last executing test programs: 12.674810419s ago: executing program 0 (id=540): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r2) getdents64(r2, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x6a, &(0x7f0000001600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@void, {0x8100, 0x3, 0x1}}, {@ipv4={0x8906, @gre={{0x5, 0x4, 0x0, 0x2, 0x58, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @empty}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x1, 0x2, 0x0, 0x1, 0x3, 0x3}, 0x1, {0xffff}}}, {0x8, 0x22eb, 0x1, {{0xa, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x1}, 0x2, {0x5, 0x7b, 0x0, 0x0, 0x1, 0x0, 0x3}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) mbind(&(0x7f0000770000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000000)=0x85, 0x7, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x85f, 0x0) mlock(&(0x7f0000399000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 11.627372657s ago: executing program 0 (id=546): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x0, r3}) dup2(r1, r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r5 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x210002, 0x8) r6 = open_tree(r5, &(0x7f0000000140)='./file0\x00', 0x89900) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x0, 0x0, 0x3}}, 0x2e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) ioctl$PPPIOCGL2TPSTATS(r7, 0x40047459, 0xfffffffffffffffd) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, &(0x7f0000000180)=""/63, &(0x7f00000001c0)=""/109, &(0x7f0000000240)=""/165, 0x80a0000}) 11.375581482s ago: executing program 0 (id=549): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x8, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @rand_addr=0x3}}}}) r1 = open(0x0, 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x1, 0xffffffff, 0xfffffe01, 0x44840}) 9.927550535s ago: executing program 4 (id=555): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r4, 0x44, 0x8, 0x7}, 0x10) 9.744848376s ago: executing program 4 (id=557): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42b}}]}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000100)=r4, 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000100)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@private=0xa010100, 0x4e23, 0x9, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x2e, 0x0, 0xee00}, {0x5, 0x8, 0x8000, 0x901f, 0x8000000000000000, 0x4, 0xfffffffffffff001}, {0x9, 0xfffffffffffffff7, 0x1, 0xfff}, 0x1, 0x0, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x4d6, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3504, 0x0, 0x1, 0x8, 0x5, 0x526e, 0xd02c}}, 0xe8) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000400)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.073412763s ago: executing program 4 (id=558): sysfs$2(0x2, 0x6, &(0x7f0000000000)=""/196) r0 = syz_usb_connect(0x0, 0xffffffffffffffd2, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xa0, 0x42, 0x68, 0x20, 0x1fb9, 0x303, 0x35f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x97, 0x10, 0x2, 0x8c, 0x97, 0x6, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x4, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001800)={0x14, &(0x7f0000001740)={0x0, 0x5, 0xc, {0xc, 0x21, "f5b3db686f6331598b91"}}, 0x0}, 0x0) 6.943397741s ago: executing program 3 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061102c00000000004000000000000000265ce07fd362582b"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') lseek(r6, 0x9, 0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000200)='~', 0xb7) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r7, 0x850, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}]}, 0x3}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) mremap(&(0x7f0000270000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00004b3000/0x4000)=nil) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x3, r10}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000002c0)={0x63, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r11, 0xc00464be, &(0x7f0000000180)) 5.942504393s ago: executing program 4 (id=567): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10}}, 0xc4}}, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000001100)="94", 0x1) r6 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0xc0105b08, 0x0) tee(r0, r4, 0xaf5, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ftruncate(r10, 0x2000009) sendfile(r9, r10, 0x0, 0x7ffff000) r11 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) splice(r11, 0x0, r8, 0x0, 0x78dd, 0x0) write$binfmt_script(r4, &(0x7f0000000540)={'#! ', './file0'}, 0xb) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400007e0a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x10001, 0x1, 0x0, 'queue0\x00', 0x2}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r12, &(0x7f0000000300), 0x0}, 0x20) write(r2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x8, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 3.709766999s ago: executing program 3 (id=568): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000580)={0x2c, 0xc, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x56, "3d03e1f771a66caf0f6fd147d909f471d5f66f2dfed60badd753ba82e470a6b92ec7ab5c3f7b93486b48443997cf03977c897526ea9b01ce4433b976a1959c9b066e02cdeafc6bbe78bf968ddd763126471972d438fb"}]}, 0x68) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r5, 0x0) accept$inet6(r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x1, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x700000, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x3ff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 2.727193641s ago: executing program 3 (id=575): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x200) set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x10001) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.65211637s ago: executing program 1 (id=576): r0 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x0, 0xd, 0x0, "13ea57ffffffdfff018000000000001000000000000000088b0500", 0x30323953}) 2.555318416s ago: executing program 3 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000100000042abd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="00200025980200000000000000beae7a3af1cc00"], 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x200000c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0xf, 0x0, @thr={&(0x7f0000002280)="6b881c968450", &(0x7f00000033c0)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000002180)='./file0\x00', 0x0, &(0x7f0000008380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f00000022c0)={0x18, 0x0, r5, {0x7}}, 0x18) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x2c}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff890000000000000000000000ffffff8d00000100"/40, 0x28}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x80000, 0x200) r9 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f00000023c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r8, 0xc0709411, &(0x7f0000000080)={{r10, 0x8, 0x7fffffffffffffff, 0x8000000000000000, 0x2, 0x2, 0x80000000, 0x4, 0x1, 0x101, 0x29d0, 0x0, 0xfff, 0x8, 0xf4}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002300)={{r10, 0x2, 0x4, 0xceb6, 0xdb8, 0x1, 0x80000001, 0x0, 0xfffff800, 0x2, 0x2d71, 0x6, 0x40, 0x2, 0xffff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) accept$packet(0xffffffffffffffff, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002240)=0x14) write$FUSE_IOCTL(r3, &(0x7f0000002140)={0x20, 0x0, r6, {0x0, 0x4}}, 0x20) lstat(&(0x7f0000008800)='./file0\x00', 0x0) getdents(r4, &(0x7f000000ad40)=""/4096, 0x1000) read$FUSE(r3, &(0x7f0000008d00)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f000000bd40)="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", 0x2000, &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="b00000000000000001000000000000000000000000000002000000000000000005"], 0x0, 0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @remote}) 2.380950279s ago: executing program 1 (id=578): r0 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6}]}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000040)=0x18) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000500)=0x630, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="02f117000000006376d1f9127d5f050000009feeb19ce4dd880320f847", 0x1d, 0x41, &(0x7f0000000340)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000102, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) 1.783048652s ago: executing program 2 (id=580): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) r6 = dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0x10001, 0x7fffffff, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x66, 0x0, 0x2, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, {[@cipso={0x86, 0x60, 0x1, [{0x2, 0x11, "806e536af2b0d155be4184d1bbdfa7"}, {0x6, 0x10, "d0be5e2928c45b7130ed6ca2f678"}, {0x6, 0xe, "fd085c1a24c98cdf262b63cc"}, {0x1, 0x6, '1P`9'}, {0x2, 0x8, "2516e64e54f3"}, {0x0, 0x5, "799390"}, {0x0, 0x7, "73fed20419"}, {0x1, 0x11, "d1ecc0fb057cbf5bef0ff9f059d025"}]}, @ssrr={0x89, 0x7, 0xbf, [@remote]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={@remote, 0x3b, r7}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000000040)=0x7, 0x4) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.696568055s ago: executing program 1 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000800000000081000000", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) 1.695777001s ago: executing program 4 (id=582): syz_usb_connect(0x3, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x5b, 0xd2, 0xcc, 0x10, 0x582, 0xa3, 0xb9e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x1, 0x40, 0x0, [{{0x9, 0x4, 0x22, 0x0, 0x0, 0x88, 0x72, 0xba, 0x0, [@cdc_ncm={{0x0, 0x24, 0x6, 0x0, 0x1, 'q\ng'}, {0x0, 0x24, 0x0, 0x9}, {0x0, 0x24, 0xf, 0x1, 0x1, 0x2, 0x4, 0x5}, {0x0, 0x24, 0x1a, 0x101, 0x1}}]}}]}}]}}, 0x0) syz_usb_connect$uac1(0x513990807f768978, 0xb2, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x5bb73f3ba4dba840, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x1, 0x88, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x17}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x3, 0x5, 0x5}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x6, 0x6, 0x9, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x22, 0x6, 0x8, {0x7, 0x25, 0x1, 0x81, 0xd, 0x38b5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x2, 0x2, 0xfe, 0x8, "03cb26", "165b"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xda, 0x2, 0x7, 0xf5, "0930e7", "a2eb"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xff, 0x4, 0x8, 0x5, "", "b2504f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xb, 0x3, 0xb, {0x7, 0x25, 0x1, 0x0, 0x7f}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0xa, 0x6, 0x6, 0x40, 0x8}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0xea, &(0x7f00000001c0)=@string={0xea, 0x3, "6f809838569004e3d50f0f3da55a0210a65af3fc76f19b7fd91611ee65a9d8133f629b72d06cee75ff0ab0de97f977cef5bca2533a4c42a2057430c9f9a070838d3189c18e85481de59fdb8b0469ee0cd51f72c27b10596b7bb426ead5e70e9b29f6d692a6ab529ff50f07f05687fbbd25ce011813b6c24ced58db3136977dd6a3e94924c58530081a9a60e6e4a3ff79e80545942f8d94ac896bccde7bb8d0a831de47b6a12c679c514b8e8349a72055cef818eaa45e2919cff20507a19f76fd22ff7892fcf68561df010e75281be9a47b93c850c792d071a7179872da2439476e1f4660508f209e"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x7e51}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc01}}, {0x70, &(0x7f0000000380)=@string={0x70, 0x3, "a63b369513ef4c8934504aeb5e81ac0400aa1a229b0e858a5ec3ee2e081e7a97e9f12b6378514ebbde1ddce9fae52d7fad6512603d577b2e5e2f8c513bbd4021d481e9e1f4f6f424780b023e733863b2b1e09df028242ad640005c2e5b148eee60f42f21d8550f12e101e7280cd4"}}, {0xc6, &(0x7f0000000400)=@string={0xc6, 0x3, "63cb3beb2db958de651050e6f85e2b547279d446db05e57b42f585656068a1972dbec56cb67f84f660d5255d12b751f718e40b98c99bb88aea15a4561056f6e25515b7921cd891a8b69a3b82c3e4e1520882ec8bd4b59682f92df36c0ecae52face38041ff7d718ee60ea4bb2e3ebad3ee56af083f8582afeb44c7534b692126e5b10290d646717d31d0a627e31ba366d9458dca6f8f8d0f49f7b26129fe90d415db9790b408abc36ac03f654cc00f5acc8107faa7440be23085d58b47df3ad0cdd6d14f"}}, {0x99, &(0x7f0000000500)=@string={0x99, 0x3, "ebde0abdfde273ce76de8ea380c89f0ce97314d025b757f8f1319c4f2688b25c326fae544d30bab301168ad3af543fbec9cee4fadcd5f33ad2b7ed088ab0f6a4ca5f0f333b9ffe939494358c9d3de60fefd2de6c417c10f44e05d8afc912bb9bb4b80176b9d31c4b53a89b54c41aaded3668cb09645746061fd4611fc459de59eb2eb80dd3a3e43b3046ed2a99af349200bf0008f3ecfb"}}]}) 1.437578427s ago: executing program 1 (id=583): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406a053500000000000001090224000100000000090400fd010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) close(r1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0x0, 0x1000, 0x3}}, 0x2e) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, 0xfffffffffffffffd) (rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 1.43462766s ago: executing program 3 (id=584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000033a80)=""/102383, 0x18fef}, {&(0x7f0000001400)=""/92, 0x5c}], 0x2, 0x0, 0xfffffff9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000000200), 0x40002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000280)={0x7, 0x1, 0x1, "ff02050000000001000000000000decba026349bd7b96c3dcb70cef9366100", 0xa2ee05a7}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000001680)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x83, &(0x7f0000000040)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001340)={r4, @in6={{0xa, 0x0, 0xa, @private0, 0x50}}}, &(0x7f0000001140)=0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000800)=ANY=[], 0x18) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000001640)=[{0x0}, {&(0x7f0000001540)="d2afb1e6e00b2fa4f222826b8738dadaf8a58d64ce53dafd6af97f405b9e01b6e852c242ac24608d7926ffc7665139c80aa813c453ba0b39172d29aaaee75e33c918254b69823bd2b541ebcb5256b162f035fa34fd9f7d3e0dde5afa73cb0abb2e6602774f2ce95bbc8df9089b5c3faa7712392b1fd913a6cc88d1b1663d4fd9c58fd2eef528a250eb8ebfc1d91b790bcf8dabd261f349bc5de4582d84c074fc638a028e172bccbd2cd5b7deadeb799af8634715b49fc83c1e35eb241e5df75d4ee21ed127af9d3dc47bf4dd13ee45629da2b03ee5cc5a60c76fa30d1fe3cae36d9dbe7a255667943d", 0xe9}], 0x2}}], 0x1, 0x40) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000017c0)="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", 0x1d2}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYRES32=r5], 0x7c}}, 0x4c000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001180)={r4, @in6={{0xa, 0x4e23, 0xac6, @empty, 0x400}}}, &(0x7f0000001240)=0x84) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001300)={0x24, &(0x7f0000001480)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRES16, @ANYBLOB="247f6e0b81e68c78bb07920fcd22091e50b86a842e338fd88602316a04fd60503cabadb0d8a4af98438b9fa3d3c2f9f6e040e16401eb77f5cf49ea60e435be24998b602538fe236093e5f8ee8a513fe83b68c5a672db7406eee7ba241a32c0c0355efcff93d77546d87b339646098eef7f228d387066a28c18604125a0739b726b855842d407eb"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0x200, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) syz_usb_control_io(r6, 0x0, &(0x7f0000000cc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) 1.329047562s ago: executing program 0 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000680)='source\x84\xcc\xa03\'C\xc1\x87a\x95\xdeY\xfd\x1b\xea\n\xa5m3\x94\xd0r\x81\xb6\x1c\x84\x12\xc9\x89\xc6\x00\x0e\x98\xb8\xe4I\x005\xc0\xc9\x17\xbcs\xf4\x1d\x10\xc9\x9c\x14\'J\xe4\xd0h\f\bP\xd4@\xd1\xea\xa6LQP\xc9_\xbfr\xf2\x7fU\xe5\xe3\xd5]\x13F\xd3\xf0\x96HLKk{\x88\xa4\xac\x04\x1bkg\xa1a\xa1\x16\a\xf7\xcf\xe7gy\xe2\xc0\xe0z5%\x9duG\x8aJ\xc6B\x9e\xae!\xdf!