.626354][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.635472][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.650645][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.659118][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.668582][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.682395][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.696212][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.696702][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.726463][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.730494][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.781576][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.793341][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.806636][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.807714][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.831811][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.838824][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 213.847273][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.863423][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.876060][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.886372][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.896902][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.911338][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.923057][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.933218][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.943746][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.955227][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.968194][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.990932][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.031406][ T7129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.046142][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.051248][ T7209] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 214.059468][ T7209] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.079933][ T7129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.082040][ T7209] vhci_hcd vhci_hcd.0: Device attached [ 214.140896][ T7211] vhci_hcd: connection closed [ 214.141175][ T6206] vhci_hcd: stop threads [ 214.161440][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 214.177085][ T6206] vhci_hcd: release socket [ 214.181638][ T6206] vhci_hcd: disconnect device [ 214.184361][ T7129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.202470][ T25] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 214.237289][ T7129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.275710][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 214.318887][ T25] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 214.350777][ T25] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 214.376476][ T25] usb 1-1: Product: syz [ 214.382060][ T25] usb 1-1: Manufacturer: syz [ 214.405471][ T25] usb 1-1: SerialNumber: syz [ 214.421482][ T25] usb 1-1: config 0 descriptor?? [ 214.458808][ T7198] team_slave_0: left promiscuous mode [ 214.464408][ T7198] team_slave_1: left promiscuous mode [ 214.473722][ T25] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 214.498140][ T5297] usb 4-1: USB disconnect, device number 15 [ 214.502473][ T5285] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 214.616990][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.671465][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.705649][ T5285] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.727462][ T5285] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.752461][ T5285] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.762202][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.783713][ T7209] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.795670][ T5285] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.854378][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.899981][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.047865][ T5285] usb 5-1: USB disconnect, device number 23 [ 215.080197][ T7218] tipc: Started in network mode [ 215.121916][ T7218] tipc: Node identity , cluster identity 4711 [ 215.174253][ T7218] tipc: Failed to set node id, please configure manually [ 215.272740][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 215.291803][ T7218] tipc: Enabling of bearer rejected, failed to enable media [ 215.658615][ T5297] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.822887][ T5301] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 215.874235][ T5297] usb 4-1: Using ep0 maxpacket: 8 [ 215.897367][ T5282] usb 1-1: USB disconnect, device number 9 [ 215.913553][ T5297] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.930286][ T5282] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 215.948987][ T5297] usb 4-1: config 0 has no interface number 0 [ 215.993581][ T5297] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.024910][ T5301] usb 2-1: Using ep0 maxpacket: 8 [ 216.034307][ T5297] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.062697][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.078349][ T5301] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 216.102874][ T5301] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.113150][ T5301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.137150][ T5297] usb 4-1: config 0 descriptor?? [ 216.151012][ T5297] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 216.163965][ T5244] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 216.172852][ T5244] Bluetooth: hci0: Injecting HCI hardware error event [ 216.181365][ T5244] Bluetooth: hci0: hardware error 0x00 [ 216.195213][ T5301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.284637][ T5286] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 216.299315][ T5301] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.340011][ T5301] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.350525][ T5301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.503542][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 216.527094][ T5286] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.545727][ T5286] usb 5-1: config 0 has no interface number 0 [ 216.553103][ T5286] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.573180][ T5286] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 216.582816][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.588823][ T5236] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 216.594975][ T5286] usb 5-1: config 0 descriptor?? [ 216.604963][ T5301] usb 2-1: usb_control_msg returned -32 [ 216.624336][ T5286] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 216.636257][ T5301] usbtmc 2-1:16.0: can't read capabilities [ 216.702506][ T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.751136][ T7220] netlink: 11486 bytes leftover after parsing attributes in process `syz.3.304'. [ 216.761066][ T7220] netlink: 68672 bytes leftover after parsing attributes in process `syz.3.304'. [ 216.827220][ T5301] usb 4-1: USB disconnect, device number 16 [ 216.892592][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 216.899704][ T25] usb 3-1: config 0 has an invalid interface number: 6 but max is 2 [ 216.908938][ T25] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 216.919568][ T25] usb 3-1: config 0 has no interface number 1 [ 216.927175][ T25] usb 3-1: config 0 has no interface number 2 [ 216.934488][ T25] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 216.944767][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.966084][ T25] usb 3-1: config 0 descriptor?? [ 217.008580][ T7242] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.306'. [ 217.026680][ T7242] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.306'. [ 217.053020][ T7241] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 217.232378][ T5301] usb 5-1: USB disconnect, device number 24 [ 217.262578][ T5236] Bluetooth: hci5: command 0x0406 tx timeout [ 217.314743][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.364935][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.410382][ T7236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'. [ 217.420304][ T7245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.449730][ T25] usb 3-1: Could not set interface, error -71 [ 217.557372][ T25] usb 3-1: USB disconnect, device number 9 [ 217.687115][ T7247] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 217.903322][ T29] audit: type=1326 audit(1725697765.160:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7248 comm="syz.3.312" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7579 code=0x0 [ 218.185087][ T7254] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 218.193238][ T7254] bridge0: port 3(netdevsim0) entered blocking state [ 218.200118][ T7254] bridge0: port 3(netdevsim0) entered disabled state [ 218.209322][ T7254] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 218.219565][ T7254] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 218.232414][ T7254] bridge0: port 3(netdevsim0) entered blocking state [ 218.239301][ T7254] bridge0: port 3(netdevsim0) entered forwarding state [ 218.306319][ T5244] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 218.533546][ T5244] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 218.552408][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: kworker/u9:9 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 218.563319][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 218.573379][ T5244] Workqueue: hci6 hci_rx_work [ 218.578076][ T5244] Call Trace: [ 218.581385][ T5244] [ 218.584308][ T5244] dump_stack_lvl+0x241/0x360 [ 218.588984][ T5244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.594283][ T5244] ? __pfx__printk+0x10/0x10 [ 218.598868][ T5244] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 218.604257][ T5244] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 218.609818][ T5244] sysfs_create_dir_ns+0x2ce/0x3a0 [ 218.614954][ T5244] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 218.620624][ T5244] kobject_add_internal+0x435/0x8d0 [ 218.625838][ T5244] kobject_add+0x152/0x220 [ 218.630275][ T5244] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.635486][ T5244] ? device_add+0x3e7/0xbf0 [ 218.639994][ T5244] ? __pfx_kobject_add+0x10/0x10 [ 218.644936][ T5244] ? _raw_spin_unlock+0x28/0x50 [ 218.649793][ T5244] ? get_device_parent+0x165/0x410 [ 218.654915][ T5244] device_add+0x4e5/0xbf0 [ 218.659251][ T5244] hci_conn_add_sysfs+0xe8/0x200 [ 218.664191][ T5244] le_conn_complete_evt+0xc9f/0x12e0 [ 218.669501][ T5244] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 218.675318][ T5244] ? __mutex_unlock_slowpath+0x21d/0x750 [ 218.680945][ T5244] ? __copy_skb_header+0x437/0x5b0 [ 218.686085][ T5244] ? skb_pull_data+0x112/0x230 [ 218.690855][ T5244] hci_le_enh_conn_complete_evt+0x185/0x420 [ 218.696756][ T5244] hci_event_packet+0xa55/0x1540 [ 218.701709][ T5244] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 218.707006][ T5244] ? __pfx_hci_event_packet+0x10/0x10 [ 218.712383][ T5244] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.717594][ T5244] ? hci_send_to_monitor+0xd8/0x7f0 [ 218.722809][ T5244] ? kcov_remote_start+0x97/0x7d0 [ 218.727886][ T5244] hci_rx_work+0x3e8/0xca0 [ 218.732312][ T5244] ? process_scheduled_works+0x945/0x1830 [ 218.738039][ T5244] process_scheduled_works+0xa2c/0x1830 [ 218.743608][ T5244] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.749597][ T5244] ? assign_work+0x364/0x3d0 [ 218.754194][ T5244] worker_thread+0x86d/0xd10 [ 218.758791][ T5244] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 218.764776][ T5244] ? __kthread_parkme+0x169/0x1d0 [ 218.769802][ T5244] ? __pfx_worker_thread+0x10/0x10 [ 218.774913][ T5244] kthread+0x2f0/0x390 [ 218.778977][ T5244] ? __pfx_worker_thread+0x10/0x10 [ 218.784085][ T5244] ? __pfx_kthread+0x10/0x10 [ 218.788677][ T5244] ret_from_fork+0x4b/0x80 [ 218.793096][ T5244] ? __pfx_kthread+0x10/0x10 [ 218.797705][ T5244] ret_from_fork_asm+0x1a/0x30 [ 218.802514][ T5244] [ 218.823150][ T5244] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 218.837533][ T5244] Bluetooth: hci6: failed to register connection device [ 218.936396][ T2643] usb 2-1: USB disconnect, device number 22 [ 218.962472][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 218.992821][ T5284] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.142445][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 219.151297][ T25] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 219.208372][ T25] usb 3-1: config 0 has no interface number 0 [ 219.255474][ T25] usb 3-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 219.316777][ T25] usb 3-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 219.436993][ T25] usb 3-1: config 0 interface 12 has no altsetting 0 [ 219.497210][ T25] usb 3-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 219.586399][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.617381][ T25] usb 3-1: Product: syz [ 219.621987][ T25] usb 3-1: Manufacturer: syz [ 219.627649][ T25] usb 3-1: SerialNumber: syz [ 219.652586][ T25] usb 3-1: config 0 descriptor?? [ 219.917374][ T7266] fuse: Unknown parameter '0x000000000000000600000000000000000000' [ 220.485858][ T7272] No such timeout policy "syz0" [ 220.712511][ T5244] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 220.721560][ T5244] Bluetooth: hci2: Injecting HCI hardware error event [ 220.731588][ T5235] Bluetooth: hci2: hardware error 0x00 [ 221.043059][ T25] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 221.059745][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 221.074209][ T25] dib0700: firmware download failed at 7 with -22 [ 221.097147][ T25] usb 3-1: USB disconnect, device number 10 [ 221.602945][ T5282] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 221.643872][ T7287] kernel profiling enabled (shift: 9) [ 221.762839][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.832594][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 221.839959][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 221.892676][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 221.913355][ T5284] usb 1-1: device descriptor read/64, error -71 [ 221.922910][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 221.959213][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 221.970296][ T5282] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.997599][ T5282] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 222.006791][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.017359][ T5282] usb 5-1: Product: syz [ 222.021572][ T5282] usb 5-1: Manufacturer: syz [ 222.026357][ T5282] usb 5-1: SerialNumber: syz [ 222.034843][ T5282] usb 5-1: config 0 descriptor?? [ 222.172470][ T5282] rc_core: IR keymap rc-imon-rsc not found [ 222.178819][ T5282] Registered IR keymap rc-empty [ 222.184104][ T5284] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 222.202872][ T5282] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 222.219717][ T7297] sg_write: data in/out 8156/126 bytes for SCSI command 0x0-- guessing data in; [ 222.219717][ T7297] program syz.1.324 not setting count and/or reply_len properly [ 222.220036][ T5282] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 222.255200][ T7280] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.295777][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.339974][ T5282] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 222.348711][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.392929][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 222.412671][ T5297] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 222.420410][ T5284] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 222.433048][ T5284] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.470348][ T5284] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.500595][ T5284] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.528161][ T5284] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.551896][ T5285] usb 5-1: USB disconnect, device number 25 [ 222.572370][ T5284] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 222.581452][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.643560][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 222.650863][ T5297] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.652990][ T25] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 222.660070][ T5297] usb 3-1: config 0 has no interface number 0 [ 222.687343][ T5297] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.734534][ T5297] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 222.761042][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.783318][ T5297] usb 3-1: config 0 descriptor?? [ 222.791370][ T5297] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 222.864396][ T5235] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 222.872601][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 222.892599][ T25] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 222.904571][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.945401][ T25] usb 2-1: config 0 descriptor?? [ 223.059892][ T5284] usb 1-1: USB disconnect, device number 11 [ 223.092466][ T25] viperboard 2-1:0.0: version 0.00 found at bus 002 address 023 [ 223.270638][ T25] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 223.309543][ T25] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 223.361281][ T7300] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.323'. [ 223.391402][ T25] usb 2-1: USB disconnect, device number 23 [ 223.402869][ T7301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.438861][ T7300] netlink: 72176 bytes leftover after parsing attributes in process `syz.2.323'. [ 223.741070][ T7305] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 223.887655][ T5285] usb 3-1: USB disconnect, device number 11 [ 223.974167][ T5284] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 224.203100][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 224.290553][ T5284] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 224.292462][ T25] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 224.334893][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.360025][ T5284] usb 4-1: config 0 descriptor?? [ 224.374285][ T5284] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 224.495215][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 224.513966][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 204, setting to 64 [ 224.541999][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 224.567229][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.639742][ T25] usb 1-1: config 0 descriptor?? [ 224.674263][ T7308] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 225.012463][ T2643] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.045632][ T5285] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 225.201833][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.302844][ T2643] usb 3-1: Using ep0 maxpacket: 16 [ 225.315904][ T2643] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.330214][ T2643] usb 3-1: config 8 has an invalid interface number: 249 but max is 0 [ 225.339257][ T2643] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 225.356363][ T2643] usb 3-1: config 8 has no interface number 0 [ 225.404504][ T2643] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 225.419202][ T25] ath6kl: Failed to submit usb control message: -71 [ 225.422853][ T5284] gspca_sunplus: reg_w_riv err -110 [ 225.437823][ T5285] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 225.448250][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 225.455508][ T5285] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.468666][ T2643] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 225.483070][ T25] ath6kl: Unable to send get target info: -71 [ 225.489222][ T2643] usb 3-1: config 8 interface 249 altsetting 4 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 225.490746][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.502901][ T25] ath6kl: Failed to init ath6kl core: -71 [ 225.514244][ T5284] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 225.516218][ T5285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.563432][ T2643] usb 3-1: config 8 interface 249 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 225.576221][ T25] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 225.598195][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.633531][ T2643] usb 3-1: config 8 interface 249 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 225.647110][ T5285] usb 2-1: SerialNumber: syz [ 225.659268][ T25] usb 1-1: USB disconnect, device number 12 [ 225.668982][ T2643] usb 3-1: config 8 interface 249 has no altsetting 0 [ 225.676908][ T7315] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 225.708121][ T2643] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 225.722550][ T2643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.730978][ T2643] usb 3-1: Product: 䐊 [ 225.737590][ T2643] usb 3-1: Manufacturer: ﻮ䨙഼ꏣ닁ꅼ䶸쨠걷찤匌奅瞽扡涨䧷厂ⵓ咐镼秊岓￞ῥ㠫⪍ạ⚠﫮㲤Ꞙە鵾쾘ຎffl留닪㾻谤網ᯀ銨儎甉둰䆼麁 [ 225.757234][ T2643] usb 3-1: SerialNumber: ꜁粛濼鰪ཟ뚦䐋䯔⥃퉪粈澌짧횔즵㧮䘚갚㏙⏊ﴬክ뻭ꔏ蔵琜麛ἀ췔뭴Û [ 225.903311][ T7315] netlink: 'syz.1.329': attribute type 322 has an invalid length. [ 225.953768][ T7315] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 226.269890][ T5285] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 226.309942][ T5285] usb 2-1: USB disconnect, device number 24 [ 226.608166][ T2643] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 226.641624][ T2643] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 226.650426][ T2643] dib0700: firmware download failed at 7 with -71 [ 226.680397][ T2643] usb 3-1: USB disconnect, device number 12 [ 226.842497][ T5285] usb 4-1: USB disconnect, device number 17 [ 227.056202][ T7326] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 227.446595][ T7333] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 227.454871][ T7333] bridge0: port 