last executing test programs: 8.23797005s ago: executing program 3 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x5385, 0x1000000000000) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)={0x43c, 0x3f3, 0x0, 0x70bd2b, 0x25dfdbff, {0x1, 0x1, 0x2, [0x6, 0xd92, 0x7, 0x0, 0x9, 0x0, 0x8, 0x0, 0x6, 0x8, 0x9, 0x1, 0x0, 0x6, 0x101, 0x0, 0x6c74, 0xfffffffc, 0x0, 0x474, 0x0, 0xfff, 0x1, 0x0, 0x1, 0x0, 0x101, 0x9, 0x200, 0x4, 0x5e99, 0x2, 0x0, 0x0, 0xa2ec, 0x6, 0x0, 0xfa67, 0x3, 0x1f, 0x7, 0x81, 0x86c, 0x0, 0xfff, 0x0, 0x7, 0x6f, 0x0, 0x20, 0x2, 0x6, 0x0, 0x401, 0x6c, 0x61b1, 0x0, 0x5d, 0x81, 0x0, 0x0, 0x0, 0xfffffffa], [0x8, 0x7, 0x101, 0xfffffffb, 0x0, 0x1f, 0x4, 0x1, 0x8001, 0xa45, 0xf49, 0xfff, 0x0, 0x0, 0x7, 0x7, 0x0, 0x9, 0x9, 0x5, 0x4, 0xa9d, 0x80000001, 0x7, 0x4a4, 0xfff, 0xfffffffe, 0x0, 0x3, 0x0, 0x18000, 0x2, 0x1, 0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x3, 0x7f, 0x4, 0x0, 0x81, 0x0, 0x6, 0x1, 0x6, 0x0, 0x0, 0x0, 0x2, 0x20, 0x8, 0x7, 0x7fff, 0x20, 0xd0ce, 0x200, 0xa2, 0x8, 0x1], [0x1, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0xb74, 0xc, 0x7, 0x7, 0x9, 0x2c, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5, 0x9, 0xfffffff8, 0x4, 0x6, 0x5, 0x0, 0x72, 0x37ebb82c, 0x6, 0x0, 0x8, 0x9, 0x200, 0x6, 0x80, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x50, 0xffff, 0x7fffffff, 0xaf2, 0x1f, 0x1000, 0x0, 0x8001, 0x0, 0x1dc9fbb, 0x800, 0x0, 0x605c, 0x7, 0x0, 0x8001, 0x1, 0x2bba, 0x6c, 0x4, 0x400], [0x6, 0xffffffff, 0x7fff, 0x10001, 0x0, 0x2, 0x8, 0x3, 0xc2b1, 0x7, 0x0, 0x0, 0x400, 0x0, 0x80000000, 0x9, 0x0, 0x3, 0xffffffff, 0x0, 0x4, 0x1, 0x3, 0x30000, 0x1, 0x3, 0x20, 0xc4, 0x8, 0x3, 0x800, 0x5, 0x4, 0x91ca, 0x10000, 0x1, 0x2c7, 0xde, 0x0, 0x0, 0x7f7, 0x38, 0x8000, 0x40, 0x6, 0x3ff, 0x2, 0x3, 0x0, 0x18000, 0x0, 0x0, 0x4, 0xcbd, 0x0, 0x5, 0x6, 0x1, 0x0, 0x9, 0x1, 0x88, 0x1, 0x7], 0x1a, ['\x00', 'wlan0\x00', '/dev/sg#\x00', 'syzkaller\x00']}, [""]}, 0x43c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004050) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB, @ANYRES32, @ANYBLOB="7a00330080000000ffffffffffff080211000000505050505050000000000000000000000000010003"], 0x98}}, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x82840, 0x0) sendmsg$inet6(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="3cb7e9e5c30a05c41dd519ab070a9833851847c82c6d026f7b4ee0b1c320fdc6d96ca36805a6391803b3e8fc3368d09ad63ac641a01725d74c5ca1cc0c1bf15de37053461a3ce71085f4ee0119de596804b8a7908ab12870b18c494d7da9f493e4ddaaa3c7641dd3c6912d2e8cf1b05caa92589c36", 0x75}, {&(0x7f0000000080)="5a41ebd572f5d2d8ff3f72a27e21ca5f626c6118ec44809695db36876af41f72d59306ac536b9e44ae12f2079d7fb9a3865be89fea7f04a69cd89fd1cd01035ec20ebc3a2a662003fbb18fecc516288f27dddd8f53c9e3b57dcdb6", 0x5b}, {&(0x7f0000000100)="40d72697eacc6b6e8a3b669390114c4a3d1fff31e1ac2c47161964f66d8eaccc5366651ad4c14bcf6f4e", 0x2a}, {&(0x7f0000000280)="2d81b55d8ee6c037950ce2822e4359884a81a8512e8b0e63a897869f2fc405", 0x1f}, {&(0x7f00000007c0)="57deab5de42f370cdcf9c8e57d754f28acdc4b9faec73902b0cac36fc3000000000000000000000000000000f0702cd61694cab9d46eb2e1182a5f1fbbf05ded6e87b1fa939d8f5d71af69a260a67c1b7d2c4a007ba91e061421ce2ecf46daa7ccf991", 0x63}, {&(0x7f0000000400)="73a3c4e08c6d4ee388f5b0d1238b9b4a50212a7a085d2c8eb455a5793b6aff9e4854d1dba289a304716d243eeb096c4ded35eda78afac8cf90faa514d51fac8404c9466536f4bdf77555659bdba9af542011fec55fa116a32207f7de28bc7401a95d01c32baafda134b8031c0b4aa938089acf3b298bf8b3f6bf65ad8673e1970c878afa2447db430a3f0c1912d263696d5b52780ade3e034584950c7b24c06570642a9a45cfa6faa011a6a0035c04905419dcd647d2d6901599f61a7da5b7f3174a1eb917014d6b225307fc7bce79a9", 0xd0}, {&(0x7f0000000700)="b286663aac94cbcf25e4df5b2ef2fb87f4b9020e543f98da4863b10d40bbd8e1e757820a9111e8ced914b1905005d41b4c6a8eae4624c9853238100863c223ff6e72e4098505be600a290f610e4022f92ab97a00aab07fb407e59d83ebe2c8eb66b7d8110df891e0fa01f1b6bfb88b799bb97d01664e499d2b6fbebe96040970e33e", 