last executing test programs: 39.092095987s ago: executing program 4 (id=972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000140)='EG', 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfe63) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000150000000001"], 0x29) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0280, 0x0) dup3(r6, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r9, 0x0, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r9, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r9}) close_range(r7, 0xffffffffffffffff, 0x0) 38.106144381s ago: executing program 4 (id=976): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000600)={0x3, @pix_mp={0xf1e, 0xe41, 0x32314d56, 0x0, 0x4, [{0x4, 0x6}, {0x2}, {0x2, 0x5}, {0x4, 0x8ed}, {0x4, 0x7}, {}, {0x0, 0x4}, {0x3, 0x5}], 0xd, 0x47, 0x7, 0x2, 0x1}}) io_cancel(0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000001fc0)=ANY=[@ANYBLOB="42000000030000000000000000000000000000000000000021"], 0x42) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = open_tree(r0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) fchdir(r4) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030000007f03e3b80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f801fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff930522fff8adf1f677d334cf911e54a865f5a8e3c791c7a76471c5", 0xa4}], 0x1}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x10001}}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x70}}, 0x0) 35.311598588s ago: executing program 4 (id=981): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x2000008, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff053}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x10000a006) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0x0, 0x5], [], 0x0, [0x1, 0xfffffffc]}}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x3, "1100"}]}, 0x54}}, 0x0) unshare(0x20000400) r6 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000080)=0x1000003, 0x1) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r6, &(0x7f00000005c0)={0x8212}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003dc0)=ANY=[@ANYBLOB="03000000040008001900000094c25bb300000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r9, 0x58, &(0x7f0000001240)}, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 14.13653825s ago: executing program 3 (id=1012): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400009fac2afe0000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000054634b00c6054790fe6059c1415d68cba10701000004000904"], 0x0) write$char_usb(r0, &(0x7f0000000200)="0709fe9a939c", 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0xee00) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0xa0000001}) epoll_pwait2(r3, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r3}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_clone3(&(0x7f0000000280)={0x20000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000100), {0x25}, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/130, &(0x7f0000000240)=[0x0], 0x1}, 0x58) move_pages(r6, 0x3, &(0x7f0000000300)=[&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil], 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d04001200eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016001e000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 13.027471679s ago: executing program 2 (id=1016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpgid(0x0) prlimit64(r1, 0xe, &(0x7f0000000180)={0xfffffffffffffff5, 0x80100000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x2, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r4, &(0x7f00000004c0)={0x28, 0x0, 0x0, @hyper}, 0x10) recvmmsg$unix(r4, &(0x7f0000002bc0)=[{{0x0, 0x40002, 0x0, 0x0, 0x0, 0xf0ff7f, 0x100000}, 0x8000000}, {{0x0, 0x8, &(0x7f0000000600)=[{0x0, 0x10}], 0x1}}], 0x3fffffffffffca8, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x7, 0x5, 0x809, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in6=@empty}, 0x0, 0x4f000e9ca1872fb5}, [@XFRMA_IF_ID={0x8}, @migrate={0x50, 0x11, [{@in6=@dev, @in=@private, @in6=@mcast1, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa8}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 12.337013426s ago: executing program 0 (id=1017): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) sendto$inet6(r1, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000003c0)=0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@map=0x1, 0xffffffffffffffff, 0x1f, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'gre0\x00'}}, 0x1e) sendto(r3, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x7c48, 0x100581, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xa, 0x0}) io_uring_enter(r4, 0x486, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getpeername$unix(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x1f8, 0xf8, 0xa, 0x148, 0xf8, 0x60, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x200003ae, 0x7f00}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x1, 0x0, 0x0, 0x0, 0x6]}, {0x0, [0x0, 0x0, 0x0, 0x6], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x258) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d", @ANYRES64=r9], 0x398}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 11.035205156s ago: executing program 0 (id=1018): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x101800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0) listen(r1, 0x100101) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 11.034705689s ago: executing program 2 (id=1019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000000400020000000c00024000000000000000010900010073797a30000000000900030073797a3200000000140000001100010000000000000000000000000a60b67c882adff82b2b19b8987fc9937728e128ce9980592d750f98e35e2132016f44c92586e30852611abf515b2b0ad5c8aae7a46a5e9d5ccd37ff8947596d9d8c3da0e1013dc961b1a555bb5d36b49ee2baa69edab02aa599ee52553e1fc36e80005bce59ef6ff764423eca645a50872be958970ccbbc2e1133cce5e41d2878b1524f1955e6a9a1cb6a87c14a86d4"], 0x60}}, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x22d441) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x1c, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe}, @TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x9, 0xfff, 0x0, 0xfe, 0x2, 0x4, 0xfffffff9, 0x63, 0x9, 0xfff, 0xa, 0x549a, 0x3ff, 0x7, 0xe, 0x10001, 0x80000001, 0x6, 0x856, 0xe98, 0x3, 0x590, 0x40, 0x1, 0x9, 0x1, 0x8001, 0x79, 0xfffffdae, 0x9, 0x4, 0x0, 0x80000000, 0x1000, 0x6, 0x9, 0x3, 0x401, 0x7, 0xfffff000, 0x1, 0x401, 0xfd, 0x3, 0x10000, 0xffffffff, 0xefe, 0xbcd, 0xfffffff0, 0x7, 0x800, 0x0, 0x5, 0x0, 0x1, 0x3, 0x9, 0x4, 0x8, 0x4, 0x8, 0x400, 0x43c, 0x5, 0x8, 0xfffffff7, 0x1, 0x1, 0x2, 0x4, 0x0, 0x80000001, 0x7fffffff, 0xffffffff, 0x10001, 0x0, 0x5, 0x9f1, 0x7, 0xf0fb, 0x6f23, 0x4, 0x6, 0x8001, 0x80000000, 0x2, 0x7fff, 0x4d4, 0x6, 0xfffffff7, 0xfffffffb, 0x9, 0x424, 0xfffffffc, 0x2, 0xd4c0, 0x8, 0x2, 0x4, 0x443a4fca, 0x2, 0x8, 0x5, 0x3, 0x4, 0x8, 0xabdb, 0x5, 0xcb52, 0x2, 0x50, 0x6, 0x0, 0x81, 0x9ea5, 0x0, 0x1, 0x3, 0x7, 0x7, 0x2, 0x9, 0x1, 0x4, 0xe, 0x2, 0x4, 0x400, 0x6, 0x1, 0xfffffffd, 0x5, 0x8001, 0x2, 0xfffffb09, 0x2, 0x76, 0x2787, 0x7, 0x829, 0x2, 0x1, 0xf73, 0x3, 0xa, 0x800, 0x0, 0x602, 0xa1, 0x10, 0x401, 0x5, 0x9, 0x0, 0x9, 0x3, 0x3, 0x3f0, 0xffffffff, 0x8001, 0x0, 0xfff, 0x81, 0xf, 0x4ba5, 0x3, 0x5, 0xf, 0x1, 0xff, 0x3, 0xc, 0x4, 0x0, 0x101, 0xf, 0x13c0bcf9, 0x7fff, 0x6, 0xffffffff, 0xe7, 0x0, 0xbe, 0xfff, 0x8, 0xaf7, 0x1ff, 0xc0, 0x8, 0x100, 0x9, 0x5, 0x1, 0x5962, 0x7fff, 0x5, 0x40, 0x2, 0x2, 0x1, 0x401, 0x71, 0x4, 0x3ff, 0x1, 0x100, 0x400, 0x3, 0x5, 0x6, 0x5, 0xff, 0x4, 0x8, 0x6, 0x200, 0x0, 0x5, 0x9, 0xf5, 0x3000, 0x500000, 0x8000, 0x2, 0xf06, 0x8, 0x800, 0x1c5, 0x8, 0x80000001, 0x9, 0x3, 0x10, 0x3573d657, 0x5, 0x3, 0x0, 0x7, 0x5, 0x45b164af, 0x6, 0x5, 0x100, 0xffffffff, 0x3, 0x9, 0x0, 0x7, 0x6, 0x7, 0x227e, 0x3, 0x7, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x18ff, 0x6, 0x4, 0x6, 0x8, 0x2, 0x6, 0x9, 0x9, 0x4, 0x4dbc, 0xffffffff, 0xffff, 0x800, 0xffffff11, 0x8001, 0x2, 0xfffffffb, 0x7, 0xd386, 0x5a, 0x77, 0x6, 0x2, 0x7, 0x10000, 0x400007, 0x9, 0x6, 0x401, 0x8, 0x9, 0x48d, 0x9, 0xbcc0, 0x10001, 0x4, 0x800, 0x1, 0x2, 0x1000, 0x19b, 0x2e, 0x6, 0x6, 0x7ffffff7, 0x5, 0x1000, 0x8d09, 0x9, 0x8, 0x3, 0x40, 0x1, 0xff, 0x7fffffff, 0xffff6ec8, 0x0, 0x9, 0x92, 0xfba, 0x4, 0x5, 0x7, 0x8, 0xfffffc01, 0x9, 0x3, 0xc, 0x3d0, 0x2, 0x1b, 0x800, 0xb0b, 0x9, 0x1, 0xfffffffd, 0x1ff, 0xf4, 0x6, 0x7, 0x10001, 0x52dd4316, 0x713cdb51, 0x6, 0xcdf, 0x3, 0x1, 0x0, 0x101, 0x0, 0x8cc, 0x1, 0x9, 0x0, 0x3, 0x5, 0x5, 0x7, 0xaea, 0xa, 0x9, 0x5, 0x4, 0x5, 0x2, 0x7c, 0xf, 0x9, 0x7ff, 0x9, 0x400, 0xffffff80, 0xa127, 0x9, 0xf, 0x7, 0xd00, 0x0, 0x9, 0x10, 0x5d56, 0x0, 0x5, 0xc9, 0x8, 0x6, 0x7, 0x8, 0x5, 0x3ff, 0x7ff, 0x9, 0x7, 0x7, 0x6, 0xfff, 0xe0a, 0x3, 0x90d, 0x80000001, 0x4, 0x9, 0x67b, 0x8, 0xae, 0x8, 0x2, 0x4, 0x2, 0x5, 0xffffffff, 0x5, 0x3, 0xffffffe8, 0x10001, 0x9, 0xfffffffe, 0x7fffffff, 0x4, 0x4, 0x80000001, 0x7, 0x9, 0x2, 0xff, 0x6, 0x1, 0xfffffff8, 0x8000, 0x1, 0xffffffff, 0x800, 0x2, 0x7, 0x3, 0x8, 0x8, 0x2, 0x0, 0x7, 0x87, 0x9, 0x7, 0x7, 0x1, 0x2, 0x2, 0x802, 0xfffff5f6, 0x0, 0x5, 0x10, 0xff, 0x2, 0x1, 0x9, 0x1, 0x0, 0x80, 0x0, 0xfffffffc, 0x0, 0x8b7, 0x85, 0x8, 0x3075, 0x0, 0x7, 0x7, 0x2, 0x9, 0xf, 0x4, 0xd8, 0x6, 0x9, 0x3, 0x0, 0x4, 0xfff, 0x10001, 0x8, 0xe, 0x4, 0x92e9, 0x401, 0xc, 0xd6, 0x9, 0xfffffff8, 0x5, 0xf5, 0x6, 0x400, 0xffffffff, 0x40, 0x5, 0x4a, 0x800, 0x8, 0x0, 0x80000001, 0x5, 0x800, 0x8, 0x3, 0xfff, 0x0, 0xfffff800, 0x50, 0x101, 0x5, 0x2, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x3, 0xffff, 0x9, 0x90, {0x8, 0x0, 0x58, 0x3, 0x7f, 0x2}, {0xa, 0x2, 0x9, 0x3, 0x9, 0x4}, 0x8, 0x3, 0x10001}}]}]}}]}, 0x884}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x82, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000480000000000000008000000"]) io_setup(0xff, 0x0) inotify_init1(0x80800) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000040)=0x7, 0x4) bind$inet(r8, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r8, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207", 0xd2, 0x4040004, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 10.115402529s ago: executing program 2 (id=1020): set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3002, &(0x7f0000000240)=""/9) connect$inet6(r1, &(0x7f0000000040), 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) io_setup(0x36d8, 0x0) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x6, 0x0, 0xa}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x2c020400) 9.955899874s ago: executing program 3 (id=1021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e"], 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="5f4845e454d045d203b51ec84adda9702a85314388328a9934ea95b377eaf6652c94a72c1fc38109250cf80f377e581bab151fd0a09650d110b5dc5c9aa4c90e4b5701e4", 0x44}], 0x1}}], 0x2, 0xc8000) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) accept4$tipc(r3, &(0x7f0000000340)=@name, &(0x7f00000002c0)=0x10, 0x80000) 8.231212693s ago: executing program 1 (id=1023): clock_gettime(0x1, &(0x7f0000000c40)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)={r0, r1+60000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffeef, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f00000020c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='uid_map\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000005280)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000000020104000000000000000002000000300002802c000180140003000000"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000021c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24000005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x154) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) io_submit(0x0, 0x1, &(0x7f0000002240)=[&(0x7f0000002200)={0x0, 0x0, 0x0, 0xfab9b75a1beb2beb, 0x9, r5, &(0x7f0000002140)="bd1620b73c7c73179ba06a4cc25e10f50e55574312ecd577368d1df377509ef0c7c94ab71582d94394dbf72dcaaae24c41be942d655288c1851beedf0adca4a1e1c02bfc429899cfb152c93326092c3af6ce9a772acaecadfe5ce0a5049c8eb9", 0x60, 0x81, 0x0, 0x1}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) 7.872887595s ago: executing program 4 (id=982): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace(0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket(0x1e, 0x1, 0x0) chdir(0x0) r3 = socket$inet6(0xa, 0x3, 0x103) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b07073f00356d000000001100a8"], 0x40) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) 6.215672423s ago: executing program 2 (id=1024): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace(0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket(0x1e, 0x1, 0x0) chdir(0x0) r3 = socket$inet6(0xa, 0x3, 0x103) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b07073f00356d000000001100a8ad00"], 0x40) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) 5.93468984s ago: executing program 1 (id=1025): socket$nl_generic(0x10, 0x3, 0x10) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000600)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) dup3(r6, r5, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x4010080) r9 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x0, 0x0) lseek(r9, 0x10001, 0x1) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000180)=0xe) lsetxattr$system_posix_acl(0x0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8834a88a8", 0x1000e, 0x0, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$RDS_GET_MR(r4, 0x114, 0x6, &(0x7f0000000440)={{0x0}, 0x0}, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 5.311522804s ago: executing program 3 (id=1026): openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012801100010300724b6467655f736c6176650006000000000580"], 0x3c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x50}, {0x5, 0x0, 0x0, 0x4}]}) write$ppp(r1, &(0x7f0000000140)="1627", 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000008000000000000000ff02000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x60500, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d", 0x12}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x6d}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r5, 0x3b8c, &(0x7f0000000240)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f00000001c0)={0x30, r7, 0x0, 0x0, 0x81, 0x6, 0x5, &(0x7f0000000240)=""/4096}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010000000000000000140a000001", @ANYRES32, @ANYBLOB="00bf"], 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x101}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 5.084178785s ago: executing program 0 (id=1027): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) io_uring_setup(0xfc2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x3c}}, 0x0) r4 = syz_open_dev$vim2m(0x0, 0x400000f7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2}) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000006380), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f0000000180)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a4b826edc4e65feef000000000000000000000003000600000000000200000000000000000000000000000003000500000000000200000000000000000000000000000002001300ff000000"], 0x50}}, 0x0) io_uring_setup(0x14bf, &(0x7f0000000800)) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) syz_usb_connect$uac1(0x3, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYRESDEC=r7], 0x0) 5.07037585s ago: executing program 1 (id=1028): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5111) sendfile(r7, r5, 0x0, 0x8a000) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x40000040) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r8, 0x0, 0x8}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r8, 0x0, 0x155}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000240)={0xc, r8}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x9, 0x0, 0x0, 0x3f}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fec8"], 0x48}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r10, 0x4) accept(r10, &(0x7f0000000000)=@can, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r11, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 5.049589423s ago: executing program 4 (id=1029): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x7, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000008000/0x3000)=nil) timer_create(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0xed88e807f337116b, 0x0, 0x4e21}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) writev(r4, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000000000fe, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0xa1, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904000000fffdff00"], 0x0) 3.808886812s ago: executing program 1 (id=1030): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x200, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x12) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc) r12 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.375624964s ago: executing program 2 (id=1031): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) mmap$binder(&(0x7f0000395000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0xec07) set_mempolicy(0x8001, 0x0, 0x80) shmdt(0x0) shmat(r0, &(0x7f00003b7000/0x1000)=nil, 0x6000) mlockall(0x7) shmctl$SHM_LOCK(0x0, 0xb) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x2000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100000009040000160202000005c07fab6205240000000d240f0100000000000000000004240200090581034000000000090582020002000000090503024002"], 