3(netdevsim0) entered blocking state [ 227.461791][ T7333] bridge0: port 3(netdevsim0) entered disabled state [ 227.470781][ T7333] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 227.485408][ T7333] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 227.494303][ T7333] bridge0: port 3(netdevsim0) entered blocking state [ 227.501191][ T7333] bridge0: port 3(netdevsim0) entered forwarding state [ 227.722833][ T5297] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 228.023228][ T5285] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 228.212403][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 228.221731][ T5285] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 228.236125][ T5285] usb 2-1: config 0 has no interface number 0 [ 228.251560][ T5285] usb 2-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 228.265020][ T5285] usb 2-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 228.278809][ T5285] usb 2-1: config 0 interface 12 has no altsetting 0 [ 228.290821][ T5285] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 228.310734][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.332815][ T5285] usb 2-1: Product: syz [ 228.343933][ T5285] usb 2-1: Manufacturer: syz [ 228.354055][ T5285] usb 2-1: SerialNumber: syz [ 228.362870][ T7342] usb usb8: usbfs: process 7342 (syz.4.338) did not claim interface 0 before use [ 228.383688][ T5285] usb 2-1: config 0 descriptor?? [ 228.692563][ T7336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.200625][ T5285] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 229.229192][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 229.244354][ T5285] dib0700: firmware download failed at 7 with -22 [ 229.302694][ T5285] usb 2-1: USB disconnect, device number 25 [ 229.420702][ T5235] Bluetooth: hci8: unexpected event 0x06 length: 23 > 3 [ 230.352563][ T5284] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.468899][ T7373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'. [ 230.566787][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 230.605030][ T5284] usb 1-1: config 168 has an invalid descriptor of length 111, skipping remainder of the config [ 230.646146][ T5284] usb 1-1: config 168 has 0 interfaces, different from the descriptor's value: 1 [ 230.683897][ T5284] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 230.695080][ T5284] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 230.709640][ T5284] usb 1-1: Product: syz [ 230.721960][ T5284] usb 1-1: Manufacturer: syz [ 230.729778][ T5284] usb 1-1: SerialNumber: syz [ 230.980546][ T5284] usb 1-1: USB disconnect, device number 13 [ 231.132697][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.349'. [ 231.366497][ T7399] hub 9-0:1.0: USB hub found [ 231.371824][ T7399] hub 9-0:1.0: 8 ports detected [ 231.685449][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 231.772754][ T5284] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 231.989168][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 232.050205][ T5284] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 232.070663][ T5284] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 232.088294][ T5284] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 232.099390][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.130342][ T5284] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 232.567338][ T7415] netlink: 'syz.2.353': attribute type 10 has an invalid length. [ 232.575786][ T7415] bridge0: port 3(netdevsim0) entered blocking state [ 232.582996][ T7415] bridge0: port 3(netdevsim0) entered disabled state [ 232.590482][ T7415] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 232.602043][ T7415] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 232.611083][ T7415] bridge0: port 3(netdevsim0) entered blocking state [ 232.618193][ T7415] bridge0: port 3(netdevsim0) entered forwarding state [ 232.972527][ T5297] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 233.304000][ T5284] gspca_sn9c2028: read1 error -110 [ 233.313023][ T5284] gspca_sn9c2028: read1 error -32 [ 233.325685][ T5284] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -32 [ 233.353258][ T5284] usb 2-1: USB disconnect, device number 26 [ 233.428711][ T7426] usb usb8: usbfs: process 7426 (syz.0.355) did not claim interface 0 before use [ 235.152551][ T5286] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 235.208453][ T5284] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 235.419440][ T5286] usb 1-1: Using ep0 maxpacket: 16 [ 235.490834][ T7448] netlink: 92 bytes leftover after parsing attributes in process `syz.2.359'. [ 235.533321][ T5284] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 235.556234][ T5286] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 235.570458][ T5286] usb 1-1: config 0 has no interface number 0 [ 235.577573][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.604296][ T5286] usb 1-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 235.629572][ T5284] usb 5-1: config 0 descriptor?? [ 235.639093][ T5284] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 235.650524][ T5286] usb 1-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 235.686589][ T5286] usb 1-1: config 0 interface 12 has no altsetting 0 [ 235.735598][ T5286] usb 1-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 235.751956][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.770328][ T5286] usb 1-1: Product: syz [ 235.788435][ T5286] usb 1-1: Manufacturer: syz [ 235.821697][ T5286] usb 1-1: SerialNumber: syz [ 235.906766][ T5286] usb 1-1: config 0 descriptor?? [ 236.010452][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x1 [ 236.024310][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.031978][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.047474][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.067880][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.099702][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.112639][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.126487][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.134405][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.145586][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.155045][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.166515][ C0] hrtimer: interrupt took 150957 ns [ 236.199104][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.244087][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.292427][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.373518][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.434906][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.512792][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 236.587937][ T25] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 236.973780][ T5284] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 237.521399][ T5286] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 237.523753][ T5286] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 237.523803][ T5286] dib0700: firmware download failed at 7 with -22 [ 237.574142][ T5286] usb 1-1: USB disconnect, device number 14 [ 238.396168][ T5284] gspca_cpia1: usb_control_msg 02, error -110 [ 238.417838][ T5284] gspca_cpia1: usb_control_msg 05, error -32 [ 238.430661][ T5284] gspca_cpia1: usb_control_msg 05, error -32 [ 238.441497][ T5284] gspca_cpia1: usb_control_msg 05, error -32 [ 238.461628][ T5284] gspca_cpia1: usb_control_msg 05, error -32 [ 238.468386][ T5284] cpia1 5-1:0.0: unexpected systemstate: 00 [ 238.789816][ T9] usb 5-1: USB disconnect, device number 26 [ 238.822399][ T5284] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 238.978970][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 239.075422][ T5284] usb 1-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 239.110838][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.153825][ T5284] usb 1-1: config 0 descriptor?? [ 239.189912][ T5284] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input15 [ 239.225127][ T7480] usb usb8: usbfs: process 7480 (syz.4.367) did not claim interface 0 before use [ 239.367162][ T5284] input: failed to attach handler mousedev to device input15, error: -2 [ 239.788351][ T29] audit: type=1400 audit(1725697787.050:79): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7467 comm="syz.0.366" [ 239.812571][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.366'. [ 239.960164][ T7468] fuse: Bad value for 'group_id' [ 240.002616][ T7468] fuse: Bad value for 'group_id' [ 240.875424][ T5285] usb 1-1: USB disconnect, device number 15 [ 241.433962][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 241.447884][ T7508] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 241.462498][ T7508] bridge0: port 3(netdevsim0) entered blocking state [ 241.482448][ T7508] bridge0: port 3(netdevsim0) entered disabled state [ 241.490295][ T7508] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 241.511966][ T7508] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 241.521922][ T7508] bridge0: port 3(netdevsim0) entered blocking state [ 241.528771][ T7508] bridge0: port 3(netdevsim0) entered forwarding state [ 241.663173][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 241.671790][ T25] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 241.687599][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 241.700509][ T5301] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 241.712434][ T25] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.730011][ T25] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 241.746755][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 241.791352][ T25] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.814012][ T25] usb 5-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 241.825080][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 241.842397][ T25] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.861359][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 241.872530][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.888798][ T25] usb 5-1: Product: syz [ 241.894152][ T25] usb 5-1: Manufacturer: syz [ 241.899568][ T25] usb 5-1: SerialNumber: syz [ 242.732919][ T7504] delete_channel: no stack [ 242.796912][ T25] adutux 5-1:168.0: interrupt endpoints not found [ 242.885163][ T25] usb 5-1: USB disconnect, device number 27 [ 243.259128][ T7522] netlink: 'syz.3.377': attribute type 29 has an invalid length. [ 243.275949][ T7526] netlink: 'syz.3.377': attribute type 29 has an invalid length. [ 243.902771][ T5244] Bluetooth: hci8: command 0x0405 tx timeout [ 243.988122][ T7543] input: syz0 as /devices/virtual/input/input16 [ 244.039033][ T29] audit: type=1326 audit(1725697791.300:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7544 comm="syz.2.382" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 244.440738][ T7552] usb usb8: usbfs: process 7552 (syz.4.383) did not claim interface 0 before use [ 244.562498][ T5301] usb 2-1: device descriptor read/64, error -71 [ 244.643438][ T7557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.386'. [ 244.852427][ T5301] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 244.894119][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 245.072414][ T5301] usb 2-1: Using ep0 maxpacket: 8 [ 245.087418][ T5301] usb 2-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 245.122503][ T5301] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 245.132569][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 245.149629][ T5301] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.165028][ T5301] usb 2-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 245.182495][ T5301] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 245.195306][ T5301] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.211256][ T5301] usb 2-1: config 168 has an invalid descriptor of length 169, skipping remainder of the config [ 245.223375][ T5301] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 178, changing to 11 [ 245.235650][ T5301] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.280746][ T5301] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.324649][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 245.343775][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.355279][ T5301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.378634][ T9] usb 4-1: Product: syz [ 245.385056][ T5301] usb 2-1: Product: syz [ 245.395540][ T9] usb 4-1: Manufacturer: syz [ 245.402456][ T9] usb 4-1: SerialNumber: syz [ 245.427080][ T9] usb 4-1: config 0 descriptor?? [ 245.433899][ T5301] usb 2-1: Manufacturer: syz [ 245.437711][ T9] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 245.457270][ T5301] usb 2-1: SerialNumber: syz [ 245.655233][ T9] gspca_sn9c2028: read1 error -32 [ 245.676068][ T9] gspca_sn9c2028: read1 error -32 [ 246.452558][ T5285] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 246.480443][ T7549] delete_channel: no stack [ 246.503989][ T5301] adutux 2-1:168.0: interrupt endpoints not found [ 246.530612][ T5301] usb 2-1: USB disconnect, device number 28 [ 246.676782][ T5285] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 246.692403][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.713269][ T5285] usb 5-1: config 0 descriptor?? [ 246.723505][ T5285] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 246.873968][ T25] usb 4-1: USB disconnect, device number 19 [ 247.047294][ T7579] netlink: 'syz.4.389': attribute type 1 has an invalid length. [ 247.069767][ T7579] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.389'. [ 247.333736][ T7589] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 247.895980][ T25] usb 5-1: USB disconnect, device number 28 [ 248.192462][ T5282] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 248.372593][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 248.387517][ T5282] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 248.417161][ T5282] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 248.449210][ T5282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.460142][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.464586][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 248.684209][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 248.706693][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 248.727789][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.752448][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.772414][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.794716][ T25] usb 5-1: config 0 descriptor?? [ 248.801724][ T7606] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 248.801979][ T5284] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.035407][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 249.061238][ T5284] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 249.076774][ T5284] usb 1-1: config 0 has no interface number 0 [ 249.089602][ T5284] usb 1-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 249.103225][ T5284] usb 1-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 249.120409][ T5284] usb 1-1: config 0 interface 12 has no altsetting 0 [ 249.152919][ T5284] usb 1-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 249.162628][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.170862][ T5284] usb 1-1: Product: syz [ 249.176140][ T5284] usb 1-1: Manufacturer: syz [ 249.180765][ T5284] usb 1-1: SerialNumber: syz [ 249.196716][ T5284] usb 1-1: config 0 descriptor?? [ 249.235251][ T7614] team_slave_0: entered promiscuous mode [ 249.241116][ T7614] team_slave_1: entered promiscuous mode [ 249.309326][ T25] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 249.326603][ T25] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 249.356548][ T25] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 249.385004][ T7615] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 249.440343][ T7615] team_slave_0: left promiscuous mode [ 249.446207][ T7615] team_slave_1: left promiscuous mode [ 249.478519][ T7615] team_slave_0: entered promiscuous mode [ 249.484330][ T7615] team_slave_1: entered promiscuous mode [ 249.507935][ T7615] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.567361][ T7615] team0: entered promiscuous mode [ 249.617141][ T7615] bond0: (slave team0): Enslaving as an active interface with an up link [ 250.179061][ T5286] usb 5-1: USB disconnect, device number 29 [ 250.182634][ T2643] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 250.352469][ T2643] usb 4-1: device descriptor read/64, error -71 [ 250.457657][ T5284] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 250.481443][ T5284] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 250.489807][ T5284] dib0700: firmware download failed at 7 with -22 [ 250.511701][ T5284] usb 1-1: USB disconnect, device number 16 [ 250.682495][ T2643] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 250.863204][ T2643] usb 4-1: device descriptor read/64, error -71 [ 250.930432][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 251.015133][ T2643] usb usb4-port1: attempt power cycle [ 251.442706][ T2643] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 251.491970][ T2643] usb 4-1: device descriptor read/8, error -71 [ 251.575800][ T5282] usb 2-1: USB disconnect, device number 29 [ 251.784210][ T2643] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 251.845021][ T2643] usb 4-1: device descriptor read/8, error -71 [ 251.863539][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 251.887019][ T7644] (unnamed net_device) (uninitialized): peer notification delay (2) is not a multiple of miimon (129), value rounded to 0 ms [ 251.906125][ T7644] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 251.915404][ T7644] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 251.915601][ T7649] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 251.942440][ T5286] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 251.992975][ T2643] usb usb4-port1: unable to enumerate USB device [ 252.152502][ T5286] usb 3-1: Using ep0 maxpacket: 16 [ 252.167935][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.200111][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.211806][ T5286] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 252.221091][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.264662][ T5286] usb 3-1: config 0 descriptor?? [ 252.315930][ T7654] team_slave_0: entered promiscuous mode [ 252.322042][ T7654] team_slave_1: entered promiscuous mode [ 252.360000][ T7655] libceph: resolve '0.0' (ret=-3): failed [ 252.455713][ T29] audit: type=1326 audit(1725697799.720:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.411" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 252.667459][ T29] audit: type=1400 audit(1725697799.930:82): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A2020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153540A20202020202020202020202020202F3234206C696E6B20554E49434153 pid=7641 comm="syz.2.407" [ 252.972588][ T5282] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 253.032415][ T2643] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 253.086072][ T5286] usbhid 3-1:0.0: can't add hid device: -71 [ 253.144536][ T5286] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 253.169783][ T5286] usb 3-1: USB disconnect, device number 14 [ 253.194854][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 253.210521][ T5282] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 253.227753][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.238083][ T5282] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 253.251677][ T2643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.252304][ T5282] usb 1-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 253.275436][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.296061][ T5282] usb 1-1: Product: syz [ 253.306825][ T5282] usb 1-1: Manufacturer: syz [ 253.311991][ T5282] usb 1-1: SerialNumber: syz [ 253.331512][ T5282] usb 1-1: config 0 descriptor?? [ 253.338064][ T2643] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.346672][ T5282] pl2303 1-1:0.0: required interrupt-in endpoint missing [ 253.394521][ T2643] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 253.452094][ T2643] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.523406][ T2643] usb 4-1: config 0 descriptor?? [ 253.802552][ T7654] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 253.812483][ T5285] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 253.887004][ T7654] team_slave_0: left promiscuous mode [ 253.940933][ T7654] team_slave_1: left promiscuous mode [ 253.988571][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.015781][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.025609][ T7654] team_slave_0: entered promiscuous mode [ 254.031583][ T7654] team_slave_1: entered promiscuous mode [ 254.040781][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 254.073484][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.087884][ T7654] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.122745][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.130157][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58801, setting to 1024 [ 254.142050][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.154245][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.161047][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.170544][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.187715][ T2643] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 254.194705][ T5285] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.206855][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.223909][ T2643] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 254.237545][ T5285] usb 2-1: config 0 descriptor?? [ 254.256930][ T7672] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 254.324219][ T2643] usb 1-1: USB disconnect, device number 17 [ 254.390387][ T7653] team_slave_0: left promiscuous mode [ 254.396020][ T7653] team_slave_1: left promiscuous mode [ 254.413068][ T7681] openvswitch: netlink: Missing key (keys=40, expected=80) [ 254.517655][ T7670] fuse: Unknown parameter '0x0000000000000007' [ 254.565981][ T5230] usb 4-1: USB disconnect, device number 24 [ 254.577653][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 254.625227][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.647376][ T5285] usb 2-1: USB disconnect, device number 30 [ 255.316103][ T7702] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 255.336613][ T7702] bridge0: port 3(netdevsim0) entered disabled state [ 255.343635][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.351663][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.392467][ T5285] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.439538][ T7702] bridge0: entered allmulticast mode [ 255.592417][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 255.605664][ T5285] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.621189][ T5285] usb 1-1: config 0 has no interface number 0 [ 255.628950][ T5285] usb 1-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 255.644274][ T5285] usb 1-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 255.658856][ T5285] usb 1-1: config 0 interface 12 has no altsetting 0 [ 255.674282][ T5285] usb 1-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 255.687573][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.722454][ T5285] usb 1-1: Product: syz [ 255.744322][ T5285] usb 1-1: Manufacturer: syz [ 255.758181][ T5285] usb 1-1: SerialNumber: syz [ 255.830546][ T5285] usb 1-1: config 0 descriptor?? [ 256.079513][ T5244] Bluetooth: Unexpected start frame (len 16) [ 256.147552][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.154869][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.212561][ T5230] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 256.422633][ T5230] usb 3-1: Using ep0 maxpacket: 8 [ 256.440839][ T5230] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 256.460591][ T5230] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 256.481440][ T5230] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.507872][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.050562][ T5285] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 257.069204][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 257.089169][ T5285] dib0700: firmware download failed at 7 with -22 [ 257.154167][ T5285] usb 1-1: USB disconnect, device number 18 [ 257.316016][ T7739] team_slave_0: entered promiscuous mode [ 257.321807][ T7739] team_slave_1: entered promiscuous mode [ 257.487067][ T7740] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 257.535670][ T7740] team_slave_0: left promiscuous mode [ 257.554845][ T7740] team_slave_1: left promiscuous mode [ 257.624517][ T7740] team_slave_0: entered promiscuous mode [ 257.630316][ T7740] team_slave_1: entered promiscuous mode [ 257.642773][ T7740] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.669006][ T7740] bond0: (slave team0): Enslaving as an active interface with an up link [ 257.847025][ T7747] usb usb8: usbfs: process 7747 (syz.1.424) did not claim interface 0 before use [ 258.015937][ T7750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 258.773231][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 259.105596][ T7743] team_slave_0: left promiscuous mode [ 259.111077][ T7743] team_slave_1: left promiscuous mode [ 259.128529][ T5285] usb 3-1: USB disconnect, device number 15 [ 259.389151][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 259.722187][ T29] audit: type=1326 audit(1725697806.980:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.2.436" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f86579 code=0x0 [ 259.762006][ T7776] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 260.182511][ T5285] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 260.202467][ T5297] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 260.392463][ T5297] usb 4-1: Using ep0 maxpacket: 8 [ 260.423840][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 260.435269][ T5297] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 260.445493][ T5285] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 260.465131][ T5297] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 260.477109][ T5297] usb 4-1: Product: syz [ 260.482050][ T5297] usb 4-1: Manufacturer: syz [ 260.489011][ T5297] usb 4-1: SerialNumber: syz [ 260.518305][ T5297] usb 4-1: config 0 descriptor?? [ 260.542435][ T5285] usb 2-1: config 0 has no interface number 0 [ 260.549779][ T5297] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 260.571475][ T5285] usb 2-1: too many endpoints for config 0 interface 12 altsetting 31: 152, using maximum allowed: 30 [ 260.589451][ T5285] usb 2-1: config 0 interface 12 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 152 [ 260.610943][ T5285] usb 2-1: config 0 interface 12 has no altsetting 0 [ 260.639466][ T5285] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 260.697174][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.705479][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 260.763056][ T5285] usb 2-1: Product: syz [ 260.767360][ T5285] usb 2-1: Manufacturer: syz [ 260.771969][ T5285] usb 2-1: SerialNumber: syz [ 260.783256][ T5285] usb 2-1: config 0 descriptor?? [ 261.093279][ T5301] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 261.332598][ T5301] usb 1-1: Using ep0 maxpacket: 16 [ 261.340318][ T5297] gspca_zc3xx: reg_w_i err -71 [ 261.347698][ T5297] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 261.364932][ T5301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.430135][ T5301] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 261.464791][ T5301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.465139][ T5297] usb 4-1: USB disconnect, device number 25 [ 261.502749][ T5244] Bluetooth: hci8: command 0x0405 tx timeout [ 261.562387][ T5301] usb 1-1: Product: syz [ 261.566623][ T5301] usb 1-1: Manufacturer: syz [ 261.598652][ T5301] usb 1-1: SerialNumber: syz [ 261.636594][ T5301] usb 1-1: config 0 descriptor?? [ 261.687834][ T5301] usb 1-1: Found UVC 0.00 device syz (046d:0721) [ 261.744741][ T5301] usb 1-1: No valid video chain found. [ 261.904144][ T30] INFO: task syz.3.111:5913 blocked for more than 143 seconds. [ 262.028292][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.077762][ T30] Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 262.107630][ T5285] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in cold state, will try to load a firmware [ 262.143646][ T5285] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 262.151193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.162516][ T5285] dib0700: firmware download failed at 7 with -22 [ 262.184445][ T5285] usb 2-1: USB disconnect, device number 31 [ 262.200709][ T30] task:syz.3.111 state:D stack:25488 pid:5913 tgid:5913 ppid:5531 flags:0x20000004 [ 262.265464][ T30] Call Trace: [ 262.269212][ T30] [ 262.272185][ T30] __schedule+0x1800/0x4a60 [ 262.301365][ T30] ? __pfx___schedule+0x10/0x10 [ 262.320396][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.352344][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.367388][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.394482][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 