0x82}, {&(0x7f00000022c0)="fe923405a03492e036968b4471404d0597c3f08db559288d485e0c4bf37e90b08475b66f786dead098eafb2650e60c35e0b27a2b2bb2d73da9da2adb78c7f94087c7c45fed52a6a805a4991784e3d3c4c4e258609b58bb6c95affe37c1760c6f39397dbef3d6cb7fdba386a555e2dce34f8a6db4f0981a36c1c71da2ecfc8ee80c076df6bb2aa218b01893df43a8dda7e47f7931d009c7351d916bb0ae6031749e6f9f687f62af474c97749933e56a38506ba8f2f37cb17573ee77130b790264c567c6e0be38d16b2118483da34d964720195da6393cad18baf18105468f323ac8e9fc518cb94e80a849d7b445e233fae6ba1d58a37d42315ec4d289bca4931c9c68b50835e5a3ccb9ed2d2cd202269c06a61c2fcd6fc48c854a6caaf0f644174cfcfae54bacce7df3e33ab5fa489fa1af49d458861b8ff2c77713b79b518f6a36a4dd2529cde69040c6e67485b1d09410c2f04f57a149660db32a0cf91bef5b4fbf069f3cdf62fb78afc2d09b2be368c1b1445cfcf61b4f14e71eab65ba53410eeacf3d5aea382cdc61ca7aa67c50a8c5e34e40cc4b403b0eca96389636bf27c69e977b7e3b2c1a3d1a0d3a2957182a1f51f505a22cf77ae1e1cd29f462d865bf4425ab0047bb4a50bc5129204b34db46adbe49eb4f49b93afa2cfacef4526a636c83eb547f61769eec29920daa515539375ce15a12bf0de1b35ce615532355f4107497584d2dc1e666aa6f0da8875c08031f8e1943de34adb4be1fe292bbb216a25f993133bd0e2ab1ba2b6987fa4d872f3ad0abd6a447311c8dd299d403dfb6a9c0c3e562d4da88e6331903621c1c7db436bf56896295d1632d9aaeecc9ce2644c79184e9817ffd99f89c4d4621871e404cbbf9646cab5984fab54f2bdb67dd7820bcc9e7c6b439100e6e9172f034f48815fbef3228e206073c4342a0bdd76f89423c9373f346e0a8e21a1b6afb84091efe33d33aa7c2ca3c51cfb036c652649d0fe8db6eabd21d6886220cd14528ef2df915431b7d7d116d5e3d25ae3440e3b4a37a748d67f9d2cdda70a2ab9c37eadd9d53f51bb57e08099cd8f23e1ef0c4d99fdb4409590ba5564c90cc7f8b73c19c0267140ac3a1af5d7ab6e8100d4cc3cee4ddc6eaaeff4df5f1626c79dadbcb744899d6de4b78ffabb700bb9bc1c2378480c68afa574c9009d0d2b5cdcee99ad30163412894339e5a70f0bd967fb98433bc6ba4f9551b83fe8fff9dd589cf7443749400487607ca6944e992915d6d8318259768c7e1608f933af5fdeecd8bb1b2d0a6d759d98e2b4cc7a9bf21dc26d8d2ad3fc9d6c269a8ec7bc2f41234cd9960d999dddcd901f90ab5dc360bc54a4310bd3a12363520728c0cedfa949e8703a9f90cdef7bdc0ba3b13ecdd5f125412bf6a54007b475adedce805ba7656fa2432f470c5b4c976c4680671a762d362d582581c8f2236f2991644c6300b693e41bade42083b843bec727f40f2a5e54bb8e64702afd054135e00879a021dec53fa8217cf2c0fa4e8fa7af0c057bee43d484f609c183755ea64293ec4ab0cf1fbfa9366dbd949073800edf0e626d822c3fa0e6b5ab16fe97a9a49ca7e9844f287bda3c1d5ae822e03cf421d729158879f71d4dda5c8be56a0b98495ae708cdfe59dbde9d06e0c0e137c1c66d3c901ce83357276b609ac3462755f66cb0cdc3d5adb0e9103c82b6b93ccd58729afbde15b1260f15d835f5cd69bf1a602225792e48b90ccb69e7ee18fa56c415c18d6fc7bff2465c3f4a5acf6d0c9aaa45ece9307dc28bb5a86295d4d611b1f2aa5774dc683666e87e4b9faa91fa78221dba2e6dc80d3b52b5637e5002eebe6f5fcf65dcedb51a2bab0b30da2a373958b1137cdd579b2fc8b1d2c4d6681bc3eac49365ecf089efc8b5c940976b6d4ea936bf3f5ce1ae6a355b7ceb65ef3", 0x559}], 0x8}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000800)={0xda}) 7.534886125s ago: executing program 0 (id=484): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x20800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000000c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) 6.964526961s ago: executing program 3 (id=499): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_helper', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{}, 'port1\x00', 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x0, 0x4}) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x6d72, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.262061136s ago: executing program 3 (id=501): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1de) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x200800, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902"], 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff000000003609080000000000c39af0ffa0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.936044797s ago: executing program 4 (id=503): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x110) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 