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) write$UHID_INPUT(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="ff", 0x27}], 0x1, &(0x7f0000000580)=ANY=[@ANYRESOCT], 0x11f0}, 0x20008000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000006c0)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) 3.242640196s ago: executing program 3 (id=1032): syz_open_dev$midi(0x0, 0x2, 0x0) syz_open_dev$amidi(0x0, 0x800006, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) ioctl$SNDCTL_SEQ_RESET(r3, 0x5100) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0) r5 = dup(r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) personality(0x8000000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000080)) 3.241946819s ago: executing program 1 (id=1033): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.790856453s ago: executing program 0 (id=1034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800100000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x4, 0x80000000, 0x4}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x10, 0x400000000080803, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) read$FUSE(r7, &(0x7f0000002ac0)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0xbb5f}}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="39ca1999", @ANYRES16=r5, @ANYBLOB="080025bd7000fbdbdf25000000000800020000000000060006000100000008000700", @ANYRES32=r7, @ANYBLOB="08000500ac1414aa06000600020000000800020001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x5608, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00082bbd7000fedbdf250100000008000700", @ANYRES32=r9, @ANYBLOB="2c4c61b88f2b510b6619e37eb24b48323aa1297bd5200522ed4e2d41828c7be7f4374e57f136736764bc934897a967d3fef4236bd5bebe6ff68d34911417bc14ce1016847deb1f7f83128cbfa11d108560aa03fd9c65ff73e0f58e1a0eb58eba76b4fa3c8a12182ed5f1bd6c07a0e872d3746271f59afb483d74bb20eb7264bd9ad199717cd95e9c0cd6acc84c6b44db09449f1f5e9098773b8bba008f8c725bf12fdbe11dac2fee92b92c001d8a6256750aa1be4e8688ccc009fcdddad3e904b5e336bccf4bb5ef66a705c69c5131171a807d322b0d56a8192c90a686fe7e8f58fb60126abcdde5a96041559dd711c159acb512e5e453e7dc8e33b56359391ebeb93b993f68ebeb18bc0ab3f50a0d62ee"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_VERSION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40058) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) connect$netlink(r3, &(0x7f0000000000)=@unspec, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.599496454s ago: executing program 3 (id=1035): clock_gettime(0x1, &(0x7f0000000c40)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)={r0, r1+60000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffeef, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f00000020c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='uid_map\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) read$FUSE(r3, &(0x7f0000005280)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000000020104000000000000000002000000300002802c000180140003000000"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000021c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24000005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x154) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) io_submit(0x0, 0x1, &(0x7f0000002240)=[&(0x7f0000002200)={0x0, 0x0, 0x0, 0xfab9b75a1beb2beb, 0x9, r5, &(0x7f0000002140)="bd1620b73c7c73179ba06a4cc25e10f50e55574312ecd577368d1df377509ef0c7c94ab71582d94394dbf72dcaaae24c41be942d655288c1851beedf0adca4a1e1c02bfc429899cfb152c93326092c3af6ce9a772acaecadfe5ce0a5049c8eb9", 0x60, 0x81, 0x0, 0x1}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.214211236s ago: executing program 0 (id=1036): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) unshare(0x4020480) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000095"]) clock_gettime(0x0, &(0x7f0000000000)) chdir(0x0) sync() r1 = socket(0x1, 0x800, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/105, 0x69}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xa40c00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000100)) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x28, 0xa2, 0x100000, 0x0, 0x3}}, 0x50) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x555b82, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0xfffffffc}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2], 0xec}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.074115787s ago: executing program 1 (id=1037): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0xb5315258}}) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x80000000) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c1ff07000000000000655804e09171"}}}}}}}, 0x0) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = openat$autofs(0xffffff9c, &(0x7f00000000c0), 0x191040, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r9, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg(r8, 0x0, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) 1.069449982s ago: executing program 4 (id=1038): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x101800) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0) listen(r1, 0x100101) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 483.834081ms ago: executing program 0 (id=1039): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace(0x10, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = signalfd(0xffffffffffffffff, 0x0, 0x0) dup(r0) umount2(&(0x7f0000000600)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket(0x1e, 0x1, 0x0) chdir(0x0) r3 = socket$inet6(0xa, 0x3, 0x103) getsockopt$sock_int(0xffffffffffffffff, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1b5b07073f00356d000000001100a8ad00"], 0x40) sendmmsg$inet6(r3, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) 403.683776ms ago: executing program 2 (id=1040): r0 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r1, &(0x7f00000001c0)=""/147, 0x93) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/config', 0x0, 0x0) getdents64(r2, &(0x7f00000001c0)=""/147, 0x93) getdents(r2, &(0x7f0000000280)=""/182, 0xb6) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102e1ff0000000000000a0000000c001980080001008c020000100001800c0002800500010001000000"], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00006ae000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r8, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0xfffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x1, 0x2000000}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x256f16877c9e1f29, 0x0) unshare(0xc010b00) 0s ago: executing program 3 (id=1041): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@dev}, 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0xef, 0xaa, 0x6e, 0x10, 0x1397, 0xbd, 0xc566, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe6, 0x2b, 0x3d}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000000)={0x3, 0x1, 0xfffffffb, 0x6, 0x7, 0x5, 0x2, 0x8, 0x2, 0x56, 0xfffffff8, 0xb, 0xd, 0x8}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f00003f3000/0x400000)=nil, 0x400000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0xa2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0x18, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}}]}, 0xd8}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r8 = dup(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="1d00000000000000b7050000080000008500000005000000950000ffffff", @ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRESDEC, @ANYRES64=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r10, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000f3000040"]) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): ink: 209852 bytes leftover after parsing attributes in process `syz.0.860'. [ 461.264979][T10435] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 461.448865][T10444] vxcan1: tx address claim with dlc 1 [ 461.449863][T10435] ipvlan0: entered promiscuous mode [ 461.466459][T10435] ipvlan0: left promiscuous mode [ 461.537649][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 461.551776][T10435] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 461.591339][ T5288] usbhid 2-1:0.0: can't add hid device: -71 [ 461.607179][ T5288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 461.723980][ T5288] usb 2-1: USB disconnect, device number 44 [ 462.618248][ T5288] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 462.781015][ T5288] usb 5-1: config 0 has no interfaces? [ 462.789276][ T5288] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 462.836213][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.870405][ T5288] usb 5-1: Product: syz [ 462.877282][ T5288] usb 5-1: Manufacturer: syz [ 462.887615][ T5288] usb 5-1: SerialNumber: syz [ 462.902445][ T5288] usb 5-1: config 0 descriptor?? [ 463.187931][ T5288] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 463.380175][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 463.396588][ T5288] usb 2-1: too many configurations: 245, using maximum allowed: 8 [ 463.468456][ T5288] usb 2-1: config index 0 descriptor too short (expected 64797, got 132) [ 463.476962][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.566353][ T5288] usb 2-1: config index 1 descriptor too short (expected 64797, got 132) [ 463.597433][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.640010][T10473] netlink: 'syz.0.870': attribute type 10 has an invalid length. [ 463.662320][ T5288] usb 2-1: config index 2 descriptor too short (expected 64797, got 132) [ 463.689695][T10473] team0: Port device netdevsim0 added [ 463.696437][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.742614][ T5288] usb 2-1: config index 3 descriptor too short (expected 64797, got 132) [ 463.778142][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.874204][ T5288] usb 2-1: config index 4 descriptor too short (expected 64797, got 132) [ 463.930000][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.973980][ T5288] usb 2-1: config index 5 descriptor too short (expected 64797, got 132) [ 463.983355][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.015605][ T5288] usb 2-1: config index 6 descriptor too short (expected 64797, got 132) [ 464.034421][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.146682][ T5288] usb 2-1: config index 7 descriptor too short (expected 64797, got 132) [ 464.236603][ T5288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.297118][ T5288] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 464.381917][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.438645][ T5288] usb 2-1: Product: syz [ 464.474168][ T5288] usb 2-1: Manufacturer: syz [ 464.525660][ T5288] usb 2-1: SerialNumber: syz [ 464.601850][ T5288] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 464.705299][ T5287] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 464.988099][ T5288] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 465.007561][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 465.041074][T10481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'. [ 465.069252][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.0.872'. [ 465.209050][ T5288] usb 3-1: Using ep0 maxpacket: 32 [ 465.222424][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.267917][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.313878][ T5288] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 465.360012][ T47] usb 5-1: USB disconnect, device number 50 [ 465.483763][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.523519][ T5288] usb 3-1: config 0 descriptor?? [ 465.577144][ T5288] hub 3-1:0.0: USB hub found [ 465.775680][ T5288] hub 3-1:0.0: 1 port detected [ 465.793713][ T5287] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 465.824884][ T5287] ath9k_htc: Failed to initialize the device [ 465.993017][ T5288] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 465.999547][ T5288] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 466.029873][ T5287] usb 2-1: ath9k_htc: USB layer deinitialized [ 466.193281][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 466.253301][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.267128][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.818479][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 466.838007][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.878'. [ 467.008792][ T5239] usb 2-1: USB disconnect, device number 45 [ 467.192645][ T5288] usbhid 3-1:0.0: can't add hid device: -71 [ 467.198873][ T5288] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 467.228974][ T5288] usb 3-1: USB disconnect, device number 50 [ 467.681135][ T29] audit: type=1326 audit(1728357722.652:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10526 comm="syz.1.881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fafe917dff9 code=0x0 [ 467.883736][T10528] netlink: 'syz.1.881': attribute type 4 has an invalid length. [ 468.027639][T10532] netlink: 'syz.4.882': attribute type 10 has an invalid length. [ 468.137534][T10532] team0: Port device netdevsim0 added [ 468.486091][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 468.747555][T10557] wireguard0: entered promiscuous mode [ 468.753447][T10557] wireguard0: entered allmulticast mode [ 468.763526][ T47] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 468.920448][ T47] usb 3-1: config 0 has no interfaces? [ 468.931601][ T47] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 468.942886][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.957566][ T47] usb 3-1: Product: syz [ 468.969525][ T47] usb 3-1: Manufacturer: syz [ 468.976579][ T47] usb 3-1: SerialNumber: syz [ 468.985469][ T47] usb 3-1: config 0 descriptor?? [ 469.698963][T10571] Option '[y$ [ 469.698963][T10571] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 469.764886][T10571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 470.211526][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.890'. [ 471.038083][ T8] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 471.197611][ T6658] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.198080][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 471.255019][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.298276][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.323990][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 471.355107][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.384483][ T8] usb 5-1: config 0 descriptor?? [ 471.403553][ T8] hub 5-1:0.0: USB hub found [ 471.434384][ T6658] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.615242][ T8] hub 5-1:0.0: 1 port detected [ 471.622699][ T5287] usb 3-1: USB disconnect, device number 51 [ 471.851868][ T6658] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.906893][ T8] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 471.913396][ T8] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 471.989915][T10591] pimreg: entered allmulticast mode [ 472.161591][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.190706][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.199032][ T6658] team0: Port device netdevsim0 removed [ 472.228261][ T5288] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 472.232454][ T6658] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.324608][T10591] pimreg: left allmulticast mode [ 472.399784][ T5288] usb 4-1: config 0 has no interfaces? [ 472.408404][ T5288] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 472.437896][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.458681][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.487472][ T5288] usb 4-1: Product: syz [ 472.494411][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.504409][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.518650][ T5288] usb 4-1: Manufacturer: syz [ 472.525024][ T5288] usb 4-1: SerialNumber: syz [ 472.530051][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.540435][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 472.548190][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.560891][ T5288] usb 4-1: config 0 descriptor?? [ 473.005665][ T6658] bridge_slave_0: left allmulticast mode [ 473.039440][ T6658] bridge_slave_0: left promiscuous mode [ 473.052097][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.159558][ T47] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 473.329121][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 473.370436][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 473.399607][ T47] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 473.417698][ T47] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 473.447752][ T47] usb 1-1: Product: syz [ 473.462523][ T47] usb 1-1: Manufacturer: syz [ 473.478697][ T47] usb 1-1: SerialNumber: syz [ 473.496183][ T47] usb 1-1: config 0 descriptor?? [ 473.502767][T10606] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 474.651450][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 474.666431][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 474.683235][ T5246] Bluetooth: hci3: command tx timeout [ 474.789734][ T8] usb 5-1: USB disconnect, device number 51 [ 474.959645][ T47] usb 4-1: USB disconnect, device number 56 [ 475.046262][ T6658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.070823][T10634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.900'. [ 475.101908][ T6658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.142069][ T6658] bond0 (unregistering): Released all slaves [ 475.571320][T10615] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 475.830671][T10615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.881549][T10615] team0: Port device bond0 added [ 476.749145][ T5246] Bluetooth: hci3: command tx timeout [ 476.805909][T10601] chnl_net:caif_netlink_parms(): no params data found [ 476.907947][T10652] program syz.3.904 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.961349][T10649] xt_CT: No such helper "netbios-ns" [ 476.993242][ T5303] usb 1-1: USB disconnect, device number 50 [ 477.227574][ T6658] hsr_slave_0: left promiscuous mode [ 477.240642][ T6658] hsr_slave_1: left promiscuous mode [ 477.261560][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.293641][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.369142][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.908'. [ 477.379328][ T6658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.389903][ T6658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.610844][ T6658] veth1_macvtap: left promiscuous mode [ 477.617679][ T6658] veth0_macvtap: left promiscuous mode [ 477.623574][ T6658] veth1_vlan: left promiscuous mode [ 477.630588][ T6658] veth0_vlan: left promiscuous mode [ 478.173125][T10684] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 478.251073][T10686] program syz.3.910 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.677860][ T8] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 478.833206][ T5246] Bluetooth: hci3: command tx timeout [ 479.002830][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 480.866400][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 480.880285][T10696] loop7: detected capacity change from 0 to 16384 [ 480.886898][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 480.898323][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 480.910794][ T5246] Bluetooth: hci3: command tx timeout [ 480.936137][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 481.042791][T10698] blk_print_req_error: 7 callbacks suppressed [ 481.042811][T10698] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 481.071107][T10698] buffer_io_error: 7 callbacks suppressed [ 481.071129][T10698] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 481.116322][ T8] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 481.128956][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 481.141912][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 481.150652][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.163988][ T8] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 481.230800][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.277489][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.310874][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.348608][ T8] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 481.359776][ T8] usb 4-1: can't read configurations, error -71 [ 481.366401][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.381234][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.436330][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.463750][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.506951][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.521127][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.563783][T10696] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 481.589158][T10696] Buffer I/O error on dev loop7, logical block 0, async page read [ 481.612229][T10696] loop7: unable to read partition table [ 481.636341][T10696] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 481.636871][T10698] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 481.680511][T10698] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 481.690672][T10698] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 481.705702][T10698] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 481.787867][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 482.016538][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 482.023597][ T8] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 482.040679][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.069288][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.118180][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 482.163905][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.173624][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.192083][ T29] audit: type=1326 audit(1728357737.162:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10702 comm="syz.0.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x0 [ 482.215450][ T8] usbtmc 4-1:16.0: bulk endpoints not found [ 482.350404][ T6658] team0 (unregistering): Port device team_slave_1 removed [ 482.430158][ T47] usb 4-1: USB disconnect, device number 58 [ 482.461677][ T6658] team0 (unregistering): Port device team_slave_0 removed [ 483.432015][T10710] netlink: 'syz.2.915': attribute type 5 has an invalid length. [ 483.496783][T10706] bridge0: port 1(syz_tun) entered blocking state [ 483.518495][T10706] bridge0: port 1(syz_tun) entered disabled state [ 483.525960][T10706] syz_tun: entered allmulticast mode [ 483.549358][T10706] syz_tun: entered promiscuous mode [ 483.555072][T10706] bridge0: port 1(syz_tun) entered blocking state [ 483.561537][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 483.570572][T10706] bridge0: port 1(syz_tun) entered forwarding state [ 483.736659][T10601] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.744445][T10601] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.751842][T10601] bridge_slave_0: entered allmulticast mode [ 483.761397][T10601] bridge_slave_0: entered promiscuous mode [ 483.796374][T10601] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.804146][T10601] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.812007][T10601] bridge_slave_1: entered allmulticast mode [ 483.871544][T10601] bridge_slave_1: entered promiscuous mode [ 483.935147][T10732] netlink: 72 bytes leftover after parsing attributes in process `syz.0.919'. [ 484.083500][T10601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.214087][T10601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.248086][ T5288] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 484.441202][T10601] team0: Port device team_slave_0 added [ 484.459567][ T5288] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.460751][T10601] team0: Port device team_slave_1 added [ 484.500440][ T5288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.535539][ T5288] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.561168][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.610039][ T5288] usb 3-1: SerialNumber: syz [ 484.857867][T10748] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 485.023507][T10733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.920'. [ 485.043118][T10601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.051793][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.100866][T10601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.180624][ T5288] usb 3-1: 0:2 : does not exist [ 485.194889][ T5288] usb 3-1: unit 255 not found! [ 485.223009][ T5288] usb 3-1: USB disconnect, device number 52 [ 485.252597][T10601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.310927][T10601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.395815][ T9122] udevd[9122]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.412223][T10601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.579717][T10601] hsr_slave_0: entered promiscuous mode [ 485.616424][T10601] hsr_slave_1: entered promiscuous mode [ 485.650665][T10601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.672076][T10601] Cannot create hsr debugfs directory [ 486.631046][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 489.789479][ T2546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.822134][ T2546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.834666][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 490.253350][ T2546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.338072][ T2546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.540967][T10601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.911519][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.931531][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.940925][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.948885][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.957481][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 490.985342][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 491.011932][ T2546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.026542][ T2546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.073031][T10601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.116356][T10601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.240625][T10601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.367488][ T2546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 491.394883][ T2546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.508229][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 491.628479][ T5239] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 491.678576][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 491.696165][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 491.713818][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 491.726232][ T8] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.738431][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 491.750751][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 491.765135][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 491.773640][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 491.788555][ T8] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.804402][T10801] chnl_net:caif_netlink_parms(): no params data found [ 491.817956][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 491.838848][ T5239] usb 1-1: Using ep0 maxpacket: 8 [ 491.875338][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 491.890335][ T8] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 491.895057][ T5239] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 491.901484][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 491.906436][ T5239] usb 1-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 491.945591][ T8] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.968087][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 491.998038][ T8] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 492.027406][ T5239] usb 1-1: config 0 has no interface number 0 [ 492.036619][ T8] usb 5-1: string descriptor 0 read error: -22 [ 492.044934][ T8] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 492.056225][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.070950][ T2546] bridge_slave_1: left allmulticast mode [ 492.076618][ T2546] bridge_slave_1: left promiscuous mode [ 492.083061][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.098035][ T5239] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 492.110129][ T8] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 492.112077][ T5239] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 492.129926][ T5239] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 492.141326][ T5239] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.155038][ T5239] usb 1-1: config 0 interface 52 has no altsetting 0 [ 492.155240][ T2546] bridge_slave_0: left allmulticast mode [ 492.169531][ T5239] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 492.180771][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 492.189777][ T5239] usb 1-1: Product: syz [ 492.199279][ T5239] usb 1-1: SerialNumber: syz [ 492.204959][ T2546] bridge_slave_0: left promiscuous mode [ 492.211158][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.221990][ T5239] usb 1-1: config 0 descriptor?? [ 492.440153][ T5239] input: syz (Stick) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input25 [ 492.629076][T10819] ======================================================= [ 492.629076][T10819] WARNING: The mand mount option has been deprecated and [ 492.629076][T10819] and is ignored by this kernel. Remove the mand [ 492.629076][T10819] option from the mount to silence this warning. [ 492.629076][T10819] ======================================================= [ 492.747344][ T47] usb 5-1: USB disconnect, device number 52 [ 492.766766][T10817] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 493.148738][ T5242] Bluetooth: hci4: command tx timeout [ 494.303957][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.347671][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.361817][ T2546] bond0 (unregistering): Released all slaves [ 494.445492][T10601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.259169][ T5242] Bluetooth: hci4: command tx timeout [ 495.269756][T10601] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.469470][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.476644][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.521980][ T5288] usb 1-1: USB disconnect, device number 51 [ 495.533993][T10801] bridge_slave_0: entered allmulticast mode [ 495.575824][T10801] bridge_slave_0: entered promiscuous mode [ 495.594711][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.609600][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.616954][T10801] bridge_slave_1: entered allmulticast mode [ 495.632213][T10801] bridge_slave_1: entered promiscuous mode [ 495.784497][T10801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.816448][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.826516][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.836268][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.858454][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.869698][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 495.869865][T10801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.896878][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.051252][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.058489][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.173965][ T29] audit: type=1326 audit(1728357751.132:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.185830][T10801] team0: Port device team_slave_0 added [ 496.234959][ T29] audit: type=1326 audit(1728357751.142:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.259517][ T29] audit: type=1326 audit(1728357751.142:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.308869][T10854] Option '[y$ [ 496.308869][T10854] >ڎTkS@SVfhJ' to dns_resolver key: bad/missing value [ 496.321988][ T29] audit: type=1326 audit(1728357751.142:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.350241][ T2546] hsr_slave_0: left promiscuous mode [ 496.366122][ T29] audit: type=1326 audit(1728357751.142:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.401867][ T2546] hsr_slave_1: left promiscuous mode [ 496.408855][ T29] audit: type=1326 audit(1728357751.142:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.432837][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.447650][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.470954][ T29] audit: type=1326 audit(1728357751.142:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.479533][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.513995][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.521537][ T29] audit: type=1326 audit(1728357751.142:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.550039][ T29] audit: type=1326 audit(1728357751.142:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.576507][ T29] audit: type=1326 audit(1728357751.142:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f73f4f7dff9 code=0x7ffc0000 [ 496.617008][ T2546] veth1_macvtap: left promiscuous mode [ 496.622964][ T2546] veth0_macvtap: left promiscuous mode [ 496.630207][ T2546] veth1_vlan: left promiscuous mode [ 496.636010][ T2546] veth0_vlan: left promiscuous mode [ 496.910807][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.939'. [ 497.318665][ T5246] Bluetooth: hci4: command tx timeout [ 497.823831][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 497.936587][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 497.949202][ T5246] Bluetooth: hci2: command tx timeout [ 499.388006][ T5246] Bluetooth: hci4: command tx timeout [ 499.514656][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.521888][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.549738][T10801] team0: Port device team_slave_1 added [ 499.564373][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 499.650081][T10801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.659457][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.691525][ T5303] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 499.749977][T10801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.770412][T10801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.777395][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.804806][T10801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.925878][ T5303] usb 1-1: Using ep0 maxpacket: 8 [ 499.958955][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 499.976585][ T5303] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 499.993777][ T5303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.028684][ T5246] Bluetooth: hci2: command tx timeout [ 500.068616][ T5303] usb 1-1: config 0 descriptor?? [ 500.173130][T10601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.265854][T10801] hsr_slave_0: entered promiscuous mode [ 500.349490][T10801] hsr_slave_1: entered promiscuous mode [ 