\x18\x91\xact]^\xa9@\xd4Y\xb5\xfd)a\"\xab\xc7\x17w9\x1b\xe0\xa3\x04J\x11\'\xc7\x99k#\xccN\xbe\xb9\xa5UH)\xaeK\xaa\xf5\x1cj\xa6\xa3Z\xc8\xc3\xac\xe4\x99&\xb3T\xb8\xb6*\xb9]l&\"\xc5\xff\x05\xf3\x9c\xb9\x91z!T8\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00A\x9dy\xfe\x95M\x88\'PC\a0\xee\xef\x01\xc9\xb1\x86\xba\xb3\x88)\xfaT>\xa71\x9e\xbawQ\xe6\xbb\x16\x81\xe3/\x9e\xd8\xc2\x9aVR\xda\x12\xd0C\xa8\xefc\xded\xb40V\x1c\xe4\xa5\xfaoj\xd5v\x11\xd7\xa7(H\x97Q[ <=K\x89\xde\x13\xac\xba\b\xc3\x94{\xfe\x87\xeac)(\x89/\xe4i\x83\xefd\x1b\xaa\xb63\x13\x90C\x14\'\xb5y\xc7\xfa\xe9a\xd1\xa5\xc9R`\xa3\xc1\xf1mx\xbfZ\x90\xd49\x84\xcd\xee\x1bf\x82\xe6\xf1W\xba\a\xa1\xe6\xd6\xe09h\xfc\xc2m\xd1\x86\xa0\xd1', &(0x7f00000002c0)='Y\xd9\xbeu\x00'/16, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5b1000040"]) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/slabinfo\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000200)="ae8408c5d1c95b0d3a6a8fa4c4709e099d0a79ba9170c67e9f5a1f034589636e2cc99f46ae652fed93e3d52fe6a2c7671ee2be5eeb46a151b41b566f", 0x3c) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000004940)=[{{&(0x7f0000000380)=@nl=@proc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/87, 0x57}, {&(0x7f00000004c0)=""/20, 0x14}, {&(0x7f0000000500)=""/52, 0x34}, {&(0x7f0000000800)=""/168, 0xa8}, {&(0x7f0000000540)=""/8, 0x8}], 0x5, &(0x7f00000008c0)=""/65, 0x41}, 0xe68c}, {{&(0x7f0000000940)=@nfc_llcp, 0x80, &(0x7f0000001bc0)=[{&(0x7f00000009c0)=""/245, 0xf5}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f0000000ac0)=""/206, 0xce}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x4, &(0x7f0000001c00)=""/207, 0xcf}, 0x3}, {{&(0x7f0000001d00)=@phonet, 0x80, &(0x7f0000003400)=[{&(0x7f0000001d80)=""/65, 0x41}, {&(0x7f0000001e00)=""/209, 0xd1}, {&(0x7f0000001f00)=""/124, 0x7c}, {&(0x7f0000001f80)=""/193, 0xc1}, {&(0x7f0000002080)=""/190, 0xbe}, {&(0x7f0000002140)=""/125, 0x7d}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/201, 0xc9}, {&(0x7f00000032c0)=""/218, 0xda}, {&(0x7f00000033c0)=""/39, 0x27}], 0xa, &(0x7f0000004b80)=""/235, 0xeb}, 0x4}, {{&(0x7f00000035c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/199, 0xc7}, {&(0x7f0000004ac0)=""/146, 0x92}, {&(0x7f0000004800)=""/207, 0xcf}], 0x4}, 0x2}], 0x4000000000000b8, 0xa1921632cc23326a, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0500d3c0d700", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_procs(r3, &(0x7f0000000480)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x10000}, 0x8) r7 = openat$cgroup_root(0xffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0x1000, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="ffff3cffffffffbbbbbb78ac1e8101ac1414bb441c0e01ac1414000000000035531d62d9a5205ee37fff1cfeebe000000200000000ac1414aa000000000d00907800"/81], 0x0) readv(r8, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x5}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x6}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x7}, 0x8) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004a80)={r5, 0x0, 0x25, 0x4, @val=@iter={&(0x7f0000004a40)=@map_fd=r3, 0x10}}, 0x20) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r11, &(0x7f0000000140)='./file0\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r7, r3, 0x22, 0x2000, r5, @value=r9}, 0x20) 1.298813024s ago: executing program 3 (id=585): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000001100)="94", 0x1) tee(0xffffffffffffffff, r2, 0xaf5, 0x0) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r0, 0x0, 0x0) 1.108815656s ago: executing program 2 (id=586): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x200) set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x10001) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00"/13, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 964.991016ms ago: executing program 2 (id=587): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x200) set_mempolicy(0x1, &(0x7f0000000000)=0x2, 0x10001) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 744.803405ms ago: executing program 2 (id=588): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x1, 0x3, 0x2, "0088f200000000000000000000000096c30000000000000000000100", 0x41416770}) 645.018555ms ago: executing program 2 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@private2, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @multicast}, 0x10) 416.970158ms ago: executing program 1 (id=590): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x773}]}, 0x4c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 308.890961ms ago: executing program 0 (id=591): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0xb000000}, {}, {}, {0x0, 0x0, 0x1}, 0x6, 0x100, 0x5, 0x157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}) 283.526719ms ago: executing program 2 (id=592): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x400402, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac93c10050b86174d8d010203010902"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SG_EMULATED_HOST(r3, 0x2283, &(0x7f0000000480)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000300)) 145.18944ms ago: executing program 1 (id=593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000800000000081000000", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff0000060066008e880000220033"], 0x58}}, 0x0) 79.176863ms ago: executing program 0 (id=594): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x1899e1a5c338c547) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x4000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000040)) writev(r0, &(0x7f0000003bc0)=[{&(0x7f0000003a40)="f1b9", 0x2}], 0x1) 0s ago: executing program 4 (id=596): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000001100)="94", 0x1) tee(0xffffffffffffffff, r2, 0xaf5, 0x0) write$binfmt_script(r2, &(0x7f0000000540)={'#! ', './file0'}, 0xb) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): xd [ 137.577063][ T6590] veth0_vlan: entered promiscuous mode [ 137.586150][ T5230] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 137.606109][ T5230] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 137.614725][ T6590] veth1_vlan: entered promiscuous mode [ 137.632375][ T5230] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 137.659893][ T5230] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 137.687797][ T5230] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 137.696576][ T6590] veth0_macvtap: entered promiscuous mode [ 137.712462][ T5230] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 137.731531][ T6590] veth1_macvtap: entered promiscuous mode [ 137.745610][ T5230] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.782017][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.801336][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.820260][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.831091][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.867659][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.888625][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.911334][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.930494][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.940488][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.960862][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.971500][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.986174][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.997822][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.029841][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.053239][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.073414][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.107354][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.133515][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.161870][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.188910][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.211697][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.227803][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.245801][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.266789][ T6590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.291306][ T6590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.337348][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.387660][ T6590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.427145][ T6590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.457857][ T6590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.495862][ T6590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.665510][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.703662][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.750421][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.761044][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.774563][ T5230] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 139.025852][ T6822] usb usb7: usbfs: process 6822 (syz.1.301) did not claim interface 0 before use [ 139.037577][ T5286] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 139.112270][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 139.150742][ T5230] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 139.160965][ T5230] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 139.171797][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.233044][ T6833] usb usb7: usbfs: process 6833 (syz.2.303) did not claim interface 0 before use [ 139.277182][ T5230] usb 5-1: New USB device found, idVendor=0d57, idProduct=e999, bcdDevice=a7.63 [ 139.288505][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.296829][ T5230] usb 5-1: Product: syz [ 139.301015][ T5230] usb 5-1: Manufacturer: syz [ 139.305890][ T5230] usb 5-1: SerialNumber: syz [ 139.317048][ T5230] usb 5-1: config 0 descriptor?? [ 139.469860][ T6840] Cannot find del_set index 0 as target [ 139.829006][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.101916][ T51] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.325937][ T5285] IPVS: starting estimator thread 0... [ 140.342091][ T51] usb 1-1: Using ep0 maxpacket: 8 [ 140.360823][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.397632][ T51] usb 1-1: config 0 has no interfaces? [ 140.422497][ T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 140.442187][ T6873] IPVS: using max 32 ests per chain, 76800 per kthread [ 140.465943][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.498006][ T51] usb 1-1: SerialNumber: syz [ 140.523317][ T51] usb 1-1: config 0 descriptor?? [ 140.838055][ T51] usb 1-1: USB disconnect, device number 14 [ 140.934904][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.317'. [ 141.046123][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.105518][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.136034][ T6897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.180494][ T5285] usb 5-1: USB disconnect, device number 32 [ 141.203828][ T6897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.239464][ T6903] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 141.297604][ T6905] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.319'. [ 141.682150][ T25] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 141.854553][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 141.882125][ T25] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 141.891259][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.951834][ T25] usb 3-1: Product: syz [ 141.956098][ T25] usb 3-1: Manufacturer: syz [ 141.991880][ T25] usb 3-1: SerialNumber: syz [ 142.013259][ T25] usb 3-1: config 0 descriptor?? [ 142.042084][ T25] gspca_main: conex-2.14.0 probing 0572:0041 [ 142.354737][ T25] usb 3-1: USB disconnect, device number 24 [ 142.505235][ T6960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 142.836728][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 142.865502][ T6967] input: syz1 as /devices/virtual/input/input14 [ 143.232328][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 143.382363][ T25] usb 3-1: device descriptor read/64, error -71 [ 143.621886][ T25] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 143.709026][ T6989] netlink: 40 bytes leftover after parsing attributes in process `syz.0.342'. [ 143.772237][ T25] usb 3-1: device descriptor read/64, error -71 [ 143.832243][ T6994] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.345'. [ 143.886897][ T25] usb usb3-port1: attempt power cycle [ 144.151179][ T5230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.231901][ T25] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 144.261789][ T5286] usb 2-1: device descriptor read/64, error -110 [ 144.281612][ T25] usb 3-1: device descriptor read/8, error -71 [ 144.339080][ T5230] usb 4-1: Using ep0 maxpacket: 16 [ 144.349614][ T5230] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 144.373322][ T5230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.381391][ T5230] usb 4-1: Product: syz [ 144.397669][ T5230] usb 4-1: Manufacturer: syz [ 144.402547][ T5230] usb 4-1: SerialNumber: syz [ 144.412746][ T5230] usb 4-1: config 0 descriptor?? [ 144.435179][ T5230] gspca_main: conex-2.14.0 probing 0572:0041 [ 144.542611][ T5286] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 144.550308][ T7018] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.550443][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 144.623921][ T25] usb 3-1: device descriptor read/8, error -71 [ 144.731831][ T5286] usb 2-1: device descriptor read/64, error -32 [ 144.738541][ T25] usb usb3-port1: unable to enumerate USB device [ 144.798374][ T7023] FAULT_INJECTION: forcing a failure. [ 144.798374][ T7023] name failslab, interval 1, probability 0, space 0, times 0 [ 144.819089][ T7023] CPU: 1 UID: 0 PID: 7023 Comm: syz.1.352 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 144.829371][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.839445][ T7023] Call Trace: [ 144.842737][ T7023] [ 144.845681][ T7023] dump_stack_lvl+0x241/0x360 [ 144.850384][ T7023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.855598][ T7023] ? __pfx__printk+0x10/0x10 [ 144.860216][ T7023] ? __kmalloc_noprof+0xb0/0x400 [ 144.865179][ T7023] ? __pfx___might_resched+0x10/0x10 [ 144.870482][ T7023] ? idr_alloc+0x104/0x1b0 [ 144.874918][ T7023] should_fail_ex+0x3b0/0x4e0 [ 144.879610][ T7023] ? __list_lru_init+0xb1/0x5e0 [ 144.884477][ T7023] should_failslab+0xac/0x100 [ 144.889169][ T7023] ? __list_lru_init+0xb1/0x5e0 [ 144.894031][ T7023] __kmalloc_noprof+0xd8/0x400 [ 144.898817][ T7023] __list_lru_init+0xb1/0x5e0 [ 144.903511][ T7023] alloc_super+0x7d9/0x9d0 [ 144.907947][ T7023] sget_fc+0x34c/0x9c0 [ 144.912031][ T7023] ? __pfx_set_anon_super_fc+0x10/0x10 [ 144.917501][ T7023] ? __pfx_proc_fill_super+0x10/0x10 [ 144.922797][ T7023] get_tree_nodev+0x2a/0x140 [ 144.927409][ T7023] vfs_get_tree+0x90/0x2b0 [ 144.931835][ T7023] vfs_cmd_create+0xa0/0x1f0 [ 144.936434][ T7023] ? __se_sys_fsconfig+0xa15/0xf70 [ 144.941558][ T7023] __se_sys_fsconfig+0xa1f/0xf70 [ 144.946516][ T7023] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 144.951988][ T7023] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.957989][ T7023] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.964334][ T7023] ? do_syscall_64+0x100/0x230 [ 144.969121][ T7023] ? __x64_sys_fsconfig+0x20/0xc0 [ 144.974159][ T7023] do_syscall_64+0xf3/0x230 [ 144.978681][ T7023] ? clear_bhb_loop+0x35/0x90 [ 144.983370][ T7023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.989277][ T7023] RIP: 0033:0x7f889697dff9 [ 144.993704][ T7023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.013426][ T7023] RSP: 002b:00007f889774d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 145.021866][ T7023] RAX: ffffffffffffffda RBX: 00007f8896b35f80 RCX: 00007f889697dff9 [ 145.029856][ T7023] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 145.037840][ T7023] RBP: 00007f889774d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.045828][ T7023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.053819][ T7023] R13: 0000000000000000 R14: 00007f8896b35f80 R15: 00007f8896c5fa28 [ 145.061823][ T7023] [ 145.212775][ T5230] usb 4-1: USB disconnect, device number 14 [ 145.231785][ T5286] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 145.262094][ T5286] usb 2-1: device descriptor read/8, error -32 [ 145.361549][ T7032] netlink: 'syz.1.354': attribute type 6 has an invalid length. [ 145.487644][ T51] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 145.507809][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 145.511912][ T5286] usb 2-1: reset high-speed USB device number 31 using dummy_hcd [ 145.560760][ T5286] usb 2-1: device descriptor read/8, error -32 [ 145.653374][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.671976][ T5286] raw-gadget.1 gadget.1: failed to queue suspend event [ 145.690198][ T938] usb 2-1: USB disconnect, device number 31 [ 145.696348][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.724273][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 145.734863][ T51] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.746249][ T7044] FAULT_INJECTION: forcing a failure. [ 145.746249][ T7044] name failslab, interval 1, probability 0, space 0, times 0 [ 145.767074][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.777035][ T51] usb 5-1: config 0 descriptor?? [ 145.782185][ T7044] CPU: 1 UID: 0 PID: 7044 Comm: syz.1.360 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 145.792451][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.802517][ T7044] Call Trace: [ 145.805790][ T7044] [ 145.808710][ T7044] dump_stack_lvl+0x241/0x360 [ 145.813385][ T7044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.818588][ T7044] ? __pfx__printk+0x10/0x10 [ 145.823183][ T7044] ? ref_tracker_alloc+0x332/0x490 [ 145.828289][ T7044] should_fail_ex+0x3b0/0x4e0 [ 145.832970][ T7044] ? skb_clone+0x20c/0x390 [ 145.837398][ T7044] should_failslab+0xac/0x100 [ 145.842080][ T7044] ? skb_clone+0x20c/0x390 [ 145.846525][ T7044] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 145.851932][ T7044] skb_clone+0x20c/0x390 [ 145.856193][ T7044] __netlink_deliver_tap+0x3cc/0x7c0 [ 145.861486][ T7044] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.866691][ T7044] netlink_deliver_tap+0x19d/0x1b0 [ 145.871803][ T7044] netlink_unicast+0x7c4/0x990 [ 145.876566][ T7044] ? __pfx_netlink_unicast+0x10/0x10 [ 145.881852][ T7044] ? __virt_addr_valid+0x183/0x530 [ 145.886968][ T7044] ? __check_object_size+0x48e/0x900 [ 145.892258][ T7044] netlink_sendmsg+0x8e4/0xcb0 [ 145.897052][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.902346][ T7044] ? aa_sock_msg_perm+0x91/0x160 [ 145.907285][ T7044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.912567][ T7044] __sock_sendmsg+0x221/0x270 [ 145.917251][ T7044] ____sys_sendmsg+0x52a/0x7e0 [ 145.922014][ T7044] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.927304][ T7044] __sys_sendmsg+0x292/0x380 [ 145.931888][ T7044] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.937001][ T7044] ? __pfx_vfs_write+0x10/0x10 [ 145.941789][ T7044] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.948116][ T7044] ? do_syscall_64+0x100/0x230 [ 145.952879][ T7044] ? do_syscall_64+0xb6/0x230 [ 145.957553][ T7044] do_syscall_64+0xf3/0x230 [ 145.962053][ T7044] ? clear_bhb_loop+0x35/0x90 [ 145.966724][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.972619][ T7044] RIP: 0033:0x7f889697dff9 [ 145.977029][ T7044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.996635][ T7044] RSP: 002b:00007f889774d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.005050][ T7044] RAX: ffffffffffffffda RBX: 00007f8896b35f80 RCX: 00007f889697dff9 [ 146.013015][ T7044] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 146.020978][ T7044] RBP: 00007f889774d090 R08: 0000000000000000 R09: 0000000000000000 [ 146.028939][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.037008][ T7044] R13: 0000000000000000 R14: 00007f8896b35f80 R15: 00007f8896c5fa28 [ 146.045093][ T7044] [ 146.054594][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 146.134073][ T938] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 146.152279][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 146.162277][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.171131][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 146.189043][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.241868][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 146.301899][ T938] usb 2-1: device descriptor read/64, error -32 [ 146.419488][ T7062] @: renamed from ip6tnl0 (while UP) [ 146.442005][ T938] raw-gadget.1 gadget.1: failed to queue suspend event [ 146.449652][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 146.469328][ T51] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 146.478254][ T51] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 146.497348][ T51] plantronics 0003:047F:FFFF.0006: parse failed [ 146.507711][ T51] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 146.526105][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 146.551867][ T5318] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 146.574646][ T7066] IPVS: length: 207 != 8 [ 146.592957][ T938] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 146.600970][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 146.608301][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 146.621801][ T5286] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 146.634197][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 146.669130][ T51] usb 5-1: USB disconnect, device number 33 [ 146.692026][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 146.716804][ T5318] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.728264][ T5318] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.742557][ T5318] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.751617][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.781849][ T938] usb 2-1: device descriptor read/64, error -32 [ 146.791911][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 146.812557][ T5286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.857578][ T5286] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72 [ 146.877030][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.889204][ T5286] usb 4-1: Product: syz [ 146.901796][ T5286] usb 4-1: Manufacturer: syz [ 146.910017][ T5286] usb 4-1: SerialNumber: syz [ 146.915158][ T938] raw-gadget.1 gadget.1: failed to queue suspend event [ 146.928449][ T5286] usb 4-1: config 0 descriptor?? [ 146.935571][ T938] usb usb2-port1: attempt power cycle [ 146.941192][ T938] raw-gadget.1 gadget.1: failed to queue disconnect event [ 146.951945][ T5286] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 146.962834][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 146.981056][ T5318] usb 3-1: usb_control_msg returned -32 [ 146.987018][ T5286] dvb-usb: bulk message failed: -22 (3/0) [ 146.994910][ T5318] usbtmc 3-1:16.0: can't read capabilities [ 147.023937][ T5286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 147.037216][ T7081] netlink: 'syz.0.374': attribute type 3 has an invalid length. [ 147.045170][ T7081] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.054873][ T5286] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 147.070319][ T5286] usb 4-1: media controller created [ 147.076227][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 147.104290][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 147.122993][ T5286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.181007][ T5286] DVB: Unable to find symbol mt352_attach() [ 147.189531][ T5286] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 147.200275][ T5286] dvb-usb: bulk message failed: -22 (3/0) [ 147.221827][ T5286] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 147.233944][ T5286] usb 4-1: USB disconnect, device number 15 [ 147.300065][ T5286] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 147.331006][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 147.441994][ T938] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 147.464254][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 147.478447][ T938] usb 2-1: device descriptor read/8, error -32 [ 147.592203][ T938] raw-gadget.1 gadget.1: failed to queue suspend event [ 147.599263][ T938] raw-gadget.1 gadget.1: failed to queue reset event [ 147.615653][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.665183][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.673929][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 147.700556][ T938] raw-gadget.1 gadget.1: failed to queue resume event [ 147.772601][ T938] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 147.791964][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 147.801230][ T938] usb 2-1: device descriptor read/8, error -32 [ 147.911778][ T938] raw-gadget.1 gadget.1: failed to queue suspend event [ 147.949604][ T938] usb usb2-port1: unable to enumerate USB device [ 148.271833][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 148.435519][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.445904][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 148.459266][ T5233] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 148.476252][ T9] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 148.497363][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.507744][ T9] usb 1-1: config 0 descriptor?? [ 148.601822][ T5233] usb 4-1: device descriptor read/64, error -71 [ 148.784064][ T9] usb 1-1: USB disconnect, device number 15 [ 148.862813][ T5233] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 149.021947][ T5233] usb 4-1: device descriptor read/64, error -71 [ 149.033140][ T938] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 149.131973][ T5233] usb usb4-port1: attempt power cycle [ 149.206244][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.230305][ T938] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.251180][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.253459][ T5230] usb 3-1: USB disconnect, device number 29 [ 149.282416][ T938] usb 5-1: config 0 descriptor?? [ 149.321090][ T938] pwc: Askey VC010 type 2 USB webcam detected. [ 149.492343][ T5233] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.517460][ T938] pwc: send_video_command error -71 [ 149.534085][ T938] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 149.543839][ T5233] usb 4-1: device descriptor read/8, error -71 [ 149.566624][ T938] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 149.611532][ T938] usb 5-1: USB disconnect, device number 34 [ 149.847188][ T5233] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 149.883166][ T5233] usb 4-1: device descriptor read/8, error -71 [ 149.892803][ T7140] input: syz0 as /devices/virtual/input/input15 [ 150.012053][ T5233] usb usb4-port1: unable to enumerate USB device [ 150.041829][ T938] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 150.103065][ T7146] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 150.118065][ T7146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 150.204975][ T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.217409][ T938] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.229224][ T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.243608][ T938] usb 5-1: config 0 descriptor?? [ 150.260647][ T938] pwc: Askey VC010 type 2 USB webcam detected. [ 150.618587][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.628323][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.648551][ T7159] IPVS: Unknown mcast interface: prio.prioidx [ 150.672039][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.679892][ T938] pwc: recv_control_msg error -32 req 02 val 2b00 [ 150.687685][ T938] pwc: recv_control_msg error -32 req 02 val 2700 [ 150.695143][ T938] pwc: recv_control_msg error -32 req 02 val 2c00 [ 150.702894][ T938] pwc: recv_control_msg error -32 req 04 val 1000 [ 150.710009][ T938] pwc: recv_control_msg error -32 req 04 val 1300 [ 150.717103][ T938] pwc: recv_control_msg error -32 req 04 val 1400 [ 150.777940][ T938] pwc: recv_control_msg error -32 req 02 val 2000 [ 150.785365][ T938] pwc: recv_control_msg error -32 req 02 val 2100 [ 150.792944][ T938] pwc: recv_control_msg error -32 req 04 val 1500 [ 150.799922][ T938] pwc: recv_control_msg error -32 req 02 val 2500 [ 150.807171][ T938] pwc: recv_control_msg error -32 req 02 val 2400 [ 150.821993][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 150.831767][ T9] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 150.844270][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.857563][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.866691][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.876597][ T9] usb 1-1: config 0 descriptor?? [ 150.896226][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 150.902683][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 150.911078][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 151.631296][ T7170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.402'. [ 151.640688][ T51] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 151.803720][ T51] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.821215][ T51] usb 4-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 151.854681][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.905032][ T51] usb 4-1: config 0 descriptor?? [ 152.103385][ T938] pwc: recv_control_msg error -71 req 02 val 2900 [ 152.126611][ T938] pwc: recv_control_msg error -71 req 02 val 2800 [ 152.157587][ T938] pwc: recv_control_msg error -71 req 04 val 1100 [ 152.198566][ T938] pwc: recv_control_msg error -71 req 04 val 1200 [ 152.226835][ T938] pwc: Registered as video71. [ 152.258413][ T938] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 152.315913][ T938] usb 5-1: USB disconnect, device number 35 [ 152.623567][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 153.612212][ T5286] usb 1-1: USB disconnect, device number 16 [ 153.649441][ T7197] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20003 [ 153.922854][ T7203] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 154.004546][ T7203] kvm: pic: non byte write [ 154.031373][ T7203] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1936028793 (3872057586 ns) > initial count (3404258450 ns). Using initial count to start timer. [ 154.372527][ T51] usb 4-1: string descriptor 0 read error: -71 [ 154.379055][ T51] usb 4-1: ucan: probing device on interface #0 [ 154.409715][ T51] usb 4-1: ucan: invalid EP count (0) [ 154.421991][ T51] usb 4-1: ucan: probe failed; try to update the device firmware [ 154.471080][ T51] usb 4-1: USB disconnect, device number 20 [ 154.681833][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 154.744913][ T7223] netlink: 144 bytes leftover after parsing attributes in process `syz.2.413'. [ 154.781175][ T7223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.832875][ T7223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.841056][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.882561][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 154.919150][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.921969][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.941856][ T51] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 154.951470][ T9] usb 5-1: config 0 descriptor?? [ 155.012127][ T5318] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 155.113193][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 155.132357][ T51] usb 4-1: New USB device found, idVendor=2001, idProduct=b301, bcdDevice=45.a9 [ 155.150272][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.161174][ T51] usb 4-1: Product: syz [ 155.170724][ T51] usb 4-1: Manufacturer: syz [ 155.175635][ T5318] usb 3-1: Using ep0 maxpacket: 8 [ 155.187560][ T51] usb 4-1: SerialNumber: syz [ 155.195437][ T5318] usb 3-1: config 0 has an invalid interface number: 127 but max is 0 [ 155.210503][ T5318] usb 3-1: config 0 has no interface number 0 [ 155.220533][ T5318] usb 3-1: config 0 interface 127 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 155.231256][ T51] r8152-cfgselector 4-1: Unknown version 0x0000 [ 155.237931][ T51] r8152-cfgselector 4-1: config 0 descriptor?? [ 155.247392][ T51] r8152 4-1:0.0: Expected endpoints are not found [ 155.254544][ T5318] usb 3-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=cb.01 [ 155.267566][ T5318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.275847][ T5318] usb 3-1: Product: syz [ 155.280037][ T5318] usb 3-1: Manufacturer: syz [ 155.285009][ T5318] usb 3-1: SerialNumber: syz [ 155.300025][ T5318] usb 3-1: config 0 descriptor?? [ 155.309526][ T5318] option 3-1:0.127: GSM modem (1-port) converter detected [ 155.387247][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 155.516176][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.411'. [ 155.670536][ T7217] hsr_slave_1 (unregistering): left promiscuous mode [ 155.796099][ T9] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 155.882337][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 155.885173][ T7236] QAT: Invalid ioctl 21531 [ 156.007709][ T9] usb 5-1: USB disconnect, device number 36 [ 156.018602][ T7240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.056163][ T7240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.210094][ T7243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.250217][ T7243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.899768][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 157.391766][ T5230] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 157.517483][ T9] r8152-cfgselector 4-1: USB disconnect, device number 21 [ 157.596241][ T5230] usb 5-1: Using ep0 maxpacket: 16 [ 157.605274][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.625722][ T5230] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.640194][ T5230] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.669906][ T5230] usb 5-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 157.680058][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.697797][ T5230] usb 5-1: config 0 descriptor?? [ 157.754726][ T51] usb 3-1: USB disconnect, device number 30 [ 157.777025][ T51] option 3-1:0.127: device disconnected [ 157.784867][ T7282] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 157.803797][ T7283] xt_NFQUEUE: number of total queues is 0 [ 157.994280][ T7292] ptm ptm21: ldisc open failed (-12), clearing slot 21 [ 158.002276][ T5233] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 158.139223][ T7298] ======================================================= [ 158.139223][ T7298] WARNING: The mand mount option has been deprecated and [ 158.139223][ T7298] and is ignored by this kernel. Remove the mand [ 158.139223][ T7298] option from the mount to silence this warning. [ 158.139223][ T7298] ======================================================= [ 158.174138][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.180788][ T7298] tmpfs: Unknown parameter './file0' [ 158.199275][ T5230] sony 0003:1430:474C.0007: unknown main item tag 0xe [ 158.204372][ T7298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 158.219057][ T5233] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 158.233063][ T5230] sony 0003:1430:474C.0007: hidraw0: USB HID v0.00 Device [HID 1430:474c] on usb-dummy_hcd.4-1/input0 [ 158.259405][ T5233] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 158.269621][ T5230] sony 0003:1430:474C.0007: failed to claim input [ 158.280327][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.282071][ T5233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.313169][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.323245][ T5233] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.344087][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.346089][ T7298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.357841][ T5233] usb 4-1: Product: ᩤ蛲䏹驡飽祴〙ڮ꺧⇂᰽ﭼ閺ࣉ棡ࡓ蔻ⷺ뗑ž柙ꇇ胸㧸㍌쓍ᕲ篕╸썗ᑜ濲ю찘錒蟝퍜擟˜흗ꠅ㒓辁乯衺䅘揌⇋⣀㍖ꋘ롿ᴖངⅬ▹꓃辎晉랰⧡褰韋椐ⵘ烝멖u涽괽㔽禐糤긹蝣㍞仡ᒤ讥屰豜鹙ꗢ⋟錏檺Ꜻ찇᫷햙衰䵽枏衭硬킄칆䛝绖 [ 158.395777][ T7298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.401027][ T5233] usb 4-1: Manufacturer: 㳮害딪∯뇲᧲챛젚霗涏йꃱꅵ궪瑮ꡙ添ำυ咊ⱐ͒噢ノ뇓渱ཞஉ՜쒯Ḋ했䠩馵웯Õ酘⇵긴創훬賠쀬飪╚ﭠ㮪䘰糵毑䠝恱缾裴䲘睒䕑紾홉赅讀Ⲛყ堽豒茆✙᷋ﰢ녦왧䗢嫕釅醓휫垷覍م嬢쨤싧竌伏檳厵⟠酛 [ 158.446695][ T5233] usb 4-1: SerialNumber: 绬Ꞑ彴돉玱⹪ᜪꬬ㰍멋⹛깑煞ꗸ༖ퟯ沚箈迎䛺 [ 159.131919][ T51] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 159.245369][ T6784] raw-gadget.1 gadget.1: failed to queue disconnect event [ 159.286075][ T51] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.292349][ T5233] usb 4-1: 0:2 : does not exist [ 159.306836][ T51] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.347873][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 159.347891][ T29] audit: type=1326 audit(1727525318.200:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7314 comm="syz.3.