5.8481864s ago: executing program 0 (id=504): syz_emit_ethernet(0x6c, &(0x7f00000001c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xaf10, 0xfc00]}, {}, {0x8, 0x88be, 0x3}}}}}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "505c905e"}, @main=@item_012={0x1, 0x0, 0x0, "ec"}]}}, 0x0}, 0x0) socket(0x27, 0x2, 0x7b) shutdown(0xffffffffffffffff, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, "57c1169b6664ea61326ac71ae7213059"}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x22002) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000046617210460d11208f820102030109021b0001000000000904"], 0x0) socket$rds(0x15, 0x5, 0x0) 5.093213548s ago: executing program 2 (id=506): keyctl$session_to_parent(0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf8], [0x0, 0x4]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000540)={'#! ', './file0'}, 0xb) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x9, 0x0, 0x0) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="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"], 0x0) 4.528730409s ago: executing program 4 (id=507): socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x1404, 0x0, 0x3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = io_uring_setup(0x7058, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x25}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = dup2(r5, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x6, &(0x7f00000003c0)={r7, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x18, 0x20000000, r3) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0xf2, {{}, {0x0}, 0x0}}], 0x48}, 0x0) connect$rds(r9, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)=ANY=[@ANYBLOB="0001000019fdfb20f30c71920f06000000010902094422e1ba0000"], 0x0) accept$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) 4.22313668s ago: executing program 1 (id=508): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r0, 0x0) preadv2(r0, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1000000000000273, 0x0, 0x0, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000004900)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000840)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x140b, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0xfffffffffffffe4e}, @RDMA_NLDEV_ATTR_PORT_INDEX]}, 0x28}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000000c002b80080003000e00000008000a00", @ANYRES32=0x0, @ANYBLOB="2397663cd0d52c27815e65e295af3c28a3bac1e2491ada10f1429a534b1565e1c3c2b3604ff3ae9791b1a1cc49a5a7883856193e90be30a3812fe18f5bcda99dfcfdbb08d49acbd4808698489a5cdeffa96a881c8878856b5a5f5c7400cf222055f2aeea8f2f9efa0d4d83f7b4a4800814fff2d381beb10bea12ccb9a867e30d0762b8c1107314544f958add5c7352f2a8155806ae53c56ad60a53e3685d8958bc0b5b0bfaaccc8ddfa915566e1e29030bea"], 0x34}}, 0x0) 4.014409756s ago: executing program 2 (id=509): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="fa"], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x0, 0x9, @local, 0x9}, @in6={0xa, 0x4e20, 0xfffff801, @local}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}], 0x74) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)={0x30, r2, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x49}]}]}, 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) 3.826753323s ago: executing program 2 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 3.821889017s ago: executing program 3 (id=511): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x2}]}}}}}}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x20, 0x7, 0x82, {0x82, 0x5, "1578a9c27dcb2ee816bc2d97298bb1fa279ad2f1ec711aa242f7fb9ad468393dc23e07db7d338f460f4368ea9c95cfda95cf048875f6e032c867769d91ef6b14285739a75991e9dfdb35b033bad6fbcaed4f55ab7ab68a007423fbd88e72c84fb19ad9dcccc069e1b2a8a10d65243cb4618c44b2ba06ec0e9ce01e172219897c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="002204000000b1481926a386acd6f60e629b270e7412d5b89c1595696ae743b59b16f498624bf237aa83fbdd3416c0fc3de5ec8f205bd332f617239e22f04299cebc7c126ce331277ab077b2fcb7d620664735ba7b99b52418e28c85ecc8e39be4fbd324f39641bb9f50c379088d"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x600, 