500.375716][T10801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.402900][T10801] Cannot create hsr debugfs directory [ 500.462312][T10601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.478812][ T5303] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 500.910641][T10601] veth0_vlan: entered promiscuous mode [ 501.061241][T10844] chnl_net:caif_netlink_parms(): no params data found [ 501.191783][T10601] veth1_vlan: entered promiscuous mode [ 501.386361][ T6660] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.493153][ T5242] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 501.506440][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 501.516626][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 501.526459][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 501.536240][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 501.549575][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 501.722320][ T6660] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.797629][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.810535][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.905732][ T6660] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.946114][T10844] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.956282][T10844] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.976095][T10844] bridge_slave_0: entered allmulticast mode [ 501.986731][T10844] bridge_slave_0: entered promiscuous mode [ 502.085038][ T6660] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.111936][T10844] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.125242][ T5242] Bluetooth: hci2: command tx timeout [ 502.135366][T10844] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.153510][T10844] bridge_slave_1: entered allmulticast mode [ 502.162455][T10844] bridge_slave_1: entered promiscuous mode [ 502.312426][T10601] veth0_macvtap: entered promiscuous mode [ 502.350095][ T5288] usb 1-1: USB disconnect, device number 52 [ 502.362190][ T5288] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 502.390867][T10844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.429492][T10844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.470432][T10601] veth1_macvtap: entered promiscuous mode [ 502.530509][T10844] team0: Port device team_slave_0 added [ 502.599929][T10844] team0: Port device team_slave_1 added [ 502.635480][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.646591][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.657242][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.669049][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.679157][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.689767][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.699718][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.710430][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.720354][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.730998][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.740965][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.760898][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.773267][T10601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.809537][T10844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.816642][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.843188][T10844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.867267][ T6660] bridge_slave_1: left allmulticast mode [ 502.874780][ T6660] bridge_slave_1: left promiscuous mode [ 502.880870][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.890571][ T6660] bridge_slave_0: left allmulticast mode [ 502.896292][ T6660] bridge_slave_0: left promiscuous mode [ 502.902648][ T6660] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.395345][ T6660] team0: Port device bond0 removed [ 503.415281][ T6660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.432552][ T6660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.471273][ T6660] bond0 (unregistering): Released all slaves [ 503.519373][T10844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.526372][T10844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.567151][T10844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.626765][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.639758][ T5242] Bluetooth: hci0: command tx timeout [ 503.656860][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.668910][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.687976][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.706023][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.717322][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.734880][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.745570][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.755786][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.766394][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.776397][T10601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.786957][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.819909][T10601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.996669][T10601] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.047620][T10601] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.074485][T10601] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.146258][T10601] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.190010][ T5242] Bluetooth: hci2: command tx timeout [ 504.513292][T10844] hsr_slave_0: entered promiscuous mode [ 504.529149][T10844] hsr_slave_1: entered promiscuous mode [ 504.535623][T10844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.546966][T10844] Cannot create hsr debugfs directory [ 504.566564][T10801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 504.627082][ T6660] hsr_slave_0: left promiscuous mode [ 504.665003][ T6660] hsr_slave_1: left promiscuous mode [ 504.677596][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.696412][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.711123][ T6660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.733831][ T6660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.785527][ T6660] veth1_macvtap: left promiscuous mode [ 504.805997][ T6660] veth0_macvtap: left promiscuous mode [ 504.818441][ T6660] veth1_vlan: left promiscuous mode [ 504.834075][ T6660] veth0_vlan: left promiscuous mode [ 505.093809][T10996] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.950' sets config #0 [ 505.708318][ T5242] Bluetooth: hci0: command tx timeout [ 505.814321][ T1849] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 505.849545][ T6660] team0 (unregistering): Port device team_slave_1 removed [ 505.914768][ T6660] team0 (unregistering): Port device team_slave_0 removed [ 505.975505][ T1849] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 505.984856][ T1849] usb 1-1: config index 0 descriptor too short (expected 64797, got 132) [ 505.994120][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.005939][ T1849] usb 1-1: config index 1 descriptor too short (expected 64797, got 132) [ 506.014839][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.026721][ T1849] usb 1-1: config index 2 descriptor too short (expected 64797, got 132) [ 506.036391][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.049245][ T1849] usb 1-1: config index 3 descriptor too short (expected 64797, got 132) [ 506.058392][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.071926][ T1849] usb 1-1: config index 4 descriptor too short (expected 64797, got 132) [ 506.080797][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.092301][ T1849] usb 1-1: config index 5 descriptor too short (expected 64797, got 132) [ 506.101061][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.112862][ T1849] usb 1-1: config index 6 descriptor too short (expected 64797, got 132) [ 506.121690][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.134801][ T1849] usb 1-1: config index 7 descriptor too short (expected 64797, got 132) [ 506.143591][ T1849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.156992][ T1849] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 506.166340][ T1849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.175194][ T1849] usb 1-1: Product: syz [ 506.181190][ T1849] usb 1-1: Manufacturer: syz [ 506.185863][ T1849] usb 1-1: SerialNumber: syz [ 506.216882][ T1849] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 506.249242][ T5239] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 506.773613][T10801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.856352][T10801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.994591][T10961] chnl_net:caif_netlink_parms(): no params data found [ 507.011253][T10801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 507.131378][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.139900][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.307963][ T5239] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 507.315298][ T5239] ath9k_htc: Failed to initialize the device [ 507.334289][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.342046][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.351247][T10961] bridge_slave_0: entered allmulticast mode [ 507.362427][T10961] bridge_slave_0: entered promiscuous mode [ 507.373280][ T5239] usb 1-1: ath9k_htc: USB layer deinitialized [ 507.447560][T10844] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.478901][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.495459][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.503997][T10961] bridge_slave_1: entered allmulticast mode [ 507.520044][T10961] bridge_slave_1: entered promiscuous mode [ 507.545804][ T5719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.554857][ T5719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.611936][T10844] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.653575][T10961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.674546][T10961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.729999][T10844] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.789557][ T5242] Bluetooth: hci0: command tx timeout [ 507.938479][T10844] team0: Port device netdevsim0 removed [ 507.946652][T10844] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.004423][T10961] team0: Port device team_slave_0 added [ 508.039558][T10961] team0: Port device team_slave_1 added [ 508.126608][T10961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.143954][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.178644][T10961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.228930][T10961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.246245][T10961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.304971][T10961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.380501][T10961] hsr_slave_0: entered promiscuous mode [ 508.389981][T10961] hsr_slave_1: entered promiscuous mode [ 508.396757][T10961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.405894][T10961] Cannot create hsr debugfs directory [ 508.510869][ T1849] usb 1-1: USB disconnect, device number 53 [ 508.647222][T10844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.691690][T10844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.776466][T10844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.805981][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 509.494487][T10801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.519063][T10844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 509.614603][T10801] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.868626][ T5242] Bluetooth: hci0: command tx timeout [ 509.875592][ T6660] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.882809][ T6660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.914810][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.922016][ T6662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.049952][T10844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.145149][T10844] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.203237][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.210405][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.251295][T10801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.304234][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.311843][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.562156][T10801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.661323][T10844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 510.765141][T10961] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 510.817075][T10961] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 510.900191][T10961] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 510.968696][T10961] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 511.102338][T10801] veth0_vlan: entered promiscuous mode [ 511.120784][T10844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.156964][T10801] veth1_vlan: entered promiscuous mode [ 511.436469][T10844] veth0_vlan: entered promiscuous mode [ 511.507996][T10801] veth0_macvtap: entered promiscuous mode [ 511.550764][T10801] veth1_macvtap: entered promiscuous mode [ 511.626955][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.652750][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.673053][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.707491][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.749062][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.774831][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.815150][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.875317][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.894266][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.907677][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.945497][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.977772][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.009451][T10801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.090883][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.122611][T10844] veth1_vlan: entered promiscuous mode [ 512.238208][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.267963][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.275225][T11089] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.958'. [ 512.305867][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.347168][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.390289][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.414567][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.453748][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.482010][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.512403][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.537816][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.553512][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.567953][T10801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 512.589078][T10801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 512.644515][T10801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.712689][T10801] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.731929][T10801] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.750729][T10801] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.771303][T10801] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.816387][T10961] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.867363][T10844] veth0_macvtap: entered promiscuous mode [ 512.907111][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.914325][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.947982][ T5288] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 512.967258][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.974429][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.043809][T10844] veth1_macvtap: entered promiscuous mode [ 513.138754][ T5288] usb 1-1: too many configurations: 245, using maximum allowed: 8 [ 513.179473][ T5288] usb 1-1: config index 0 descriptor too short (expected 64797, got 132) [ 513.195819][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.212362][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.238662][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.251670][ T5288] usb 1-1: config index 1 descriptor too short (expected 64797, got 132) [ 513.267755][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.278167][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.299018][ T5288] usb 1-1: config index 2 descriptor too short (expected 64797, got 132) [ 513.309119][ T5242] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 513.317911][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.317938][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.317961][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.317980][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.317996][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.318015][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.318033][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.318053][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.318070][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.318090][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.318107][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.319872][T10844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.329334][ T5242] Bluetooth: hci3: Injecting HCI hardware error event [ 513.348637][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.349939][ T5288] usb 1-1: config index 3 descriptor too short (expected 64797, got 132) [ 513.362717][ T5242] Bluetooth: hci3: hardware error 0x00 [ 513.500429][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.521585][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.553081][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.572238][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.592844][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.625657][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.628311][ T5288] usb 1-1: config index 4 descriptor too short (expected 64797, got 132) [ 513.637202][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.654928][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.668240][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.678556][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.688232][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.702456][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.738428][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.739637][ T5288] usb 1-1: config index 5 descriptor too short (expected 64797, got 132) [ 513.768247][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.777778][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.791586][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.799321][ T5288] usb 1-1: config index 6 descriptor too short (expected 64797, got 132) [ 513.824903][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.824925][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.824949][T10844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.865372][ T5288] usb 1-1: config index 7 descriptor too short (expected 64797, got 132) [ 513.874292][T10844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.887879][ T5288] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.896850][T10844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.919205][ T5288] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.927133][T10961] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.949877][T10961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.960740][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.984938][T11098] netlink: 'syz.1.960': attribute type 21 has an invalid length. [ 513.997018][T11098] netlink: 128 bytes leftover after parsing attributes in process `syz.1.960'. [ 514.017383][ T5288] usb 1-1: Product: syz [ 514.023936][ T5288] usb 1-1: Manufacturer: syz [ 514.031451][ T5288] usb 1-1: SerialNumber: syz [ 514.043796][T10844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.048506][ T5288] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 514.063919][T10844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.072218][ T5292] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 514.076819][T10844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.100823][T10844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.222567][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.246699][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.264990][T11102] netlink: 'syz.1.961': attribute type 27 has an invalid length. [ 514.303744][T10961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.517661][ T6662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.530820][ T5719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.548990][ T5719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.563283][T10961] veth0_vlan: entered promiscuous mode [ 514.571512][ T6662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.601757][T10961] veth1_vlan: entered promiscuous mode [ 514.641714][T10961] veth0_macvtap: entered promiscuous mode [ 514.706022][T10961] veth1_macvtap: entered promiscuous mode [ 514.762558][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.785838][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.819384][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.880493][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.920556][T11111] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 514.935620][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.946996][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.962541][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.973696][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.988598][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.999339][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.009572][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.020986][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.031494][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.047305][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.088938][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.110608][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.157975][ T5292] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 515.184374][ T5292] ath9k_htc: Failed to initialize the device [ 515.197842][ T5239] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 515.209793][T10961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.233445][ T5292] usb 1-1: ath9k_htc: USB layer deinitialized [ 515.260557][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.274997][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.297246][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.336974][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.367915][ T5239] usb 5-1: Using ep0 maxpacket: 8 [ 515.400397][ T5239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 515.454629][ T5239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 515.514289][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.624189][ T5239] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 515.641567][ T5242] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 515.695462][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.743415][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.754692][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.767679][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.788659][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.806191][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.818699][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.835457][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.846275][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.863992][T10961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.902417][ T5239] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 515.908298][ T5292] usb 1-1: USB disconnect, device number 54 [ 515.934323][T10961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.953729][ T5239] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 515.968149][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.994730][T10961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.096563][T10961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.105969][T10961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.128319][T10961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.188678][T10961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.237862][ T5239] usb 5-1: GET_CAPABILITIES returned 0 [ 516.260104][ T5239] usbtmc 5-1:16.0: can't read capabilities [ 516.398028][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 516.426047][ T5719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.464669][ T5719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.567867][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 516.597620][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.633245][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.657488][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.668624][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.744055][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 516.782227][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.806501][ T8] usb 1-1: config 0 descriptor?? [ 516.849248][ T5242] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:200' [ 516.859488][ T5242] CPU: 1 UID: 0 PID: 5242 Comm: kworker/u9:4 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 516.870407][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 516.880493][ T5242] Workqueue: hci0 hci_rx_work [ 516.885239][ T5242] Call Trace: [ 516.888553][ T5242] [ 516.891498][ T5242] dump_stack_lvl+0x241/0x360 [ 516.896205][ T5242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.901451][ T5242] ? __pfx__printk+0x10/0x10 [ 516.906086][ T5242] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 516.911409][ T5242] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 516.916998][ T5242] sysfs_create_dir_ns+0x2ce/0x3a0 [ 516.922143][ T5242] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 516.927821][ T5242] kobject_add_internal+0x435/0x8d0 [ 516.933052][ T5242] kobject_add+0x152/0x220 [ 516.937505][ T5242] ? do_raw_spin_unlock+0x13c/0x8b0 [ 516.942738][ T5242] ? device_add+0x3e7/0xbf0 [ 516.947266][ T5242] ? __pfx_kobject_add+0x10/0x10 [ 516.952230][ T5242] ? _raw_spin_unlock+0x28/0x50 [ 516.957107][ T5242] ? get_device_parent+0x165/0x410 [ 516.962290][ T5242] device_add+0x4e5/0xbf0 [ 516.966666][ T5242] hci_conn_add_sysfs+0xe8/0x200 [ 516.971629][ T5242] hci_sync_conn_complete_evt+0x789/0xaa0 [ 516.977473][ T5242] hci_event_packet+0xac2/0x1540 [ 516.982463][ T5242] ? __pfx_hci_sync_conn_complete_evt+0x10/0x10 [ 516.988766][ T5242] ? __pfx_hci_event_packet+0x10/0x10 [ 516.994184][ T5242] ? unpair_device_complete+0xe0/0x230 [ 516.999690][ T5242] ? kcov_remote_start+0x97/0x7d0 [ 517.004767][ T5242] hci_rx_work+0x3fe/0xd80 [ 517.009240][ T5242] ? process_scheduled_works+0x976/0x1850 [ 517.014990][ T5242] process_scheduled_works+0xa63/0x1850 [ 517.020701][ T5242] ? __pfx_process_scheduled_works+0x10/0x10 [ 517.026743][ T5242] ? assign_work+0x364/0x3d0 [ 517.031384][ T5242] worker_thread+0x870/0xd30 [ 517.036044][ T5242] ? __kthread_parkme+0x169/0x1d0 [ 517.041125][ T5242] ? __pfx_worker_thread+0x10/0x10 [ 517.046280][ T5242] kthread+0x2f0/0x390 [ 517.050389][ T5242] ? __pfx_worker_thread+0x10/0x10 [ 517.055534][ T5242] ? __pfx_kthread+0x10/0x10 [ 517.060149][ T5242] ret_from_fork+0x4b/0x80 [ 517.064598][ T5242] ? __pfx_kthread+0x10/0x10 [ 517.069216][ T5242] ret_from_fork_asm+0x1a/0x30 [ 517.074048][ T5242] [ 517.077232][ C1] vkms_vblank_simulate: vblank timer overrun [ 517.092169][ T5242] kobject: kobject_add_internal failed for hci0:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 517.107857][ T5242] Bluetooth: hci0: failed to register connection device [ 517.297512][ T5288] usb 5-1: USB disconnect, device number 53 [ 517.456528][ T8] savu 0003:1E7D:2D5A.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 517.673801][T11120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.718780][T11120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.781997][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.965'. [ 518.176227][ T2546] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.312474][ T5242] Bluetooth: hci0: ACL packet for unknown connection handle 2207 [ 518.400642][ T2546] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.787363][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 518.787387][ T29] audit: type=1800 audit(1728357773.752:1353): pid=11143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.972" name="/" dev="fuse" ino=1 res=0 errno=0 [ 518.827210][T11146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 518.859108][ T2546] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.871886][ T29] audit: type=1800 audit(1728357773.842:1354): pid=11142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.972" name="/" dev="fuse" ino=1 res=0 errno=0 [ 518.891037][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.928393][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 518.942504][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 518.952091][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 518.960884][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 518.971288][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 518.980766][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 519.078800][ T2546] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.147873][ T5246] Bluetooth: hci0: command tx timeout [ 519.267389][ T8] usb 1-1: USB disconnect, device number 55 [ 519.490786][ T2546] bridge_slave_1: left allmulticast mode [ 519.496506][ T2546] bridge_slave_1: left promiscuous mode [ 519.513677][ T2546] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.524920][ T2546] bridge_slave_0: left allmulticast mode [ 519.531826][ T2546] bridge_slave_0: left promiscuous mode [ 519.538267][ T2546] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.727952][ T5292] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 519.899212][ T5292] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 519.938534][ T5292] usb 3-1: config index 0 descriptor too short (expected 64797, got 132) [ 519.947050][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.036840][ T5292] usb 3-1: config index 1 descriptor too short (expected 64797, got 132) [ 520.067853][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.082285][ T5292] usb 3-1: config index 2 descriptor too short (expected 64797, got 132) [ 520.091029][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.102670][ T5292] usb 3-1: config index 3 descriptor too short (expected 64797, got 132) [ 520.112234][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.142281][T11160] ptrace attach of "./syz-executor exec"[11163] was attempted by "./syz-executor exec"[11160] [ 520.164983][ T5292] usb 3-1: config index 4 descriptor too short (expected 64797, got 132) [ 520.173959][ T5288] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 520.197142][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.227822][ T5292] usb 3-1: config index 5 descriptor too short (expected 64797, got 132) [ 520.236632][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.275844][ T5292] usb 3-1: config index 6 descriptor too short (expected 64797, got 132) [ 520.308149][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.339292][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 520.346252][ T5292] usb 3-1: config index 7 descriptor too short (expected 64797, got 132) [ 520.357467][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 520.368915][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.381747][T11164] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 520.424490][ T5288] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 520.453286][ T5292] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 520.468189][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.520514][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.529991][ T5292] usb 3-1: Product: syz [ 520.535323][ T5288] usb 4-1: config 0 descriptor?? [ 520.546022][ T5292] usb 3-1: Manufacturer: syz [ 520.559585][ T5292] usb 3-1: SerialNumber: syz [ 520.674149][ T5292] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 520.705080][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 520.795711][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.856659][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.083008][ T5246] Bluetooth: hci3: command tx timeout [ 521.111221][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.178744][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.219290][ T5288] hid (null): invalid report_size 58537 [ 521.224966][ T5288] hid (null): unknown global tag 0xd [ 521.308812][ T5288] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 521.364884][ T5288] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 521.372723][ T5288] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 521.380415][ T5288] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 521.388884][ T5288] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 521.396308][ T5288] hid-generic 0003:0158:0100.0011: unexpected long global item [ 521.405475][ T5288] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 521.440027][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 521.799292][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 521.806573][ T9] ath9k_htc: Failed to initialize the device [ 521.814230][ T2546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.846644][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 521.853910][ T2546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.867283][ T2546] bond0 (unregistering): Released all slaves [ 522.290163][ T5303] IPVS: starting estimator thread 0... [ 522.369104][ T5288] usb 4-1: USB disconnect, device number 59 [ 522.438620][T11176] IPVS: using max 24 ests per chain, 57600 per kthread [ 522.578390][ T5303] usb 3-1: USB disconnect, device number 53 [ 522.944587][T11150] chnl_net:caif_netlink_parms(): no params data found [ 523.111773][ T2546] hsr_slave_0: left promiscuous mode [ 523.142304][ T2546] hsr_slave_1: left promiscuous mode [ 523.149029][ T5246] Bluetooth: hci3: command tx timeout [ 523.208179][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.252125][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.300083][ T2546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.323609][ T2546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.331486][ T5303] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 523.389017][ T2546] veth1_macvtap: left promiscuous mode [ 523.408164][ T2546] veth0_macvtap: left promiscuous mode [ 523.413846][ T2546] veth1_vlan: left promiscuous mode [ 523.452140][ T2546] veth0_vlan: left promiscuous mode [ 523.510037][ T5303] usb 3-1: Using ep0 maxpacket: 8 [ 523.533669][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 