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2be157dff9 code=0x0 [ 159.377321][ T51] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.393857][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.406719][ T5233] usb 4-1: USB disconnect, device number 22 [ 159.480926][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.514552][ T5226] udevd[5226]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.627843][ T51] usb 3-1: usb_control_msg returned -32 [ 159.635319][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.646255][ T51] usbtmc 3-1:16.0: can't read capabilities [ 159.764519][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.830580][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.845166][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.853936][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.865224][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.881947][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 159.897687][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.900535][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.184950][ T938] usb 5-1: USB disconnect, device number 37 [ 160.275101][ T12] bridge_slave_1: left allmulticast mode [ 160.280841][ T12] bridge_slave_1: left promiscuous mode [ 160.332023][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.382856][ T12] bridge_slave_0: left allmulticast mode [ 160.421815][ T12] bridge_slave_0: left promiscuous mode [ 160.427520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.731931][ T938] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 160.871850][ T938] usb 4-1: device descriptor read/64, error -71 [ 161.059493][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.071050][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.083556][ T12] bond0 (unregistering): Released all slaves [ 161.098945][ T7321] chnl_net:caif_netlink_parms(): no params data found [ 161.116250][ T938] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 161.271924][ T938] usb 4-1: device descriptor read/64, error -71 [ 161.376355][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.404657][ T938] usb usb4-port1: attempt power cycle [ 161.422032][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.452376][ T7321] bridge_slave_0: entered allmulticast mode [ 161.470320][ T7321] bridge_slave_0: entered promiscuous mode [ 161.498016][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.507373][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.517957][ T7321] bridge_slave_1: entered allmulticast mode [ 161.525365][ T7321] bridge_slave_1: entered promiscuous mode [ 161.691404][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.719663][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.791805][ T938] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 161.824033][ T938] usb 4-1: device descriptor read/8, error -71 [ 161.910889][ T12] hsr_slave_0: left promiscuous mode [ 161.927104][ T12] hsr_slave_1: left promiscuous mode [ 161.935495][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.939301][ T5286] usb 3-1: USB disconnect, device number 31 [ 161.957041][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.972020][ T54] Bluetooth: hci4: command tx timeout [ 162.012759][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.020397][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.045315][ T12] veth1_macvtap: left promiscuous mode [ 162.051127][ T12] veth0_macvtap: left promiscuous mode [ 162.063613][ T12] veth1_vlan: left promiscuous mode [ 162.069021][ T12] veth0_vlan: left promiscuous mode [ 162.101171][ T938] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 162.152878][ T938] usb 4-1: device descriptor read/8, error -71 [ 162.269693][ T938] usb usb4-port1: unable to enumerate USB device [ 162.431907][ T5286] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 162.583444][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.598441][ T5286] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.607586][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.646007][ T5286] usb 3-1: config 0 descriptor?? [ 162.655168][ T5286] pwc: Askey VC010 type 2 USB webcam detected. [ 162.697029][ T12] team0 (unregistering): Port device team_slave_1 removed [ 162.804959][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.861517][ T5286] pwc: send_video_command error -71 [ 162.884873][ T5286] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 162.898712][ T5286] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 162.910094][ T5286] usb 3-1: USB disconnect, device number 32 [ 163.285564][ T7321] team0: Port device team_slave_0 added [ 163.294871][ T7321] team0: Port device team_slave_1 added [ 163.312651][ T7382] bond0: (slave team_slave_0): Error: Device is in use and cannot be enslaved [ 163.382227][ T5286] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 163.403833][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.410857][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.437907][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.445216][ T7393] FAULT_INJECTION: forcing a failure. [ 163.445216][ T7393] name failslab, interval 1, probability 0, space 0, times 0 [ 163.455817][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.489435][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.4.459 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 163.491469][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.499694][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.499710][ T7393] Call Trace: [ 163.499717][ T7393] [ 163.499726][ T7393] dump_stack_lvl+0x241/0x360 [ 163.499758][ T7393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.526445][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.535640][ T7393] ? __pfx__printk+0x10/0x10 [ 163.535677][ T7393] ? ref_tracker_alloc+0x332/0x490 [ 163.571954][ T7393] should_fail_ex+0x3b0/0x4e0 [ 163.576665][ T7393] ? skb_clone+0x20c/0x390 [ 163.581126][ T7393] should_failslab+0xac/0x100 [ 163.585832][ T7393] ? skb_clone+0x20c/0x390 [ 163.590272][ T7393] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 163.595671][ T7393] skb_clone+0x20c/0x390 [ 163.599940][ T7393] __netlink_deliver_tap+0x3cc/0x7c0 [ 163.605265][ T7393] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.610496][ T7393] netlink_deliver_tap+0x19d/0x1b0 [ 163.615638][ T7393] netlink_unicast+0x7c4/0x990 [ 163.620443][ T7393] ? __pfx_netlink_unicast+0x10/0x10 [ 163.625754][ T7393] ? __virt_addr_valid+0x183/0x530 [ 163.630891][ T7393] ? __check_object_size+0x48e/0x900 [ 163.636205][ T7393] netlink_sendmsg+0x8e4/0xcb0 [ 163.641015][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.646348][ T7393] ? __pfx_aa_file_perm+0x10/0x10 [ 163.651406][ T7393] ? aa_sock_msg_perm+0x91/0x160 [ 163.656373][ T7393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.661683][ T7393] __sock_sendmsg+0x221/0x270 [ 163.666386][ T7393] sock_write_iter+0x2d7/0x3f0 [ 163.671182][ T7393] ? __pfx_sock_write_iter+0x10/0x10 [ 163.676502][ T7393] ? bpf_lsm_file_permission+0x9/0x10 [ 163.681898][ T7393] ? security_file_permission+0x74/0x280 [ 163.687568][ T7393] vfs_write+0xa6d/0xc90 [ 163.691846][ T7393] ? __pfx_sock_write_iter+0x10/0x10 [ 163.697156][ T7393] ? __pfx_vfs_write+0x10/0x10 [ 163.701963][ T7393] ? fdget_pos+0x19a/0x320 [ 163.706410][ T7393] ksys_write+0x183/0x2b0 [ 163.710767][ T7393] ? __pfx_ksys_write+0x10/0x10 [ 163.715642][ T7393] ? do_syscall_64+0x100/0x230 [ 163.720435][ T7393] ? do_syscall_64+0xb6/0x230 [ 163.725142][ T7393] do_syscall_64+0xf3/0x230 [ 163.729673][ T7393] ? clear_bhb_loop+0x35/0x90 [ 163.734374][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.740300][ T7393] RIP: 0033:0x7f6672b7dff9 [ 163.744733][ T7393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.764453][ T7393] RSP: 002b:00007f6673a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.772903][ T7393] RAX: ffffffffffffffda RBX: 00007f6672d35f80 RCX: 00007f6672b7dff9 [ 163.780902][ T7393] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 163.788899][ T7393] RBP: 00007f6673a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 163.796900][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.805070][ T7393] R13: 0000000000000000 R14: 00007f6672d35f80 R15: 00007f6672e5fa28 [ 163.813080][ T7393] [ 163.863352][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.893531][ T5286] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 163.903564][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.942618][ T5286] usb 3-1: config 0 descriptor?? [ 163.963822][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 163.978139][ T5286] pwc: Askey VC010 type 2 USB webcam detected. [ 164.060310][ T54] Bluetooth: hci4: command tx timeout [ 164.179231][ T7321] hsr_slave_0: entered promiscuous mode [ 164.208984][ T7321] hsr_slave_1: entered promiscuous mode [ 164.227313][ T7321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.236118][ T7321] Cannot create hsr debugfs directory [ 164.252062][ T5233] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 164.295245][ T5247] bridge0: port 3(syz_tun) entered disabled state [ 164.322780][ T5247] syz_tun (unregistering): left allmulticast mode [ 164.329248][ T5247] syz_tun (unregistering): left promiscuous mode [ 164.338127][ T5247] bridge0: port 3(syz_tun) entered disabled state [ 164.362052][ T5286] pwc: recv_control_msg error -32 req 02 val 2b00 [ 164.369337][ T5286] pwc: recv_control_msg error -32 req 02 val 2700 [ 164.377813][ T5286] pwc: recv_control_msg error -32 req 02 val 2c00 [ 164.386576][ T5286] pwc: recv_control_msg error -32 req 04 val 1000 [ 164.398731][ T5286] pwc: recv_control_msg error -32 req 04 val 1300 [ 164.401845][ T5285] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 164.415504][ T5233] usb 1-1: device descriptor read/64, error -71 [ 164.416225][ T5286] pwc: recv_control_msg error -32 req 04 val 1400 [ 164.429232][ T5286] pwc: recv_control_msg error -32 req 02 val 2000 [ 164.442172][ T5286] pwc: recv_control_msg error -32 req 02 val 2100 [ 164.451099][ T5286] pwc: recv_control_msg error -32 req 04 val 1500 [ 164.462416][ T5286] pwc: recv_control_msg error -32 req 02 val 2500 [ 164.477950][ T5286] pwc: recv_control_msg error -32 req 02 val 2400 [ 164.572880][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 164.603635][ T5285] usb 4-1: unable to get BOS descriptor or descriptor too short [ 164.647460][ T5285] usb 4-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice=be.0d [ 164.667512][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.681749][ T5233] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 164.692956][ T5286] pwc: recv_control_msg error -71 req 02 val 2900 [ 164.709568][ T5285] usb 4-1: Product: syz [ 164.714346][ T5286] pwc: recv_control_msg error -71 req 02 val 2800 [ 164.716096][ T5285] usb 4-1: Manufacturer: syz [ 164.732297][ T5286] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.737950][ T5285] usb 4-1: SerialNumber: syz [ 164.758751][ T5286] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.762547][ T5285] usb 4-1: config 0 descriptor?? [ 164.779634][ T5286] pwc: Registered as video71. [ 164.793326][ T5285] usb 4-1: active config #0 != 1 ?? [ 164.848752][ T5286] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 164.862368][ T5233] usb 1-1: device descriptor read/64, error -71 [ 164.929993][ T5286] usb 3-1: USB disconnect, device number 33 [ 165.013513][ T5233] usb usb1-port1: attempt power cycle [ 165.246726][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.265219][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.282304][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.300552][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.308939][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.318913][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.392308][ T5233] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.452348][ T5233] usb 1-1: device descriptor read/8, error -71 [ 165.493774][ T7321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.506718][ T7321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.544786][ T7321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.560055][ T9] usb 4-1: USB disconnect, device number 27 [ 165.583781][ T7321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.664221][ T5285] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 165.701826][ T5233] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.723372][ T5233] usb 1-1: device descriptor read/8, error -71 [ 165.821319][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 165.847063][ T5233] usb usb1-port1: unable to enumerate USB device [ 165.859898][ T5285] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.892202][ T5285] usb 3-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 165.903071][ T5285] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.928874][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.936855][ T5285] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 165.967862][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.987750][ T5285] usb 3-1: Product: syz [ 166.010685][ T5285] usb 3-1: Manufacturer: syz [ 166.028194][ T5285] usb 3-1: SerialNumber: syz [ 166.039647][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.047438][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.069919][ T7440] bridge_slave_0: entered allmulticast mode [ 166.081500][ T7440] bridge_slave_0: entered promiscuous mode [ 166.096371][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.117222][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.129242][ T7440] bridge_slave_1: entered allmulticast mode [ 166.141947][ T54] Bluetooth: hci4: command tx timeout [ 166.163256][ T7440] bridge_slave_1: entered promiscuous mode [ 166.186655][ T7321] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.270628][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.282553][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.296189][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.308395][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.312564][ T7439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.315584][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.344305][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.354311][ T7439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.366487][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.373652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.401228][ T5285] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 166.438488][ T5285] usb 3-1: USB disconnect, device number 34 [ 166.499815][ T7440] team0: Port device team_slave_0 added [ 166.519451][ T7440] team0: Port device team_slave_1 added [ 166.560658][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.572259][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.603137][ T7440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.616377][ T7440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.623846][ T7440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.650375][ T7440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.703637][ T7321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.740634][ T7440] hsr_slave_0: entered promiscuous mode [ 166.756914][ T7440] hsr_slave_1: entered promiscuous mode [ 166.767830][ T7440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.781403][ T7440] Cannot create hsr debugfs directory [ 166.811773][ T5285] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 166.870767][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.971871][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 166.978770][ T5285] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 167.003410][ T7321] veth0_vlan: entered promiscuous mode [ 167.016117][ T5285] usb 3-1: config 0 has no interface number 0 [ 167.030188][ T5285] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 167.053410][ T5285] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.083256][ T5285] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 167.099557][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.116123][ T7440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.129663][ T5285] usb 3-1: Product: syz [ 167.147151][ T5285] usb 3-1: Manufacturer: syz [ 167.163760][ T5285] usb 3-1: SerialNumber: syz [ 167.190280][ T5285] usb 3-1: config 0 descriptor?? [ 167.194271][ T7321] veth1_vlan: entered promiscuous mode [ 167.204236][ T5285] appletouch 3-1:0.154: Could not find int-in endpoint [ 167.211131][ T5285] appletouch 3-1:0.154: probe with driver appletouch failed with error -5 [ 167.251484][ T5285] usbhid 3-1:0.154: couldn't find an input interrupt endpoint [ 167.313494][ T7440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.367774][ T7321] veth0_macvtap: entered promiscuous mode [ 167.380928][ T7321] veth1_macvtap: entered promiscuous mode [ 167.412010][ T54] Bluetooth: hci3: command tx timeout [ 167.449542][ T7440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.470025][ T7482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.494039][ T51] usb 3-1: USB disconnect, device number 35 [ 167.538716][ T7440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.549374][ T5286] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 167.567326][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.581874][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.592796][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.603273][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.613223][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.624344][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.634527][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.645014][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.654974][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.665473][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.675659][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.691680][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.702241][ T5286] usb 1-1: Invalid ep0 maxpacket: 64 [ 167.703930][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.723580][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.738588][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.750243][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.764762][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.775122][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.785960][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.796977][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.807444][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.818037][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.828497][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.838465][ T7321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.841931][ T5286] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 167.849624][ T7321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.867676][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.887046][ T7321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.896494][ T7321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.908287][ T7321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.917275][ T7321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.012078][ T5286] usb 1-1: Invalid ep0 maxpacket: 64 [ 168.028980][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.038509][ T5286] usb usb1-port1: attempt power cycle [ 168.046265][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.100220][ T7440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.108954][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.119960][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.131421][ T7440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.145481][ T7440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.170863][ T7440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.213005][ T54] Bluetooth: hci4: command tx timeout [ 168.320802][ T7440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.354481][ T7440] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.367535][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.374754][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.392803][ T5286] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 168.413429][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.420551][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.429707][ T5286] usb 1-1: Invalid ep0 maxpacket: 64 [ 168.553362][ T7440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.562339][ T5286] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 168.579703][ T7523] netlink: 'syz.2.473': attribute type 4 has an invalid length. [ 168.588315][ T5286] usb 1-1: Invalid ep0 maxpacket: 64 [ 168.603880][ T5286] usb usb1-port1: unable to enumerate USB device [ 168.651278][ T7440] veth0_vlan: entered promiscuous mode [ 168.681577][ T7440] veth1_vlan: entered promiscuous mode [ 168.717909][ T7440] veth0_macvtap: entered promiscuous mode [ 168.728225][ T7440] veth1_macvtap: entered promiscuous mode [ 168.749004][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.762332][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.775012][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.785699][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.795677][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.808056][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.818086][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.829598][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.839588][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.851255][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.863475][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.874945][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.885207][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.896012][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.907655][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.965848][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.980799][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.991155][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.006989][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.017682][ T5233] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 169.021871][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.041139][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.051322][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.067479][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.077619][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.092968][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.103503][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.114895][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.126982][ T7440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.137918][ T7440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.149733][ T7440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.169894][ T7440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.181175][ T7440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.191191][ T7440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.201504][ T5233] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.211775][ T7440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.220950][ T5233] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.237795][ T5233] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.248975][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.386608][ T2986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.448310][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.471860][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.492669][ T54] Bluetooth: hci3: command tx timeout [ 169.499264][ T5233] usb 3-1: usb_control_msg returned -32 [ 169.508511][ T5233] usbtmc 3-1:16.0: can't read capabilities [ 169.584301][ T2986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.632528][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.640385][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.711561][ T2986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.796488][ T2986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.856838][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.866858][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.880277][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.900780][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.908954][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.917839][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.933773][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.043876][ T2986] bridge_slave_1: left allmulticast mode [ 170.049577][ T2986] bridge_slave_1: left promiscuous mode [ 170.092192][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.138289][ T2986] bridge_slave_0: left allmulticast mode [ 170.162282][ T2986] bridge_slave_0: left promiscuous mode [ 170.168049][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.364687][ T7540] FAULT_INJECTION: forcing a failure. [ 170.364687][ T7540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.437097][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.4.478 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 170.447395][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.457477][ T7540] Call Trace: [ 170.460779][ T7540] [ 170.463729][ T7540] dump_stack_lvl+0x241/0x360 [ 170.468435][ T7540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.473663][ T7540] ? __pfx__printk+0x10/0x10 [ 170.478366][ T7540] ? __pfx_lock_release+0x10/0x10 [ 170.483413][ T7540] ? __local_bh_enable_ip+0x168/0x200 [ 170.488807][ T7540] ? copy_fpstate_to_sigframe+0x179/0xdc0 [ 170.494559][ T7540] should_fail_ex+0x3b0/0x4e0 [ 170.499268][ T7540] copy_fpstate_to_sigframe+0xacc/0xdc0 [ 170.504859][ T7540] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 170.510975][ T7540] ? fpu__alloc_mathframe+0xab/0x130 [ 170.516292][ T7540] get_sigframe+0x5d9/0x800 [ 170.520828][ T7540] ? __pfx_get_sigframe+0x10/0x10 [ 170.525879][ T7540] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.531885][ T7540] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.538242][ T7540] x64_setup_rt_frame+0x180/0xcc0 [ 170.543268][ T7540] ? lockdep_hardirqs_on+0x99/0x150 [ 170.548465][ T7540] ? _raw_spin_unlock_irq+0x2e/0x50 [ 170.553672][ T7540] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 170.559221][ T7540] ? __pfx_child_wait_callback+0x10/0x10 [ 170.564937][ T7540] arch_do_signal_or_restart+0x458/0x860 [ 170.570568][ T7540] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.576715][ T7540] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.582702][ T7540] ? syscall_exit_to_user_mode+0xa3/0x370 [ 170.588421][ T7540] syscall_exit_to_user_mode+0xc9/0x370 [ 170.593971][ T7540] do_syscall_64+0x100/0x230 [ 170.598575][ T7540] ? clear_bhb_loop+0x35/0x90 [ 170.603245][ T7540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.609134][ T7540] RIP: 0033:0x7f764eb7dff9 [ 170.613541][ T7540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.633140][ T7540] RSP: 002b:00007f764fa10038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 170.641550][ T7540] RAX: 0000000000000000 RBX: 00007f764ed35f80 RCX: 00007f764eb7dff9 [ 170.649513][ T7540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.657481][ T7540] RBP: 00007f764fa10090 R08: 0000000000000000 R09: 0000000000000000 [ 170.665444][ T7540] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 170.673405][ T7540] R13: 0000000000000000 R14: 00007f764ed35f80 R15: 00007f764ee5fa28 [ 170.681378][ T7540] [ 170.963296][ T5284] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 171.071823][ T5286] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 171.122651][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 171.132610][ T5284] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 16 [ 171.146472][ T5284] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 171.160620][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 171.177655][ T5284] usb 1-1: Product: syz [ 171.186667][ T5284] usb 1-1: Manufacturer: syz [ 171.199233][ T5284] usb 1-1: SerialNumber: syz [ 171.210779][ T5284] usb 1-1: config 0 descriptor?? [ 171.222258][ T7552] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.238728][ T5286] usb 5-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 171.270113][ T5286] usb 5-1: config 0 interface 0 has no altsetting 0 [ 171.283610][ T5286] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 171.301032][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.320222][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.320908][ T5286] usb 5-1: config 0 descriptor?? [ 171.339948][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.353344][ T2986] bond0 (unregistering): Released all slaves [ 171.447084][ T5233] usb 1-1: USB disconnect, device number 25 [ 171.552407][ T5286] usb 5-1: string descriptor 0 read error: -71 [ 171.559272][ T5286] usb 5-1: ucan: probing device on interface #0 [ 171.572423][ T5286] usb 5-1: ucan: invalid endpoint configuration [ 171.574121][ T54] Bluetooth: hci3: command tx timeout [ 171.579010][ T5286] usb 5-1: ucan: probe failed; try to update the device firmware [ 171.601462][ T5286] usb 5-1: USB disconnect, device number 38 [ 171.765031][ T7575] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.807904][ T29] audit: type=1326 audit(1727525330.660:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 171.880412][ T29] audit: type=1326 audit(1727525330.660:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 171.914903][ T29] audit: type=1326 audit(1727525330.660:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 171.937050][ T7534] chnl_net:caif_netlink_parms(): no params data found [ 171.976283][ T54] Bluetooth: hci0: command tx timeout [ 172.011898][ T29] audit: type=1326 audit(1727525330.660:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.034858][ T29] audit: type=1326 audit(1727525330.660:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.059447][ T29] audit: type=1326 audit(1727525330.690:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.118965][ T2986] hsr_slave_0: left promiscuous mode [ 172.129757][ T29] audit: type=1326 audit(1727525330.690:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.186315][ T5286] usb 3-1: USB disconnect, device number 36 [ 172.193436][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.201510][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.223068][ T29] audit: type=1326 audit(1727525330.690:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.279803][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.283848][ T7592] FAULT_INJECTION: forcing a failure. [ 172.283848][ T7592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.309619][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.343862][ T29] audit: type=1326 audit(1727525330.690:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.366543][ T7592] CPU: 0 UID: 0 PID: 7592 Comm: syz.4.486 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 172.369700][ T2986] batadv0: left promiscuous mode [ 172.376791][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.376805][ T7592] Call Trace: [ 172.376812][ T7592] [ 172.376820][ T7592] dump_stack_lvl+0x241/0x360 [ 172.376854][ T7592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.376877][ T7592] ? __pfx__printk+0x10/0x10 [ 172.376902][ T7592] ? __pfx_lock_release+0x10/0x10 [ 172.376932][ T7592] should_fail_ex+0x3b0/0x4e0 [ 172.376959][ T7592] _copy_from_user+0x2f/0xe0 [ 172.376981][ T7592] copy_msghdr_from_user+0xae/0x680 [ 172.377009][ T7592] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 172.377046][ T7592] __sys_sendmsg+0x22d/0x380 [ 172.377069][ T7592] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.377099][ T7592] ? __pfx_vfs_write+0x10/0x10 [ 172.377147][ T7592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.377171][ T7592] ? do_syscall_64+0x100/0x230 [ 172.394280][ T2986] veth1_macvtap: left promiscuous mode [ 172.395411][ T7592] ? do_syscall_64+0xb6/0x230 [ 172.395448][ T7592] do_syscall_64+0xf3/0x230 [ 172.395472][ T7592] ? clear_bhb_loop+0x35/0x90 [ 172.399638][ T2986] veth0_macvtap: left promiscuous mode [ 172.403038][ T7592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.403070][ T7592] RIP: 0033:0x7f764eb7dff9 [ 172.403086][ T7592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.403102][ T7592] RSP: 002b:00007f764fa10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.403123][ T7592] RAX: ffffffffffffffda RBX: 00007f764ed35f80 RCX: 00007f764eb7dff9 [ 172.403138][ T7592] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 172.421520][ T2986] veth0_vlan: left promiscuous mode [ 172.422582][ T7592] RBP: 00007f764fa10090 R08: 0000000000000000 R09: 0000000000000000 [ 172.422600][ T7592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.422611][ T7592] R13: 0000000000000000 R14: 00007f764ed35f80 R15: 00007f764ee5fa28 [ 172.422638][ T7592] [ 172.471065][ T29] audit: type=1326 audit(1727525330.700:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7573 comm="syz.1.