0x1, 0x1, {0x22, 0x628}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0xf8, "06a82be5d3f5bc85a8c132db143855e96a07e52944cab54a1229e529c3d52d2504b81d8cf1ad2cdec162797db7881d49482dfc7e153ed975163c806e618159907c2b5c9744a230068c86947148269ade9b8abfeb23ecf1c25fe985bd47a4a853dc35a9c65e7fa69237c18f5741488ffcf9c5102a9c6f44b9c5042333d8eb6eb0ef328c88b13bd390a1b2a1ced4d8fb5d4065e1446667b85cf45cd8788bcb20bf84d5ab720e9c6d57991e9d67ee92fa7e308e405a1f883f16d90272ee918dc8e64edbdd5efdc7e4543d1f89b30bb2a49f0f7dc4ab96021ba86a2f2775a9591013fdbe9b352e6f41cbd706abc4027438ea2aacf99dcf031e16"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x24, "50bb55de9f3ac8dffd597ed84c215ce09eea945830dd2240217ebbf9148fbf83cd2b0e50"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x40000000004, 0xfffffffffffffffe}) syz_open_dev$vcsn(&(0x7f0000000640), 0xfb, 0x8040) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 3.617759169s ago: executing program 2 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) dup3(r2, r1, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x4) ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @request_death], 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x8000, @empty}}, 0x0, 0xfffd, 0x0, 0x0, 0xce03d4}, 0x98) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x40, r8, 0x1, 0x470bd28, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x47}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x81, 0x3}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xffff94cf}]}, 0x40}}, 0x4000) 3.472124557s ago: executing program 0 (id=513): ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x248, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@lastused={0xc, 0xf, 0x7fffffff}, @algo_comp={0x137, 0x3, {{'deflate\x00'}, 0x778, "efa16e6467bd638175b9f1554f7065ae05ce9d39a846cf5e863a9b404a9272b32c1c50c4020c3b2195db54f24fb7e6eea48ff56539ea24f1868d5f1dff282c918411c88380b8f66ccb29fe2950775b25f32d009a2a2035e885cb3e5468e0f38a95b00aa04849a0db7aaca7ba1f829d19e553bf1ddfd1b7b37dc08e3b04b64deb828f02ff476bb8c28f51321cb1c7f6f77d3b48a6ae614c10cf9825566ba0ef22f4758c15d1a281cd18178d7c2f91a70b8493077378b1159aeb7198aff6911344e487ab79a9c35a3700d73f1ce09fb7eadc815d1c446b7a2ad8fa77a89cd7c8db1a1633570acaee4ea89ac2ba7dde7a"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x248}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000280)=0xc) write(r0, &(0x7f0000000500)="390dc88a87f5cc5bf10762304f323f2dc6dc479285a9ec624b1a78902539334d9f1bf9c35d6cc4b0f9de179eec9726377cb2b5049a4a2b36050220aa2970a7bb2de70b295770d815c97dc7850d16149332a9c70642ae264e6ec57793b3bc05c1ef1939b2fc2c033ddcf5b00083926014ec77895c4470f228", 0x78) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES8=r1, @ANYBLOB="b252ae0aeec704d392d509c7b5307b9a691bf1", @ANYRESOCT=r0, @ANYRES16=r2, @ANYRES8], 0x184}, 0x1, 0x0, 0x0, 0x20000010}, 0x48105) r3 = socket$inet6(0xa, 0x3, 0x4) write(0xffffffffffffffff, &(0x7f0000000140), 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004680)=[{{&(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/142, 0x8e}, {&(0x7f0000000b80)=""/194, 0xc2}, {&(0x7f0000000c80)=""/226, 0xe2}], 0x4, &(0x7f0000000d80)=""/225, 0xe1}, 0x2}, {{&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e80)=""/244, 0xf4}, {&(0x7f0000000f80)=""/221, 0xdd}, {&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000000900)=""/34, 0x22}], 0x5, &(0x7f0000003600)=""/4096, 0x1000}}, {{&(0x7f0000001180)=@tipc=@id, 0x80, &(0x7f0000004600)=[{&(0x7f0000001200)=""/151, 0x97}, {&(0x7f00000012c0)=""/119, 0x77}, {&(0x7f0000003540)=""/19, 0x13}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f0000001480)=""/45, 0x2d}, {&(0x7f0000003500)=""/49, 