523.549451][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 523.560564][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 523.570481][ T5303] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 523.579376][ T5303] usb 3-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 523.591209][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 523.598451][ T5303] usb 3-1: config 0 has no interface number 0 [ 523.605359][ T5303] usb 3-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 523.617269][ T5303] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 523.630457][ T5303] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 523.642084][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 523.650068][ T5303] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.663698][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 523.671509][ T5303] usb 3-1: config 0 interface 52 has no altsetting 0 [ 523.719085][ T5303] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 523.745774][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 523.790910][ T5303] usb 3-1: Product: syz [ 523.795151][ T5303] usb 3-1: SerialNumber: syz [ 523.827170][ T5303] usb 3-1: config 0 descriptor?? [ 524.074044][ T5303] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input27 [ 525.252194][ T5246] Bluetooth: hci3: command tx timeout [ 525.709365][ T5246] Bluetooth: hci2: command tx timeout [ 525.934705][ T2546] team0 (unregistering): Port device team_slave_1 removed [ 526.205684][ T2546] team0 (unregistering): Port device team_slave_0 removed [ 526.261027][ T5303] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 526.449932][ T5303] usb 1-1: Using ep0 maxpacket: 32 [ 526.519625][ T5303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 526.589689][ T5303] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 526.654631][ T5303] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 526.716190][ T5303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.792965][ T5303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 526.863411][ T5303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.925208][ T5303] usb 1-1: Product: syz [ 526.939320][ T5303] usb 1-1: Manufacturer: syz [ 526.946795][ T5303] usb 1-1: SerialNumber: syz [ 527.308106][ T5246] Bluetooth: hci3: command tx timeout [ 527.807942][ T5246] Bluetooth: hci2: command tx timeout [ 528.857264][ T5288] usb 3-1: USB disconnect, device number 54 [ 529.457870][ T25] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 529.628730][ T25] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 529.638581][ T25] usb 3-1: config index 0 descriptor too short (expected 64797, got 132) [ 529.647118][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.658850][ T25] usb 3-1: config index 1 descriptor too short (expected 64797, got 132) [ 529.667401][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.679337][ T25] usb 3-1: config index 2 descriptor too short (expected 64797, got 132) [ 529.713992][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.752805][ T25] usb 3-1: config index 3 descriptor too short (expected 64797, got 132) [ 529.787454][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.854511][ T25] usb 3-1: config index 4 descriptor too short (expected 64797, got 132) [ 529.869415][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.879906][ T5246] Bluetooth: hci2: command tx timeout [ 529.910872][T11150] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.919718][ T25] usb 3-1: config index 5 descriptor too short (expected 64797, got 132) [ 529.928644][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.948014][ T25] usb 3-1: config index 6 descriptor too short (expected 64797, got 132) [ 529.957111][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.968884][T11150] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.980478][ T25] usb 3-1: config index 7 descriptor too short (expected 64797, got 132) [ 529.990332][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.003047][T11150] bridge_slave_0: entered allmulticast mode [ 530.038686][T11150] bridge_slave_0: entered promiscuous mode [ 530.048035][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 530.057661][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.065913][ T25] usb 3-1: Product: syz [ 530.083613][T11150] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.092850][ T25] usb 3-1: Manufacturer: syz [ 530.097514][ T25] usb 3-1: SerialNumber: syz [ 530.117923][T11150] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.190029][T11150] bridge_slave_1: entered allmulticast mode [ 530.215459][ T25] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 530.233018][ T5239] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 530.266422][T11150] bridge_slave_1: entered promiscuous mode [ 530.960725][T11150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.177839][T11224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 531.183910][T11224] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 531.194053][T11150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.221788][T11224] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.237647][T11224] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 531.311475][ T5239] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 531.355703][ T5239] ath9k_htc: Failed to initialize the device [ 531.390357][T11150] team0: Port device team_slave_0 added [ 531.402426][ T5239] usb 3-1: ath9k_htc: USB layer deinitialized [ 531.482032][T11150] team0: Port device team_slave_1 added [ 531.583229][ T6662] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.603834][T11208] chnl_net:caif_netlink_parms(): no params data found [ 531.657881][ T25] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 531.740690][ T6662] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.785760][T11150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.793991][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.820253][T11150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.833424][T11150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.840626][T11150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.866867][T11150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.880855][ T25] usb 4-1: config 0 has no interfaces? [ 531.893028][ T25] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 531.902350][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.911708][ T25] usb 4-1: Product: syz [ 531.918172][ T25] usb 4-1: Manufacturer: syz [ 531.922861][ T25] usb 4-1: SerialNumber: syz [ 531.948232][ T5242] Bluetooth: hci2: command tx timeout [ 531.949318][ T25] usb 4-1: config 0 descriptor?? [ 531.969269][T11224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.975306][T11224] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 532.035537][T11224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 532.054775][T11224] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 532.070391][ T5303] usb 1-1: 0:2 : does not exist [ 532.095843][ T5292] usb 3-1: USB disconnect, device number 55 [ 532.111233][ T6662] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.268541][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.277671][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.297406][T11208] bridge_slave_0: entered allmulticast mode [ 532.317038][T11208] bridge_slave_0: entered promiscuous mode [ 532.330476][ T8] usb 4-1: USB disconnect, device number 60 [ 532.354496][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.386264][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.403632][T11208] bridge_slave_1: entered allmulticast mode [ 532.417418][T11208] bridge_slave_1: entered promiscuous mode [ 532.473848][ T6662] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.527910][ T5292] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 532.621827][T11150] hsr_slave_0: entered promiscuous mode [ 532.645294][T11150] hsr_slave_1: entered promiscuous mode [ 532.672233][T11150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.687471][T11150] Cannot create hsr debugfs directory [ 532.707868][ T5292] usb 3-1: Using ep0 maxpacket: 8 [ 532.725306][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.729277][ T5292] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 532.788943][ T5292] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 532.794234][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.798596][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.867991][ T5292] usb 3-1: Product: syz [ 532.882505][ T5292] usb 3-1: Manufacturer: syz [ 532.887223][ T5292] usb 3-1: SerialNumber: syz [ 532.924081][ T5292] usb 3-1: config 0 descriptor?? [ 532.953853][ T5292] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 533.033537][T11208] team0: Port device team_slave_0 added [ 533.101418][T11208] team0: Port device team_slave_1 added [ 533.299554][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.320164][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.346191][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.387400][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.463084][ T6662] bridge_slave_1: left allmulticast mode [ 533.469296][ T6662] bridge_slave_1: left promiscuous mode [ 533.479257][ T5292] gspca_zc3xx: reg_w_i err -110 [ 533.484972][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.519461][ T6662] bridge_slave_0: left allmulticast mode [ 533.535747][ T6662] bridge_slave_0: left promiscuous mode [ 533.543256][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.592161][ T6662] bridge_slave_1: left allmulticast mode [ 533.602606][ T6662] bridge_slave_1: left promiscuous mode [ 533.621277][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.657799][ T6662] bridge_slave_0: left allmulticast mode [ 533.663592][ T6662] bridge_slave_0: left promiscuous mode [ 533.697036][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.108024][ T5292] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 534.137995][ T5292] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 535.158710][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'. [ 535.262819][ T5292] usb 3-1: USB disconnect, device number 56 [ 535.777961][ T5292] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 535.826907][ T6662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.839032][ T6662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.864751][ T6662] bond0 (unregistering): Released all slaves [ 535.943622][ T5292] usb 3-1: too many configurations: 245, using maximum allowed: 8 [ 535.968837][ T5292] usb 3-1: config index 0 descriptor too short (expected 64797, got 132) [ 535.977445][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.989150][ T5292] usb 3-1: config index 1 descriptor too short (expected 64797, got 132) [ 535.997648][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.067982][ T5292] usb 3-1: config index 2 descriptor too short (expected 64797, got 132) [ 536.076543][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.141735][ T5292] usb 3-1: config index 3 descriptor too short (expected 64797, got 132) [ 536.150714][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.180821][ T5292] usb 3-1: config index 4 descriptor too short (expected 64797, got 132) [ 536.190182][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.224263][ T5292] usb 3-1: config index 5 descriptor too short (expected 64797, got 132) [ 536.249435][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.282172][ T5292] usb 3-1: config index 6 descriptor too short (expected 64797, got 132) [ 536.291029][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.319260][ T5292] usb 3-1: config index 7 descriptor too short (expected 64797, got 132) [ 536.328047][ T5292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.368671][ T6662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.392907][ T5292] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 536.402360][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.410786][ T5292] usb 3-1: Product: syz [ 536.418082][ T6662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.426827][ T5292] usb 3-1: Manufacturer: syz [ 536.432291][ T5292] usb 3-1: SerialNumber: syz [ 536.448363][ T6662] bond0 (unregistering): Released all slaves [ 536.471580][ T5292] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 536.485940][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 536.524670][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.587355][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.646558][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.766231][T11296] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 537.060781][T11208] hsr_slave_0: entered promiscuous mode [ 537.104775][T11208] hsr_slave_1: entered promiscuous mode [ 537.139952][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.166278][T11208] Cannot create hsr debugfs directory [ 537.478159][ T5239] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 537.557394][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 537.597165][ T8] ath9k_htc: Failed to initialize the device [ 537.658989][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 537.672393][ T5239] usb 4-1: Using ep0 maxpacket: 8 [ 537.705881][ T5239] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 537.715198][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.737566][ T5239] usb 4-1: config 0 descriptor?? [ 537.751242][ T5239] ums-jumpshot 4-1:0.0: USB Mass Storage device detected [ 537.805763][ T5239] ums-jumpshot 4-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 538.194099][ T6662] hsr_slave_0: left promiscuous mode [ 538.206303][ T6662] hsr_slave_1: left promiscuous mode [ 538.223733][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.241333][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.260713][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.279123][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.306157][ T6662] hsr_slave_0: left promiscuous mode [ 538.321738][ T6662] hsr_slave_1: left promiscuous mode [ 538.336944][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.351405][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.365067][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.381612][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.386773][ T5288] usb 3-1: USB disconnect, device number 57 [ 538.480725][ T6662] veth1_macvtap: left promiscuous mode [ 538.489174][ T6662] veth0_macvtap: left promiscuous mode [ 538.494811][ T6662] veth1_vlan: left promiscuous mode [ 538.505310][ T6662] veth0_vlan: left promiscuous mode [ 538.519047][ T6662] veth1_macvtap: left promiscuous mode [ 538.535545][ T6662] veth0_macvtap: left promiscuous mode [ 538.541388][ T6662] veth1_vlan: left promiscuous mode [ 538.562106][ T6662] veth0_vlan: left promiscuous mode [ 538.615840][T11334] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 540.170865][ T8] usb 4-1: USB disconnect, device number 61 [ 540.259274][ T6662] team0 (unregistering): Port device team_slave_1 removed [ 540.504603][ T6662] team0 (unregistering): Port device team_slave_0 removed [ 542.195035][ T6662] team0 (unregistering): Port device team_slave_1 removed [ 542.257160][ T6662] team0 (unregistering): Port device team_slave_0 removed [ 542.977468][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'. [ 543.182912][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 543.192210][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'. [ 543.570864][T11150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.584876][ T29] audit: type=1326 audit(1728357798.552:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.611480][T11150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.643400][T11150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 543.668217][ T5288] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 543.673248][ T29] audit: type=1326 audit(1728357798.552:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.751128][ T29] audit: type=1326 audit(1728357798.552:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.795571][T11150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 543.819170][ T29] audit: type=1326 audit(1728357798.552:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.870059][ T5288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.872237][ T29] audit: type=1326 audit(1728357798.582:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.887769][ T5288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 543.914272][ T29] audit: type=1326 audit(1728357798.582:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.974478][ T29] audit: type=1326 audit(1728357798.582:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 543.998960][ T5288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 544.038694][ T5288] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 544.072568][ T29] audit: type=1326 audit(1728357798.592:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 544.109345][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.132639][T11366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.142110][ T5288] hub 4-1:1.0: bad descriptor, ignoring hub [ 544.151195][ T5288] hub 4-1:1.0: probe with driver hub failed with error -5 [ 544.179909][ T29] audit: type=1326 audit(1728357798.592:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 544.211175][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 544.239905][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 544.252854][ T5288] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 544.261248][ T29] audit: type=1326 audit(1728357798.592:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.2.