262.399674][ T30] ? schedule+0x90/0x320 [ 262.412814][ T30] schedule+0x14b/0x320 [ 262.421455][ T30] ? down_read+0x6a5/0xa40 [ 262.432876][ T30] schedule_preempt_disabled+0x13/0x30 [ 262.451342][ T30] down_read+0x705/0xa40 [ 262.462652][ T30] ? __pfx_down_read+0x10/0x10 [ 262.473197][ T30] ? __filemap_get_folio+0x984/0xc10 [ 262.485364][ T30] filemap_fault+0xb5b/0x1760 [ 262.495849][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.513490][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 262.534684][ T30] ? pte_alloc_one+0x443/0x5d0 [ 262.560759][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 262.572761][ T30] ? __pfx_validate_chain+0x10/0x10 [ 262.578472][ T30] ? __pfx_validate_chain+0x10/0x10 [ 262.584210][ T30] __do_fault+0x135/0x460 [ 262.588581][ T30] handle_pte_fault+0x1176/0x6fc0 [ 262.593748][ T30] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 262.599819][ T30] ? mark_lock+0x9a/0x350 [ 262.604658][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 262.610522][ T30] ? __lock_acquire+0x137a/0x2040 [ 262.616021][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 262.621757][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 262.627547][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 262.634090][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 262.640265][ T30] handle_mm_fault+0x1109/0x1bc0 [ 262.645411][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 262.653733][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 262.659138][ T30] ? exc_page_fault+0x113/0x8c0 [ 262.664278][ T30] exc_page_fault+0x459/0x8c0 [ 262.669401][ T30] asm_exc_page_fault+0x26/0x30 [ 262.676615][ T30] RIP: 0023:0xf7107155 [ 262.681050][ T30] RSP: 002b:00000000f752fab0 EFLAGS: 00010246 [ 262.687635][ T30] RAX: 0000000000010001 RBX: 0000000000000000 RCX: 0000000020000040 [ 262.696135][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.705786][ T30] RBP: 00000000f752fdb8 R08: 0000000000000000 R09: 0000000000000000 [ 262.714327][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 262.729450][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 262.738008][ T30] [ 262.741957][ T30] [ 262.741957][ T30] Showing all locks held in the system: [ 262.758068][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.813233][ T30] 1 lock held by khungtaskd/30: [ 262.818219][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 262.831115][ T30] 2 locks held by kworker/u8:10/3977: [ 262.854836][ T30] 2 locks held by getty/4994: [ 262.859630][ T30] #0: ffff8880309be0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.917786][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 262.942691][ T30] 1 lock held by syz.3.36/5429: [ 262.947743][ T30] #0: ffff8880230a70c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 262.971269][ T30] 2 locks held by syz.3.111/5913: [ 263.042479][ T30] #0: ffff888031be1580 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 263.099036][ T30] #1: ffff8880230a70c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 263.140978][ T30] 3 locks held by kworker/1:2H/6777: [ 263.148557][ T30] 2 locks held by syz.2.203/6780: [ 263.173692][ T30] #0: ffff88807bc95220 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 263.199692][ T30] #1: ffff8880230a70c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 263.219695][ T30] 1 lock held by syz.2.227/7001: [ 263.227884][ T30] #0: ffff8880230a70c0 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 263.242414][ T30] 1 lock held by syz-executor/7129: [ 263.247718][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 263.259501][ T30] 1 lock held by syz.3.434/7771: [ 263.267823][ T30] #0: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 263.278270][ T30] 2 locks held by syz.0.443/7799: [ 263.283916][ T30] #0: ffff88807fbbd608 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 263.294676][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 263.309698][ T5297] usb 1-1: USB disconnect, device number 19 [ 263.324106][ T30] [ 263.326477][ T30] ============================================= [ 263.326477][ T30] [ 263.349721][ T30] NMI backtrace for cpu 0 [ 263.354110][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 263.364851][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 263.374927][ T30] Call Trace: [ 263.378256][ T30] [ 263.381215][ T30] dump_stack_lvl+0x241/0x360 [ 263.385979][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.391299][ T30] ? __pfx__printk+0x10/0x10 [ 263.395913][ T30] ? vprintk_emit+0x667/0x7c0 [ 263.400672][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 263.405795][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 263.410868][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 263.416328][ T30] ? _printk+0xd5/0x120 [ 263.420479][ T30] ? __pfx__printk+0x10/0x10 [ 263.425083][ T30] ? __wake_up_klogd+0xcc/0x110 [ 263.429949][ T30] ? __pfx__printk+0x10/0x10 [ 263.434533][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 263.439564][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 263.445580][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 263.451569][ T30] watchdog+0xff4/0x1040 [ 263.455825][ T30] ? watchdog+0x1ea/0x1040 [ 263.460246][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.464944][ T30] kthread+0x2f0/0x390 [ 263.469039][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.473726][ T30] ? __pfx_kthread+0x10/0x10 [ 263.478353][ T30] ret_from_fork+0x4b/0x80 [ 263.482816][ T30] ? __pfx_kthread+0x10/0x10 [ 263.487401][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.492310][ T30] [ 263.495378][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.502842][ T30] Sending NMI from CPU 0 to CPUs 1: [ 263.508086][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 263.561385][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 263.568290][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 263.578827][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 263.588983][ T30] Call Trace: [ 263.592253][ T30] [ 263.595202][ T30] dump_stack_lvl+0x241/0x360 [ 263.599910][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.605128][ T30] ? __pfx__printk+0x10/0x10 [ 263.609723][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.615713][ T30] ? vscnprintf+0x5d/0x90 [ 263.620051][ T30] panic+0x349/0x860 [ 263.624033][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.630273][ T30] ? __pfx_panic+0x10/0x10 [ 263.634700][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 263.640068][ T30] ? __irq_work_queue_local+0x137/0x410 [ 263.645615][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 263.650980][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.657161][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 263.663316][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 263.669492][ T30] watchdog+0x1033/0x1040 [ 263.673876][ T30] ? watchdog+0x1ea/0x1040 [ 263.678303][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.682986][ T30] kthread+0x2f0/0x390 [ 263.687059][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.691992][ T30] ? __pfx_kthread+0x10/0x10 [ 263.697183][ T30] ret_from_fork+0x4b/0x80 [ 263.701599][ T30] ? __pfx_kthread+0x10/0x10 [ 263.706356][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.711129][ T30] [ 263.714331][ T30] Kernel Offset: disabled [ 263.718654][ T30] Rebooting in 86400 seconds..