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa11037dff9 code=0x7ffc0000 [ 172.860705][ T2986] team0 (unregistering): Port device vlan2 removed [ 173.303859][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 173.351422][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 173.662279][ T54] Bluetooth: hci3: command tx timeout [ 173.815428][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 173.853281][ T7611] tipc: Started in network mode [ 173.858195][ T7611] tipc: Node identity 322d36542be5, cluster identity 4711 [ 173.878062][ T7611] tipc: Enabled bearer , priority 10 [ 174.074094][ T54] Bluetooth: hci0: command tx timeout [ 174.365018][ T7534] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.415173][ T7534] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.452930][ T7534] bridge_slave_0: entered allmulticast mode [ 174.460076][ T7534] bridge_slave_0: entered promiscuous mode [ 174.490913][ T7534] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.531560][ T7534] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.562075][ T7534] bridge_slave_1: entered allmulticast mode [ 174.573023][ T5286] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 174.591841][ T7534] bridge_slave_1: entered promiscuous mode [ 174.740966][ T5284] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 174.791885][ T5286] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.795568][ T7534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.809695][ T5286] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 174.809724][ T5286] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.823882][ T5286] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.867525][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.879147][ T5286] usb 5-1: Product: ᩤ蛲䏹驡飽祴〙ڮ꺧⇂᰽ﭼ閺ࣉ棡ࡓ蔻ⷺ뗑ž柙ꇇ胸㧸㍌쓍ᕲ篕╸썗ᑜ濲ю찘錒蟝퍜擟˜흗ꠅ㒓辁乯衺䅘揌⇋⣀㍖ꋘ롿ᴖངⅬ▹꓃辎晉랰⧡褰韋椐ⵘ烝멖u涽괽㔽禐糤긹蝣㍞仡ᒤ讥屰豜鹙ꗢ⋟錏檺Ꜻ찇᫷햙衰䵽枏衭硬킄칆䛝绖 [ 174.880647][ T7534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.935739][ T5286] usb 5-1: Manufacturer: 㳮害딪∯뇲᧲챛젚霗涏йꃱꅵ궪瑮ꡙ添ำυ咊ⱐ͒噢ノ뇓渱ཞஉ՜쒯Ḋ했䠩馵웯Õ酘⇵긴創훬賠쀬飪╚ﭠ㮪䘰糵毑䠝恱缾裴䲘睒䕑紾홉赅讀Ⲛყ堽豒茆✙᷋ﰢ녦왧䗢嫕釅醓휫垷覍م嬢쨤싧竌伏檳厵⟠酛 [ 174.979391][ T5284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.991548][ T5284] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.006198][ T51] tipc: Node number set to 432551508 [ 175.016331][ T5286] usb 5-1: SerialNumber: 绬Ꞑ彴돉玱⹪ᜪꬬ㰍멋⹛깑煞ꗸ༖ퟯ沚箈迎䛺 [ 175.035892][ T7663] FAULT_INJECTION: forcing a failure. [ 175.035892][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 175.043091][ T5284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 175.074364][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.076583][ T7663] CPU: 0 UID: 0 PID: 7663 Comm: syz.1.503 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 175.092739][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.102833][ T7663] Call Trace: [ 175.106126][ T7663] [ 175.109071][ T7663] dump_stack_lvl+0x241/0x360 [ 175.113786][ T7663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.119017][ T7663] ? __pfx__printk+0x10/0x10 [ 175.123638][ T7663] ? __kmalloc_noprof+0xb0/0x400 [ 175.128607][ T7663] ? __pfx___might_resched+0x10/0x10 [ 175.133918][ T7663] ? __local_bh_enable_ip+0x168/0x200 [ 175.139312][ T7663] should_fail_ex+0x3b0/0x4e0 [ 175.143997][ T7663] ? iovec_from_user+0x87/0x240 [ 175.148863][ T7663] should_failslab+0xac/0x100 [ 175.153554][ T7663] ? iovec_from_user+0x87/0x240 [ 175.158417][ T7663] __kmalloc_noprof+0xd8/0x400 [ 175.163209][ T7663] iovec_from_user+0x87/0x240 [ 175.167907][ T7663] __import_iovec+0x132/0x820 [ 175.172610][ T7663] import_iovec+0xeb/0x120 [ 175.177033][ T7663] vfs_readv+0x1ad/0xa80 [ 175.181290][ T7663] ? __pfx_vfs_readv+0x10/0x10 [ 175.186064][ T7663] ? fdget_pos+0x19a/0x320 [ 175.190480][ T7663] do_readv+0x1b1/0x350 [ 175.194630][ T7663] ? __pfx_do_readv+0x10/0x10 [ 175.199313][ T7663] ? do_syscall_64+0x100/0x230 [ 175.204084][ T7663] ? do_syscall_64+0xb6/0x230 [ 175.208768][ T7663] do_syscall_64+0xf3/0x230 [ 175.213294][ T7663] ? clear_bhb_loop+0x35/0x90 [ 175.217976][ T7663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.223874][ T7663] RIP: 0033:0x7fa11037dff9 [ 175.228302][ T7663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.247924][ T7663] RSP: 002b:00007fa10fdff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 175.256357][ T7663] RAX: ffffffffffffffda RBX: 00007fa110535f80 RCX: 00007fa11037dff9 [ 175.264350][ T7663] RDX: 000000000000000e RSI: 0000000020000200 RDI: 0000000000000003 [ 175.272342][ T7663] RBP: 00007fa10fdff090 R08: 0000000000000000 R09: 0000000000000000 [ 175.280330][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.280879][ T5286] usb 5-1: 0:2 : does not exist [ 175.288298][ T7663] R13: 0000000000000000 R14: 00007fa110535f80 R15: 00007fa11065fa28 [ 175.288331][ T7663] [ 175.321987][ T5284] usb 3-1: usb_control_msg returned -32 [ 175.322935][ T7534] team0: Port device team_slave_0 added [ 175.331870][ T5284] usbtmc 3-1:16.0: can't read capabilities [ 175.361295][ T7534] team0: Port device team_slave_1 added [ 175.394381][ T5286] usb 5-1: USB disconnect, device number 39 [ 175.428685][ T7665] binfmt_misc: register: failed to install interpreter file ./file0 [ 175.473037][ T2986] IPVS: stop unused estimator thread 0... [ 175.582189][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.599485][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.651150][ T7534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.678764][ T7534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.685968][ T7534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.712604][ T7534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.831604][ T7534] hsr_slave_0: entered promiscuous mode [ 175.842705][ T7534] hsr_slave_1: entered promiscuous mode [ 175.863881][ T7534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.883212][ T7534] Cannot create hsr debugfs directory [ 176.132376][ T54] Bluetooth: hci0: command tx timeout [ 176.393150][ T5285] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 176.578345][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.621721][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.649278][ T5285] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 176.685860][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.714264][ T5285] usb 1-1: config 0 descriptor?? [ 177.181598][ T7534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.195948][ T7534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.219102][ T7534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.246699][ T7534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.377012][ T7534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.392900][ T5285] usbhid 1-1:0.0: can't add hid device: -32 [ 177.406208][ T5285] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 177.415675][ T7534] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.438037][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.445231][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.479402][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.486606][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.605370][ T7690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.633527][ T5285] usb 3-1: USB disconnect, device number 37 [ 177.639212][ T7534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.687499][ T7534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.810505][ T7534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.898991][ T5285] usb 1-1: USB disconnect, device number 26 [ 177.946204][ T7534] veth0_vlan: entered promiscuous mode [ 177.978395][ T7534] veth1_vlan: entered promiscuous mode [ 178.081475][ T7534] veth0_macvtap: entered promiscuous mode [ 178.097170][ T7534] veth1_macvtap: entered promiscuous mode [ 178.140101][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.178473][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.189332][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.209163][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.219317][ T54] Bluetooth: hci0: command tx timeout [ 178.235899][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.250606][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.271795][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.300573][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.330399][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.351273][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.369818][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.383706][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.418806][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.469541][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.510716][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.579202][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.598075][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.650522][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.672872][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.730252][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.762074][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.801697][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.841934][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.864562][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.896003][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.916145][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.941862][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.971326][ T7534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.999241][ T7534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.036089][ T7534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.194174][ T7534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.218547][ T7534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.249636][ T7534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.280624][ T7534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.554673][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.574853][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.689568][ T2986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.705049][ T2986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.011770][ T5286] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 180.147145][ T5286] usb 1-1: device descriptor read/64, error -71 [ 180.233127][ T5284] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 180.258979][ T7812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.524'. [ 180.352596][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.401983][ T5286] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 180.433880][ T5284] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.447010][ T5284] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.470677][ T5284] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.496780][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.558634][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.579677][ T5286] usb 1-1: device descriptor read/64, error -71 [ 180.702018][ T5286] usb usb1-port1: attempt power cycle [ 180.714178][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.737508][ T5284] usb 2-1: usb_control_msg returned -32 [ 180.749970][ T5284] usbtmc 2-1:16.0: can't read capabilities [ 180.852389][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.008187][ T5285] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 181.072341][ T5286] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 181.082052][ T1103] bridge_slave_1: left allmulticast mode [ 181.118748][ T1103] bridge_slave_1: left promiscuous mode [ 181.135840][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.143291][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.150789][ T5286] usb 1-1: device descriptor read/8, error -71 [ 181.161212][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.172322][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.179549][ T5285] usb 4-1: device descriptor read/64, error -71 [ 181.200019][ T1103] bridge_slave_0: left allmulticast mode [ 181.206361][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.212041][ T1103] bridge_slave_0: left promiscuous mode [ 181.220193][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.220416][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.236436][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 181.391740][ T5286] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 181.413801][ T5286] usb 1-1: device descriptor read/8, error -71 [ 181.443510][ T5285] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 181.532501][ T5286] usb usb1-port1: unable to enumerate USB device [ 181.621858][ T5285] usb 4-1: device descriptor read/64, error -71 [ 181.774865][ T5285] usb usb4-port1: attempt power cycle [ 182.097832][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.110677][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.121972][ T5285] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 182.131315][ T1103] bond0 (unregistering): Released all slaves [ 182.152372][ T5285] usb 4-1: device descriptor read/8, error -71 [ 182.238195][ T1103] tipc: Disabling bearer [ 182.257264][ T1103] tipc: Left network mode [ 182.360178][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 182.360196][ T29] audit: type=1326 audit(1727525341.210:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.396870][ T29] audit: type=1326 audit(1727525341.210:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.421727][ T5285] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 182.448205][ T29] audit: type=1326 audit(1727525341.240:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.471154][ T29] audit: type=1326 audit(1727525341.240:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.474279][ T5285] usb 4-1: device descriptor read/8, error -71 [ 182.536403][ T29] audit: type=1326 audit(1727525341.240:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.582342][ T29] audit: type=1326 audit(1727525341.240:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.624381][ T5285] usb usb4-port1: unable to enumerate USB device [ 182.633315][ T29] audit: type=1326 audit(1727525341.240:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.661787][ T5318] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 182.680218][ T29] audit: type=1326 audit(1727525341.240:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f764eb7dff9 code=0x7ffc0000 [ 182.731842][ T29] audit: type=1326 audit(1727525341.260:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f764eb7c990 code=0x7ffc0000 [ 182.765599][ T7843] chnl_net:caif_netlink_parms(): no params data found [ 182.777268][ T29] audit: type=1326 audit(1727525341.260:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7875 comm="syz.4.532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f764eb7dbfb code=0x7ffc0000 [ 182.835506][ T5318] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 182.849363][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.886848][ T1103] hsr_slave_0: left promiscuous mode [ 182.893388][ T5318] usb 5-1: config 0 descriptor?? [ 182.906370][ T5318] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 182.912848][ T1103] hsr_slave_1: left promiscuous mode [ 182.921006][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.940343][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.957347][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.976422][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.025772][ T5286] usb 2-1: USB disconnect, device number 36 [ 183.030365][ T1103] veth1_macvtap: left promiscuous mode [ 183.047260][ T1103] veth0_macvtap: left promiscuous mode [ 183.053203][ T1103] veth1_vlan: left promiscuous mode [ 183.058539][ T1103] veth0_vlan: left promiscuous