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 544.286421][ T5288] cdc_wdm 4-1:1.0: Unknown control protocol [ 544.293434][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.406672][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.555213][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 544.562206][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 544.568730][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 544.575385][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 544.607445][T11150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.674020][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.762563][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.806615][T11150] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.846950][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.854159][ T5719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.958636][ T6658] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.965814][ T6658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.991047][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 544.997723][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.004340][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.011008][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.017395][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.024054][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.030437][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.037066][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.043550][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.050154][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.057379][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.064003][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.070444][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.077047][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.083812][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 545.090419][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 545.164412][T11208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 545.184709][T11208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 545.220155][T11208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 545.280895][T11208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 545.417423][T11395] netlink: 'syz.3.1012': attribute type 30 has an invalid length. [ 545.426341][T11150] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.448037][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1017'. [ 545.664264][T11150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.804909][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.917913][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.935192][T11150] veth0_vlan: entered promiscuous mode [ 545.944134][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.944190][ T6662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.021432][T11150] veth1_vlan: entered promiscuous mode [ 546.030220][ T6660] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.030286][ T6660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.087557][T11150] veth0_macvtap: entered promiscuous mode [ 546.253898][T11150] veth1_macvtap: entered promiscuous mode [ 546.439560][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.439592][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.439609][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.439627][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.439643][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.439669][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.442394][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.936708][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.971929][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.023338][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.044900][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.063200][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.086918][T11150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.134907][T11418] netlink: 'syz.2.1019': attribute type 4 has an invalid length. [ 547.247998][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.278322][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.290417][ T5239] usb 4-1: USB disconnect, device number 62 [ 547.302109][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.323847][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.357834][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.374720][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.386090][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.397220][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.407785][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.419361][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.444428][T11150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.467752][T11150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.489601][T11150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.510555][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.526092][T11150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.549023][T11150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.567834][T11150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.578201][T11150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.818039][ T5239] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 547.824284][T11208] veth0_vlan: entered promiscuous mode [ 547.922173][T11208] veth1_vlan: entered promiscuous mode [ 548.045094][ T5239] usb 4-1: Using ep0 maxpacket: 32 [ 548.070817][ T6658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.094181][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.123669][ T6658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.150714][ T5239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.180629][ T5239] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 548.203747][ T5239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.240661][ T5239] usb 4-1: config 0 descriptor?? [ 548.268416][ T6658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.276311][ T6658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.334484][T11208] veth0_macvtap: entered promiscuous mode [ 548.346247][T11208] veth1_macvtap: entered promiscuous mode [ 548.363976][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.374589][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.384576][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.395150][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.405087][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.415623][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.425755][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.436533][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.446497][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.457063][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.467038][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.477594][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.487562][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.498101][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.510000][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.521757][ T5239] hub 4-1:0.0: USB hub found [ 548.577988][ T5239] hub 4-1:0.0: 1 port detected [ 548.585276][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.596071][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.606029][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.616568][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.626671][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.637231][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.647340][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.657924][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.668203][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.679166][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.690508][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.701095][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.711030][T11208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.721565][T11208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.732946][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.745066][T11208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.754108][T11208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.767908][T11208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.776671][T11208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.802530][ T5239] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 548.809159][ T5239] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 549.000187][ T2546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.049090][ T2546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.128854][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.255926][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.348152][ T5719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.390028][ T5719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.884365][ T5239] usbhid 4-1:0.0: can't add hid device: -71 [ 550.894098][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'. [ 550.922165][ T5239] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.968588][ T5239] usb 4-1: USB disconnect, device number 63 [ 551.928383][T11494] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 552.373754][T11510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.499664][T11510] team_slave_0: entered promiscuous mode [ 552.741514][T11523] trusted_key: encrypted_key: insufficient parameters specified [ 552.752383][T11510] team0: Port device team_slave_0 removed [ 552.781078][ T8] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 552.816572][T11523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.851144][T11523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.897992][ T5288] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 552.949623][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 553.049176][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.070338][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.097626][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 553.114225][ T5288] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 553.132862][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.142916][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 553.159063][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 553.167841][ T8] usb 5-1: Manufacturer: syz [ 553.200048][ T5288] usb 4-1: config 0 descriptor?? [ 553.216102][ T8] usb 5-1: config 0 descriptor?? [ 553.254304][T11528] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.263283][T11528] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.272305][T11528] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.281135][T11528] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.443260][ T5288] usb 4-1: can't set first interface for hiFace device. [ 553.474218][ T5288] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 553.520651][ T5288] usb 4-1: USB disconnect, device number 64 [ 553.661203][ T8] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 553.670889][ T8] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 553.698446][ T8] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 554.127556][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 554.127577][ T29] audit: type=1326 audit(1728357809.092:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.191372][ T29] audit: type=1326 audit(1728357809.142:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.242706][ T29] audit: type=1326 audit(1728357809.142:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.306627][ T29] audit: type=1326 audit(1728357809.142:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.370976][ T29] audit: type=1326 audit(1728357809.142:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.431568][ T29] audit: type=1326 audit(1728357809.142:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.467826][ T5239] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 554.488701][T11538] usb usb7: usbfs: process 11538 (syz.4.1029) did not claim interface 2 before use [ 554.521689][ T29] audit: type=1326 audit(1728357809.142:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.556959][T11538] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 554.586304][ T29] audit: type=1326 audit(1728357809.142:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.587626][T11538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.618011][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 554.654818][T11538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.666360][ T5239] usb 3-1: Using ep0 maxpacket: 16 [ 554.703831][ T29] audit: type=1326 audit(1728357809.142:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.715628][ T5239] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.757454][ T5239] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 554.770552][ T5239] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 554.827847][ T5239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.837155][ T29] audit: type=1326 audit(1728357809.142:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11540 comm="syz.2.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e37dff9 code=0x7ffc0000 [ 554.840100][ T5239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 554.868138][ T5239] usb 3-1: SerialNumber: syz [ 554.910392][ T25] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 554.922604][ T25] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.937604][T11541] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 554.946365][ T5239] cdc_acm 3-1:1.0: skipping garbage [ 554.957853][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 554.969081][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.117966][ T5288] usb 5-1: reset high-speed USB device number 54 using dummy_hcd [ 555.273292][T11546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1033'. [ 555.316126][T11546] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 555.386720][T11561] Option ' _'B+.wG˚aRGyCLrNnŅ9ѲV󋌫' to dns_resolver key: bad/missing value [ 555.690223][ T25] usb 2-1: string descriptor 0 read error: -71 [ 555.720926][ T25] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 555.780816][ T25] usb 2-1: USB disconnect, device number 46 [ 555.931901][T11565] bridge0: port 3(erspan0) entered blocking state [ 555.963015][T11565] bridge0: port 3(erspan0) entered disabled state [ 556.024151][T11565] erspan0: entered allmulticast mode [ 556.040126][T11565] erspan0: entered promiscuous mode [ 556.040734][T11565] bridge0: port 3(erspan0) entered blocking state [ 556.040881][T11565] bridge0: port 3(erspan0) entered forwarding state [ 556.402056][ T5239] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 556.457834][ T5239] usb 3-1: USB disconnect, device number 58 [ 556.477870][T11574] program syz.0.