mode [ 183.308150][ T5318] gspca_stv06xx: I2C: Read error writing address: -71 [ 183.325588][ T5318] usb 5-1: USB disconnect, device number 40 [ 183.332104][ T5239] Bluetooth: hci2: command tx timeout [ 183.691063][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 183.794604][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 184.309803][ T5286] IPVS: starting estimator thread 0... [ 184.401803][ T7911] IPVS: using max 20 ests per chain, 48000 per kthread [ 184.758059][ T7843] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.766703][ T7843] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.775028][ T7843] bridge_slave_0: entered allmulticast mode [ 184.783288][ T7843] bridge_slave_0: entered promiscuous mode [ 184.793597][ T7843] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.801341][ T7843] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.811486][ T7843] bridge_slave_1: entered allmulticast mode [ 184.827296][ T7843] bridge_slave_1: entered promiscuous mode [ 184.975893][ T7843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.014476][ T7843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.119172][ T7843] team0: Port device team_slave_0 added [ 185.169729][ T7843] team0: Port device team_slave_1 added [ 185.290027][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.305560][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.332030][ T5318] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 185.342503][ T7843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.370663][ T7843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.391558][ T7843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.423076][ T5239] Bluetooth: hci2: command tx timeout [ 185.440512][ T7843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.474606][ T7843] hsr_slave_0: entered promiscuous mode [ 185.480854][ T7843] hsr_slave_1: entered promiscuous mode [ 185.487369][ T7843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.495426][ T7843] Cannot create hsr debugfs directory [ 185.503968][ T5318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 185.558221][ T5318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.607760][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 185.628198][ T5318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.661805][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.907026][ T5318] usb 4-1: usb_control_msg returned -32 [ 185.913840][ T5318] usbtmc 4-1:16.0: can't read capabilities [ 185.954399][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.103475][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.217835][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.389503][ T7964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.509551][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.536403][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.570315][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.584481][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.611270][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.637026][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 186.644531][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.991971][ T35] bridge_slave_1: left allmulticast mode [ 187.005875][ T35] bridge_slave_1: left promiscuous mode [ 187.013551][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.067133][ T35] bridge_slave_0: left allmulticast mode [ 187.082720][ T35] bridge_slave_0: left promiscuous mode [ 187.088492][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.147333][ T7971] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.492746][ T54] Bluetooth: hci2: command tx timeout [ 187.641927][ T51] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 187.725658][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.741348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.758195][ T35] bond0 (unregistering): Released all slaves [ 187.809727][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 187.829964][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 187.842474][ T51] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 187.851555][ T51] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 187.868374][ T51] usb 2-1: Product: syz [ 187.872705][ T51] usb 2-1: Manufacturer: syz [ 187.877340][ T51] usb 2-1: SerialNumber: syz [ 187.892569][ T51] usb 2-1: config 0 descriptor?? [ 188.011448][ T7843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.047102][ T7843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.075073][ T7843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.104394][ T7975] chnl_net:caif_netlink_parms(): no params data found [ 188.118042][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 188.151117][ T7982] binder: 7981:7982 ioctl c018620c 20000000 returned -22 [ 188.202082][ T51] usb 4-1: USB disconnect, device number 32 [ 188.223952][ T5284] usb 2-1: USB disconnect, device number 37 [ 188.294294][ T7843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.380742][ T35] hsr_slave_0: left promiscuous mode [ 188.393994][ T35] hsr_slave_1: left promiscuous mode [ 188.409908][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.425228][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.463033][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.473076][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.502518][ T5233] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 188.516425][ T35] veth1_macvtap: left promiscuous mode [ 188.532930][ T35] veth0_macvtap: left promiscuous mode [ 188.543106][ T35] veth1_vlan: left promiscuous mode [ 188.548449][ T35] veth0_vlan: left promiscuous mode [ 188.662563][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 188.680114][ T5233] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 188.693603][ T5239] Bluetooth: hci1: command tx timeout [ 188.711964][ T5233] usb 5-1: can't read configurations, error -22 [ 188.862881][ T5233] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 189.059040][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 189.074573][ T5233] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 189.086167][ T5233] usb 5-1: can't read configurations, error -22 [ 189.105779][ T5233] usb usb5-port1: attempt power cycle [ 189.315241][ T35] team0 (unregistering): Port device team_slave_1 removed [ 189.378289][ T35] team0 (unregistering): Port device team_slave_0 removed [ 189.454003][ T5233] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 189.493766][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 189.502360][ T5233] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 189.510344][ T5233] usb 5-1: can't read configurations, error -22 [ 189.575411][ T5239] Bluetooth: hci2: command tx timeout [ 189.655408][ T5233] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 189.701999][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 189.710121][ T5233] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 189.728250][ T5233] usb 5-1: can't read configurations, error -22 [ 189.745427][ T5233] usb usb5-port1: unable to enumerate USB device [ 190.139444][ T7975] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.180291][ T7975] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.198396][ T7975] bridge_slave_0: entered allmulticast mode [ 190.212030][ T7975] bridge_slave_0: entered promiscuous mode [ 190.227551][ T7975] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.255645][ T7975] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.285572][ T7975] bridge_slave_1: entered allmulticast mode [ 190.321517][ T7975] bridge_slave_1: entered promiscuous mode [ 190.487677][ T7843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.525250][ T7975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.558170][ T7975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.664296][ T7843] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.672000][ T5285] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 190.695431][ T7975] team0: Port device team_slave_0 added [ 190.745966][ T7975] team0: Port device team_slave_1 added [ 190.772021][ T5318] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 190.772049][ T5239] Bluetooth: hci1: command tx timeout [ 190.790331][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.797434][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.831808][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 190.838738][ T5285] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 190.847415][ T5285] usb 2-1: config 0 has no interface number 0 [ 190.861708][ T5285] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 190.884436][ T5285] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 190.893830][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.911405][ T5285] usb 2-1: Product: syz [ 190.915859][ T5285] usb 2-1: Manufacturer: syz [ 190.921371][ T5285] usb 2-1: SerialNumber: syz [ 190.961883][ T5318] usb 4-1: Using ep0 maxpacket: 8 [ 190.964293][ T5285] usb 2-1: config 0 descriptor?? [ 190.999511][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.008187][ T5318] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 191.032146][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.040760][ T5318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.058120][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.096269][ T7975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.104206][ T5318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.127525][ T5318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.133554][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.144653][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.146619][ T5318] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.172491][ T5318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.188766][ T5318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.210774][ T7975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.219195][ T7975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.245203][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.332228][ T7975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.494729][ T7975] hsr_slave_0: entered promiscuous mode [ 191.502535][ T7975] hsr_slave_1: entered promiscuous mode [ 191.510138][ T7975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.518235][ T7975] Cannot create hsr debugfs directory [ 191.526059][ T5318] usb 4-1: usb_control_msg returned -32 [ 191.536564][ T7843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.554371][ T7843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.610918][ T5318] usbtmc 4-1:16.0: can't read capabilities [ 191.688534][ T7843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.781938][ T5286] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 191.956890][ T7843] veth0_vlan: entered promiscuous mode [ 191.957386][ T5286] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.990088][ T5286] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.005217][ T5286] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.016980][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.109843][ T7843] veth1_vlan: entered promiscuous mode [ 192.250683][ T5286] usb 5-1: usb_control_msg returned -32 [ 192.260932][ T5286] usbtmc 5-1:16.0: can't read capabilities [ 192.367370][ T7843] veth0_macvtap: entered promiscuous mode [ 192.421774][ T7843] veth1_macvtap: entered promiscuous mode [ 192.489921][ T7975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.510733][ T7975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.527387][ T7975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.558385][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.576211][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.588241][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.611387][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.649491][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.662545][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.687807][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.699490][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.718916][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.729584][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.758248][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.769739][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.783645][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.792175][ T7975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.817407][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.832872][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.844310][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.856490][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.862049][ T5239] Bluetooth: hci1: command tx timeout [ 192.880837][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.930070][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.941537][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.030185][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.048222][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.060426][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.078322][ T7843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.106277][ T7843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.128714][ T7843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.194083][ T7843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.205066][ T7843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.214849][ T7843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.224292][ T7843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.419551][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.462529][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.490054][ T5283] usb 4-1: USB disconnect, device number 33 [ 193.531247][ T9] usb 2-1: USB disconnect, device number 38 [ 193.542493][ T7975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.580562][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.622957][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.636160][ T7975] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.669515][ T8092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.680431][ T3035] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.687595][ T3035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.730920][ T3035] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.738147][ T3035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.860238][ T8098] netlink: 68 bytes leftover after parsing attributes in process `syz.2.526'. [ 193.892862][ T7975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.044179][ T7975] veth0_vlan: entered promiscuous mode [ 194.085496][ T7975] veth1_vlan: entered promiscuous mode [ 194.160645][ T7975] veth0_macvtap: entered promiscuous mode [ 194.189646][ T7975] veth1_macvtap: entered promiscuous mode [ 194.247532][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.268384][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.296117][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.316867][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.330246][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.356435][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.398066][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.419410][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.431402][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.478575][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.487209][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.492841][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.537778][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.577370][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.619898][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.658041][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.717583][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.759205][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.872323][ T5233] usb 5-1: USB disconnect, device number 45 [ 194.943995][ T5239] Bluetooth: hci1: command tx timeout [ 195.007923][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.024103][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.036730][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.047153][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.060608][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.071274][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.082984][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.126504][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.153061][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.201884][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.221566][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.233807][ T8143] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.579'. [ 195.245981][ T7975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.262616][ T7975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.275509][ T8143] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.579'. [ 195.294138][ T7975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.405221][ T7975] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.414259][ T7975] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.423152][ T7975] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.432638][ T7975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.600225][ T8151] netlink: 68 bytes leftover after parsing attributes in process `syz.1.581'. [ 195.690758][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.718766][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.842654][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.850509][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.936559][ T938] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 195.992032][ T5284] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 196.097410][ T938] usb 5-1: Using ep0 maxpacket: 16 [ 196.114030][ T938] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 196.131869][ T938] usb 5-1: config 0 has no interface number 0 [ 196.215819][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.274178][ T938] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice=b9.e8 [ 196.288966][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.298897][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.307663][ T938] usb 5-1: Product: syz [ 196.311986][ T938] usb 5-1: Manufacturer: syz [ 196.321703][ T5284] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.334481][ T5284] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.344613][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.353798][ T5284] usb 2-1: config 0 interface 0 has no altsetting 0 [ 196.360539][ T938] usb 5-1: SerialNumber: syz [ 196.365283][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.380162][ T5284] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00 [ 196.390464][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.399531][ T938] usb 5-1: config 0 descriptor?? [ 196.406598][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.425044][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.432796][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.434845][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.440821][ T5284] usb 2-1: config 0 descriptor?? [ 196.643102][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.677696][ T938] usb 5-1: USB disconnect, device number 46 [ 196.761872][ T5284] usbhid 2-1:0.0: can't add hid device: -71 [ 196.767873][ T5284] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 196.836947][ T5284] usb 2-1: USB disconnect, device number 39 [ 196.898932][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.218397][ T8191] netlink: 68 bytes leftover after parsing attributes in process `syz.1.593'. [ 197.233137][ T1103] bridge_slave_1: left allmulticast mode [ 197.238830][ T1103] bridge_slave_1: left promiscuous mode [ 197.263335][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.278292][ T1103] bridge_slave_0: left allmulticast mode [ 197.293770][ T1103] bridge_slave_0: left promiscuous mode [ 197.299546][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.332429][ T938] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 197.373057][ T8196] [ 197.375431][ T8196] ====================================================== [ 197.382460][ T8196] WARNING: possible circular locking dependency detected [ 197.389484][ T8196] 6.11.0-syzkaller-11728-gad46e8f95e93 #0 Not tainted [ 197.396231][ T8196] ------------------------------------------------------ [ 197.403243][ T8196] syz.0.594/8196 is trying to acquire lock: [ 197.409133][ T8196] ffff88807d9f82c8 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x439/0x1fb0 [ 197.419842][ T8196] [ 197.419842][ T8196] but task is already holding lock: [ 197.427204][ T8196] ffff88806c5e9e18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 197.437201][ T8196] [ 197.437201][ T8196] which lock already depends on the new lock. [ 197.437201][ T8196] [ 197.447592][ T8196] [ 197.447592][ T8196] the existing dependency chain (in reverse order) is: [ 197.456608][ T8196] [ 197.456608][ T8196] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 197.464156][ T8196] lock_acquire+0x1ed/0x550 [ 197.469178][ T8196] down_read_killable+0xca/0xd30 [ 197.474629][ T8196] mmap_read_lock_killable+0x1d/0x70 [ 197.480426][ T8196] lock_mm_and_find_vma+0x29c/0x2f0 [ 197.481728][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 197.486129][ T8196] exc_page_fault+0x1bf/0x8c0 [ 197.486160][ T8196] asm_exc_page_fault+0x26/0x30 [ 197.493221][ T938] usb 3-1: config 0 has no interfaces? [ 197.496429][ T8196] fault_in_readable+0x165/0x2b0 [ 197.496461][ T8196] fault_in_iov_iter_readable+0x229/0x280 [ 197.504626][ T938] usb 3-1: New USB device found, idVendor=0b05, idProduct=1786, bcdDevice=8d.4d [ 197.507241][ T8196] generic_perform_write+0x259/0x6d0 [ 197.507268][ T8196] shmem_file_write_iter+0xf9/0x120 [ 197.512978][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.518920][ T8196] vfs_write+0xa6d/0xc90 [ 197.518949][ T8196] ksys_write+0x183/0x2b0 [ 197.529632][ T938] usb 3-1: Product: syz [ 197.533723][ T8196] do_syscall_64+0xf3/0x230 [ 197.533753][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.533777][ T8196] [ 197.533777][ T8196] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 197.533811][ T8196] validate_chain+0x18ef/0x5920 [ 197.539670][ T938] usb 3-1: Manufacturer: syz [ 197.547547][ T8196] __lock_acquire+0x1384/0x2050 [ 197.547579][ T8196] lock_acquire+0x1ed/0x550 [ 197.547598][ T8196] down_write+0x99/0x220 [ 197.547614][ T8196] process_measurement+0x439/0x1fb0 [ 197.547630][ T8196] ima_file_mmap+0x13d/0x2b0 [ 197.547643][ T8196] security_mmap_file+0x7e7/0xa40 [ 197.547663][ T8196] __se_sys_remap_file_pages+0x6e6/0xa50 [ 197.552932][ T938] usb 3-1: SerialNumber: syz [ 197.557229][ T8196] do_syscall_64+0xf3/0x230 [ 197.557258][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.572850][ T938] usb 3-1: config 0 descriptor?? [ 197.581408][ T8196] [ 197.581408][ T8196] other info that might help us debug this: [ 197.581408][ T8196] [ 197.581416][ T8196] Possible unsafe locking scenario: [ 197.581416][ T8196] [ 197.581422][ T8196] CPU0 CPU1 [ 197.581427][ T8196] ---- ---- [ 197.581432][ T8196] lock(&mm->mmap_lock); [ 197.581448][ T8196] lock(&sb->s_type->i_mutex_key#12); [ 197.581468][ T8196] lock(&mm->mmap_lock); [ 197.581480][ T8196] lock(&sb->s_type->i_mutex_key#12); [ 197.581498][ T8196] [ 197.581498][ T8196] *** DEADLOCK *** [ 197.581498][ T8196] [ 197.581503][ T8196] 1 lock held by syz.0.594/8196: [ 197.581514][ T8196] #0: ffff88806c5e9e18 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x22d/0xa50 [ 197.581575][ T8196] [ 197.581575][ T8196] stack backtrace: [ 197.581590][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.0.594 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 197.581610][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.581622][ T8196] Call Trace: [ 197.581629][ T8196] [ 197.581636][ T8196] dump_stack_lvl+0x241/0x360 [ 197.581663][ T8196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.581687][ T8196] ? __pfx__printk+0x10/0x10 [ 197.581715][ T8196] print_circular_bug+0x13a/0x1b0 [ 197.581736][ T8196] check_noncircular+0x36a/0x4a0 [ 197.581757][ T8196] ? __pfx_check_noncircular+0x10/0x10 [ 197.788725][ T8196] ? lockdep_lock+0x123/0x2b0 [ 197.793430][ T8196] validate_chain+0x18ef/0x5920 [ 197.798301][ T8196] ? cgroup_rstat_updated+0x13b/0xc60 [ 197.803698][ T8196] ? __pfx_validate_chain+0x10/0x10 [ 197.808914][ T8196] ? mark_lock+0x9a/0x360 [ 197.813260][ T8196] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 197.819002][ T8196] ? __lock_acquire+0x1384/0x2050 [ 197.824058][ T8196] ? mark_lock+0x9a/0x360 [ 197.828397][ T8196] ? ima_match_policy+0x115/0x22f0 [ 197.833540][ T8196] __lock_acquire+0x1384/0x2050 [ 197.838417][ T8196] lock_acquire+0x1ed/0x550 [ 197.842938][ T8196] ? process_measurement+0x439/0x1fb0 [ 197.846777][ T5286] usb 3-1: USB disconnect, device number 38 [ 197.848308][ T8196] ? __pfx_lock_acquire+0x10/0x10 [ 197.848339][ T8196] ? __pfx___might_resched+0x10/0x10 [ 197.864505][ T8196] ? ima_match_policy+0x115/0x22f0 [ 197.869638][ T8196] ? __schedule+0x189d/0x4b30 [ 197.874491][ T8196] ? __pfx_ima_match_policy+0x10/0x10 [ 197.879883][ T8196] down_write+0x99/0x220 [ 197.884117][ T8196] ? process_measurement+0x439/0x1fb0 [ 197.889479][ T8196] ? __pfx_down_write+0x10/0x10 [ 197.894323][ T8196] ? ima_get_action+0x75/0xb0 [ 197.898992][ T8196] process_measurement+0x439/0x1fb0 [ 197.904184][ T8196] ? __pfx_process_measurement+0x10/0x10 [ 197.909807][ T8196] ? __pfx_lock_acquire+0x10/0x10 [ 197.914838][ T8196] ? aa_file_perm+0x137/0xf50 [ 197.919515][ T8196] ? mtree_load+0x8a1/0x9c0 [ 197.924015][ T8196] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 197.930185][ T8196] ima_file_mmap+0x13d/0x2b0 [ 197.934765][ T8196] ? __pfx_mtree_load+0x10/0x10 [ 197.939606][ T8196] ? __pfx_ima_file_mmap+0x10/0x10 [ 197.944707][ T8196] ? end_current_label_crit_section+0x151/0x180 [ 197.950933][ T8196] ? common_file_perm+0x1a6/0x210 [ 197.955944][ T8196] security_mmap_file+0x7e7/0xa40 [ 197.960959][ T8196] __se_sys_remap_file_pages+0x6e6/0xa50 [ 197.966671][ T8196] ? __pfx_do_futex+0x10/0x10 [ 197.971334][ T8196] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 197.977483][ T8196] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 197.983462][ T8196] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.989793][ T8196] ? do_syscall_64+0x100/0x230 [ 197.994583][ T8196] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 198.000297][ T8196] do_syscall_64+0xf3/0x230 [ 198.004881][ T8196] ? clear_bhb_loop+0x35/0x90 [ 198.009547][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.015432][ T8196] RIP: 0033:0x7fa030b7dff9 [ 198.019833][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.039432][ T8196] RSP: 002b:00007fa0305de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 198.047849][ T8196] RAX: ffffffffffffffda RBX: 00007fa030d36058 RCX: 00007fa030b7dff9 [ 198.055811][ T8196] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 198.063777][ T8196] RBP: 00007fa030bf0296 R08: 0000000000004000 R09: 0000000000000000 [ 198.071747][ T8196] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 198.079710][ T8196] R13: 0000000000000000 R14: 00007fa030d36058 R15: 00007fa030e5fa28 [ 198.087684][ T8196] [ 198.090794][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.341274][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.351364][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.361377][ T1103] bond0 (unregistering): Released all slaves [ 198.371575][ T8168] chnl_net:caif_netlink_parms(): no params data found [ 198.386287][ T8193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.594'. [ 198.532890][ T5239] Bluetooth: hci0: command tx timeout [ 198.555993][ T8168] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.565022][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.578617][ T8168] bridge_slave_0: entered allmulticast mode [ 198.585971][ T8168] bridge_slave_0: entered promiscuous mode [ 198.603751][ T1103] hsr_slave_0: left promiscuous mode [ 198.611047][ T1103] hsr_slave_1: left promiscuous mode [ 198.621334][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.630692][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.648370][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.666253][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.678160][ T1103] veth1_macvtap: left promiscuous mode [ 198.683747][ T1103] veth0_macvtap: left promiscuous mode [ 198.689317][ T1103] veth1_vlan: left promiscuous mode [ 198.696601][ T1103] veth0_vlan: left promiscuous mode [ 198.827435][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 198.851502][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 198.945111][ T8168] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.955198][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.963605][ T8168] bridge_slave_1: entered allmulticast mode [ 198.970090][ T8168] bridge_slave_1: entered promiscuous mode [ 199.005105][ T8168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.024828][ T8168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.077561][ T8168] team0: Port device team_slave_0 added [ 199.085071][ T8168] team0: Port device team_slave_1 added [ 199.114909][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.123486][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.150125][ T8168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.162243][ T8168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.169200][ T8168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.195120][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.203846][ T8168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.257090][ T8168] hsr_slave_0: entered promiscuous mode [ 199.263519][ T8168] hsr_slave_1: entered promiscuous mode [ 199.269614][ T8168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.281028][ T8168] Cannot create hsr debugfs directory [ 199.590369][ T8168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 199.616346][ T8168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.626911][ T8168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.640937][ T8168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.706272][ T8168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.724782][ T8168] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.741319][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.748421][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.758226][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.765314][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.815877][ T8168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.851486][ T8168] veth0_vlan: entered promiscuous mode [ 199.863645][ T8168] veth1_vlan: entered promiscuous mode [ 199.888285][ T8168] veth0_macvtap: entered promiscuous mode [ 199.899800][ T8168] veth1_macvtap: entered promiscuous mode [ 199.916444][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.927039][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.939776][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.951486][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.965494][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.976950][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.989850][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.001551][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.014576][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.025223][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.038604][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.049702][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.060008][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.070698][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.083278][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.097007][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.109143][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.123325][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.136457][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.149320][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.161532][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.174211][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.185787][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.198747][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.209465][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.227330][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.238492][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.252221][ T8168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.263905][ T8168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.275023][ T8168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.294599][ T8168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.311906][ T8168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.320622][ T8168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.330955][ T8168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.370950][ T8168] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 200.398575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.412123][ T8168] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 200.427477][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.454197][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.468907][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.611898][ T5239] Bluetooth: hci0: command tx timeout [ 202.691745][ T5239] Bluetooth: hci0: command tx timeout [ 204.771742][ T5239] Bluetooth: hci0: command tx timeout