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 556.898170][ T5292] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 556.915879][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 557.088982][ T5292] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.103312][ T5292] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.115425][ T8] usb 5-1: USB disconnect, device number 54 [ 557.149682][ T5292] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.209529][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.240994][T11578] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 557.296223][ T5292] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.837934][ T1849] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 558.037908][ T1849] usb 4-1: Using ep0 maxpacket: 16 [ 558.089647][ T1849] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 559.796514][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.297711][ C1] sched: DL replenish lagged too much [ 569.452721][ T1849] usb 4-1: config 0 descriptor?? [ 603.454066][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.469314][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 702.999080][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.014702][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.674621][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 703.690516][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 706.137654][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 706.144685][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11592/1:b..l P11593/1:b..l [ 706.154656][ C1] rcu: (detected by 1, t=10502 jiffies, g=83801, q=1969024 ncpus=2) [ 706.162774][ C1] task:syz.4.1038 state:R running task stack:23792 pid:11593 tgid:11575 ppid:11208 flags:0x00004006 [ 706.176347][ C1] Call Trace: [ 706.179673][ C1] [ 706.182732][ C1] __schedule+0x1895/0x4b30 [ 706.187317][ C1] ? __pfx___schedule+0x10/0x10 [ 706.192233][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 706.198283][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 706.203636][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 706.208810][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 706.214595][ C1] ? __pfx_handle_pte_fault+0x10/0x10 [ 706.220031][ C1] irqentry_exit+0x5e/0x90 [ 706.224507][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.230568][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 706.236786][ C1] Code: c0 d7 03 00 65 8b 15 40 f1 6e 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 706.256497][ C1] RSP: 0018:ffffc90004bf74b8 EFLAGS: 00000246 [ 706.262647][ C1] RAX: ffffffff81e3bd06 RBX: 0000000000000001 RCX: ffff88802e3c5a00 [ 706.270765][ C1] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 706.278793][ C1] RBP: ffffc90004bf7590 R08: ffffffff81e3bcf9 R09: 1ffffffff2858b00 [ 706.286824][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: ffff88802e3c5a00 [ 706.294846][ C1] R13: ffffffff81e3bc14 R14: dffffc0000000000 R15: 1ffff9200097ee9c [ 706.302870][ C1] ? count_memcg_event_mm+0x94/0x420 [ 706.308223][ C1] ? count_memcg_event_mm+0x179/0x420 [ 706.313653][ C1] ? count_memcg_event_mm+0x186/0x420 [ 706.319089][ C1] count_memcg_event_mm+0x186/0x420 [ 706.324343][ C1] ? count_memcg_event_mm+0x94/0x420 [ 706.329683][ C1] ? __pfx_count_memcg_event_mm+0x10/0x10 [ 706.335461][ C1] ? __pfx_lock_release+0x10/0x10 [ 706.340559][ C1] handle_mm_fault+0x16f4/0x1bb0 [ 706.345574][ C1] ? mt_find+0x2a9/0x920 [ 706.349896][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 706.355336][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 706.361726][ C1] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 706.367069][ C1] exc_page_fault+0x2b9/0x8c0 [ 706.371808][ C1] asm_exc_page_fault+0x26/0x30 [ 706.376714][ C1] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 706.382565][ C1] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 706.402226][ C1] RSP: 0018:ffffc90004bf7930 EFLAGS: 00050206 [ 706.408351][ C1] RAX: ffffffff84bc1c01 RBX: 000000002006f038 RCX: 0000000000000038 [ 706.416368][ C1] RDX: 0000000000000001 RSI: 000000002006f000 RDI: ffffc90004bf79c0 [ 706.424383][ C1] RBP: ffffc90004bf7a70 R08: ffffc90004bf79f7 R09: 1ffff9200097ef3e [ 706.432397][ C1] R10: dffffc0000000000 R11: fffff5200097ef3f R12: 000000002006f000 [ 706.440412][ C1] R13: dffffc0000000000 R14: ffffc90004bf79c0 R15: 0000000000000038 [ 706.448439][ C1] ? _copy_from_user+0x31/0xe0 [ 706.453269][ C1] _copy_from_user+0x8c/0xe0 [ 706.457917][ C1] copy_msghdr_from_user+0xae/0x680 [ 706.463171][ C1] ? __pfx___might_resched+0x10/0x10 [ 706.468516][ C1] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 706.474387][ C1] ? rcu_is_watching+0x15/0xb0 [ 706.479203][ C1] ? __might_fault+0xaa/0x120 [ 706.483952][ C1] do_recvmmsg+0x3f9/0xad0 [ 706.488430][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 706.493413][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 706.498774][ C1] ? futex_wait+0x285/0x360 [ 706.503346][ C1] ? __pfx_futex_wait+0x10/0x10 [ 706.508275][ C1] ? __pfx_do_futex+0x10/0x10 [ 706.513013][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 706.518102][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 706.523711][ C1] ? do_syscall_64+0x100/0x230 [ 706.528529][ C1] ? do_syscall_64+0xb6/0x230 [ 706.533254][ C1] do_syscall_64+0xf3/0x230 [ 706.537808][ C1] ? clear_bhb_loop+0x35/0x90 [ 706.542555][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.548505][ C1] RIP: 0033:0x7f1a1eb7dff9 [ 706.552959][ C1] RSP: 002b:00007f1a1f9ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 706.561421][ C1] RAX: ffffffffffffffda RBX: 00007f1a1ed36058 RCX: 00007f1a1eb7dff9 [ 706.569542][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000007 [ 706.577561][ C1] RBP: 00007f1a1ebf0296 R08: 0000000000000000 R09: 0000000000000000 [ 706.585581][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 706.593605][ C1] R13: 0000000000000000 R14: 00007f1a1ed36058 R15: 00007f1a1ee5fa28 [ 706.601639][ C1] [ 706.604698][ C1] task:syz.0.1039 state:R running task stack:24656 pid:11592 tgid:11586 ppid:9760 flags:0x00004006 [ 706.616516][ C1] Call Trace: [ 706.619832][ C1] [ 706.622803][ C1] __schedule+0x1895/0x4b30 [ 706.627384][ C1] ? __pfx___schedule+0x10/0x10 [ 706.632298][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 706.638347][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 706.643692][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 706.648947][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 706.654734][ C1] irqentry_exit+0x5e/0x90 [ 706.659236][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 706.665291][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 706.670640][ C1] Code: 2b 00 74 08 4c 89 f7 e8 ba 40 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 706.690309][ C1] RSP: 0018:ffffc90004a0ecc0 EFLAGS: 00000206 [ 706.696429][ C1] RAX: 0000000000000001 RBX: 1ffff92000941da4 RCX: 76a7f04e673aed00 [ 706.704449][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c60fba0 [ 706.712478][ C1] RBP: ffffc90004a0ee08 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 706.720500][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: 1ffff92000941da0 [ 706.728521][ C1] R13: dffffc0000000000 R14: ffffc90004a0ed20 R15: 0000000000000246 [ 706.736566][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 706.741677][ C1] ? free_unref_page+0x6aa/0xf20 [ 706.746679][ C1] ? page_ext_get+0x20/0x2a0 [ 706.751319][ C1] page_ext_get+0x3d/0x2a0 [ 706.755787][ C1] ? page_ext_get+0x20/0x2a0 [ 706.760428][ C1] __reset_page_owner+0x30/0x430 [ 706.765426][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 706.770715][ C1] free_unref_page+0xcfb/0xf20 [ 706.775552][ C1] __put_partials+0xeb/0x130 [ 706.780205][ C1] put_cpu_partial+0x17c/0x250 [ 706.785015][ C1] ? put_cpu_partial+0x70/0x250 [ 706.789913][ C1] __slab_free+0x2ea/0x3d0 [ 706.794380][ C1] ? __phys_addr+0xba/0x170 [ 706.798931][ C1] qlist_free_all+0x9a/0x140 [ 706.803568][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 706.809078][ C1] __kasan_slab_alloc+0x23/0x80 [ 706.813973][ C1] ? kmalloc_reserve+0xa8/0x2a0 [ 706.818878][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 706.824831][ C1] kmalloc_reserve+0xa8/0x2a0 [ 706.829557][ C1] __alloc_skb+0x1f3/0x440 [ 706.834016][ C1] ? mark_lock+0x9a/0x360 [ 706.838396][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 706.843405][ C1] __ip6_append_data+0x2bd1/0x40a0 [ 706.848598][ C1] ? ip6_mtu+0x81/0x3f0 [ 706.852814][ C1] ? __pfx_raw6_getfrag+0x10/0x10 [ 706.857901][ C1] ? __pfx___ip6_append_data+0x10/0x10 [ 706.863413][ C1] ? ip6_setup_cork+0x9fd/0xfb0 [ 706.868334][ C1] ip6_append_data+0x264/0x3a0 [ 706.873175][ C1] ? __pfx_raw6_getfrag+0x10/0x10 [ 706.878250][ C1] rawv6_sendmsg+0x18f1/0x23c0 [ 706.883087][ C1] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 706.888263][ C1] ? aa_sk_perm+0x96d/0xab0 [ 706.892824][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 706.897722][ C1] ? inet_sendmsg+0x330/0x390 [ 706.902469][ C1] __sock_sendmsg+0x1a6/0x270 [ 706.907201][ C1] ____sys_sendmsg+0x52a/0x7e0 [ 706.912020][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 706.917357][ C1] ? rcu_is_watching+0x15/0xb0 [ 706.922176][ C1] ? __might_fault+0xaa/0x120 [ 706.926910][ C1] __sys_sendmmsg+0x3ab/0x730 [ 706.931648][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 706.936925][ C1] ? futex_hash+0x1e/0x1f0 [ 706.941392][ C1] ? futex_wait+0x285/0x360 [ 706.945955][ C1] ? __pfx_futex_wait+0x10/0x10 [ 706.950867][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 706.956122][ C1] ? __fget_files+0x29/0x470 [ 706.960765][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 706.966188][ C1] ? __pfx_lock_release+0x10/0x10 [ 706.971265][ C1] ? ip6_datagram_connect_v6_only+0x6d/0xa0 [ 706.977221][ C1] ? do_futex+0x33b/0x560 [ 706.981609][ C1] ? __fget_files+0x3f3/0x470 [ 706.986334][ C1] ? __sys_connect+0x165/0x300 [ 706.991172][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 706.997215][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.003604][ C1] ? do_syscall_64+0x100/0x230 [ 707.008419][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 707.013336][ C1] do_syscall_64+0xf3/0x230 [ 707.017883][ C1] ? clear_bhb_loop+0x35/0x90 [ 707.022604][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.028549][ C1] RIP: 0033:0x7f73f4f7dff9 [ 707.033006][ C1] RSP: 002b:00007f73f5d31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 707.041483][ C1] RAX: ffffffffffffffda RBX: 00007f73f5136130 RCX: 00007f73f4f7dff9 [ 707.049512][ C1] RDX: 040000000000039e RSI: 0000000020001700 RDI: 0000000000000009 [ 707.057540][ C1] RBP: 00007f73f4ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 707.065563][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.073585][ C1] R13: 0000000000000000 R14: 00007f73f5136130 R15: 00007f73f525fa28 [ 707.081628][ C1] [ 707.084700][ C1] rcu: rcu_preempt kthread starved for 470 jiffies! g83801 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 707.095770][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 707.105785][ C1] rcu: RCU grace-period kthread stack dump: [ 707.111710][ C1] task:rcu_preempt state:R running task stack:25552 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 707.123533][ C1] Call Trace: [ 707.126847][ C1] [ 707.129819][ C1] __schedule+0x1895/0x4b30 [ 707.134400][ C1] ? __pfx___schedule+0x10/0x10 [ 707.139309][ C1] ? __pfx_lock_release+0x10/0x10 [ 707.144381][ C1] ? __asan_memset+0x23/0x50 [ 707.149030][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 707.154888][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.161275][ C1] ? schedule+0x90/0x320 [ 707.165566][ C1] schedule+0x14b/0x320 [ 707.169776][ C1] schedule_timeout+0x1be/0x310 [ 707.174675][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 707.180100][ C1] ? __pfx_process_timeout+0x10/0x10 [ 707.185462][ C1] ? prepare_to_swait_event+0x330/0x350 [ 707.191066][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 707.195970][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 707.201226][ C1] ? rcu_gp_init+0x1256/0x1630 [ 707.206038][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 707.211016][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 707.217214][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 707.222552][ C1] ? finish_swait+0xd4/0x1e0 [ 707.227194][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 707.231829][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.237068][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.243021][ C1] ? __kthread_parkme+0x169/0x1d0 [ 707.248105][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.253343][ C1] kthread+0x2f0/0x390 [ 707.257462][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 707.262705][ C1] ? __pfx_kthread+0x10/0x10 [ 707.267347][ C1] ret_from_fork+0x4b/0x80 [ 707.271826][ C1] ? __pfx_kthread+0x10/0x10 [ 707.276472][ C1] ret_from_fork_asm+0x1a/0x30 [ 707.281307][ C1] [ 707.284366][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 707.290726][ C1] Sending NMI from CPU 1 to CPUs 0: [ 707.295982][ C0] NMI backtrace for cpu 0 [ 707.295998][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 707.296020][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 707.296033][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 707.296063][ C0] RIP: 0010:__cookie_v4_init_sequence+0x10f/0x520 [ 707.296097][ C0] Code: 31 c0 eb 22 e8 32 07 4b f7 b8 03 00 00 00 eb 16 e8 26 07 4b f7 b8 02 00 00 00 eb 0a e8 1a 07 4b f7 b8 01 00 00 00 89 44 24 04 <89> c0 48 8d 9c 00 00 84 19 8d 48 89 d8 48 c1 e8 03 48 ba 00 00 00 [ 707.296113][ C0] RSP: 0018:ffffc90000006f80 EFLAGS: 00000246 [ 707.296129][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88801ce80000 [ 707.296144][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000514 [ 707.296157][ C0] RBP: ffffc90000007050 R08: ffffffff8a49df28 R09: 1ffff110458ab75c [ 707.296177][ C0] R10: dffffc0000000000 R11: ffffed10458ab75d R12: ffff88822c559954 [ 707.296192][ C0] R13: ffffc90000007100 R14: 1ffff92000000e20 R15: ffff88822c559940 [ 707.296207][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 707.296224][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.296238][ C0] CR2: 00007ff4f53ff924 CR3: 0000000079ca2000 CR4: 00000000003526f0 [ 707.296256][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 707.296268][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 707.296281][ C0] Call Trace: [ 707.296288][ C0] [ 707.296296][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 707.296319][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 707.296350][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 707.296372][ C0] ? nmi_handle+0x2a/0x5a0 [ 707.296400][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 707.296427][ C0] ? nmi_handle+0x14f/0x5a0 [ 707.296447][ C0] ? nmi_handle+0x2a/0x5a0 [ 707.296468][ C0] ? __cookie_v4_init_sequence+0x10f/0x520 [ 707.296497][ C0] ? default_do_nmi+0x63/0x160 [ 707.296521][ C0] ? exc_nmi+0x123/0x1f0 [ 707.296543][ C0] ? end_repeat_nmi+0xf/0x53 [ 707.296564][ C0] ? __cookie_v4_init_sequence+0xd8/0x520 [ 707.296595][ C0] ? __cookie_v4_init_sequence+0x10f/0x520 [ 707.296624][ C0] ? __cookie_v4_init_sequence+0x10f/0x520 [ 707.296655][ C0] ? __cookie_v4_init_sequence+0x10f/0x520 [ 707.296685][ C0] [ 707.296692][ C0] [ 707.296701][ C0] ? __pfx___cookie_v4_init_sequence+0x10/0x10 [ 707.296731][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 707.296751][ C0] ? skb_put+0x114/0x1f0 [ 707.296771][ C0] synproxy_send_client_synack+0x534/0xf30 [ 707.296804][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 707.296832][ C0] ? synproxy_pernet+0x45/0x270 [ 707.296862][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 707.296892][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 707.296922][ C0] ? nf_ip_checksum+0x13a/0x500 [ 707.296952][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 707.296983][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 707.297014][ C0] ? __pfx_validate_chain+0x10/0x10 [ 707.297035][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.297068][ C0] nft_do_chain+0x4ad/0x1da0 [ 707.297103][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 707.297130][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 707.297175][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 707.297198][ C0] nft_do_chain_inet+0x418/0x6b0 [ 707.297227][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 707.297253][ C0] ? ipt_do_table+0x312/0x1860 [ 707.297288][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 707.297315][ C0] nf_hook_slow+0xc3/0x220 [ 707.297339][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 707.297361][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 707.297383][ C0] NF_HOOK+0x29e/0x450 [ 707.297405][ C0] ? NF_HOOK+0x9a/0x450 [ 707.297426][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 707.297447][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 707.297473][ C0] ? ip_rcv_finish+0x406/0x560 [ 707.297494][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 707.297515][ C0] NF_HOOK+0x3a4/0x450 [ 707.297535][ C0] ? __lock_acquire+0x1384/0x2050 [ 707.297564][ C0] ? NF_HOOK+0x9a/0x450 [ 707.297584][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 707.297607][ C0] ? ip_rcv_core+0x801/0xd10 [ 707.297629][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 707.297654][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 707.297675][ C0] __netif_receive_skb+0x2bf/0x650 [ 707.297699][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 707.297727][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 707.297749][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.297778][ C0] ? __pfx_lock_release+0x10/0x10 [ 707.297806][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 707.297838][ C0] process_backlog+0x662/0x15b0 [ 707.297865][ C0] ? process_backlog+0x33b/0x15b0 [ 707.297893][ C0] ? __pfx_process_backlog+0x10/0x10 [ 707.297917][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 707.297947][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.297977][ C0] __napi_poll+0xcb/0x490 [ 707.298002][ C0] net_rx_action+0x89b/0x1240 [ 707.298025][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 707.298062][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 707.298089][ C0] ? rcu_is_watching+0x15/0xb0 [ 707.298117][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 707.298151][ C0] handle_softirqs+0x2c5/0x980 [ 707.298183][ C0] ? do_softirq+0x11b/0x1e0 [ 707.298209][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 707.298238][ C0] do_softirq+0x11b/0x1e0 [ 707.298262][ C0] [ 707.298268][ C0] [ 707.298276][ C0] ? __pfx_do_softirq+0x10/0x10 [ 707.298301][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 707.298331][ C0] ? rcu_is_watching+0x15/0xb0 [ 707.298352][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 707.298378][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 707.298401][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 707.298428][ C0] ? neigh_destroy+0x423/0x580 [ 707.298454][ C0] neigh_periodic_work+0xb35/0xd50 [ 707.298481][ C0] ? process_scheduled_works+0x976/0x1850 [ 707.298508][ C0] process_scheduled_works+0xa63/0x1850 [ 707.298548][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 707.298579][ C0] ? assign_work+0x364/0x3d0 [ 707.298607][ C0] worker_thread+0x870/0xd30 [ 707.298637][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 707.298666][ C0] ? __kthread_parkme+0x169/0x1d0 [ 707.298695][ C0] ? __pfx_worker_thread+0x10/0x10 [ 707.298722][ C0] kthread+0x2f0/0x390 [ 707.298739][ C0] ? __pfx_worker_thread+0x10/0x10 [ 707.298766][ C0] ? __pfx_kthread+0x10/0x10 [ 707.298784][ C0] ret_from_fork+0x4b/0x80 [ 707.298811][ C0] ? __pfx_kthread+0x10/0x10 [ 707.298830][ C0] ret_from_fork_asm+0x1a/0x30 [ 707.298864][ C0] [ 715.230104][ T1849] usb 4-1: can't set config #0, error -71