0x31}], 0x6}, 0x1980}], 0x3, 0x2122, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x5, 0x402000) syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) 3.306967712s ago: executing program 0 (id=514): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x20800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x802c542a, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000000c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x7, 0x41546}) 3.256745277s ago: executing program 1 (id=515): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000f5ffffff9edd49cd222c5582b6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x5, 0x0, 0x5, 0x40, 0x9, 0xffffffffffffffff}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0xfce) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) write$cgroup_int(r0, &(0x7f00000001c0)=0x3, 0x12) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r7, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f00000000c0)={r7, r8}) close(r3) 3.16386895s ago: executing program 2 (id=516): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x31, 0xce, 0x9, 0x40, 0x1163, 0x100, 0xfcb9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0x2f, 0xa3}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e020000000000"], 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffc, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005940)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfffd, 0x8, 0x10}, {0xffffffffffffffff, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x65d5}}]}]}}]}, 0x68}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.846709869s ago: executing program 4 (id=517): socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.106253085s ago: executing program 1 (id=518): syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa20080045000028000000000002907800000000ffffb5ff11e090780000000062ea00000000000000000000fdb180122d8ac26525546b55d17eb8363198b8f0fdd84435a31c3a0d14a8ebd4eb7705a8b8d1937733b7dff8fb2098fc9c20484c06905b04ef877c30566c7b85e18d98164b3eb572a1c00def2641ab4c2b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000240)={0x10000001}) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) recvmsg(r1, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/15, 0xf}], 0x1}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) fanotify_init(0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000001680)=[{&(0x7f0000000080)="c7", 0xf000}], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0) 1.837857672s ago: executing program 0 (id=519): read$alg(0xffffffffffffffff, &(0x7f00000007c0)=""/142, 0x8e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000033a80)=""/102383, 0x18fef}, {0x0}], 0x2, 0x0, 0xfffffff9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timer_create(0x2, 0x0, &(0x7f00000017c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000000300)) rt_sigsuspend(&(0x7f0000000200), 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f00000002c0)={0x1, 0x1, {0x9, 0x1f, 0x7}}) timer_gettime(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r3, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x208, 0x202, 0x225, 0x208, 0x278, 0x3, 0x0, {[{{@ipv6={@dev, @empty, [], [], 'veth1_vlan\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00'}}}, {{@ipv6={@empty, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) 1.074201941s ago: executing program 1 (id=520): r0 = syz_open_dev$dri(&(0x7f00000006c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)='~', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000140)={r1, 0xffffffd9, 0x0}) 993.225163ms ago: executing program 3 (id=521): setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="fa"], 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x0, 0x9, @local, 0x9}, @in6={0xa, 0x4e20, 0xfffff801, @local}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}], 0x74) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)={0x30, r2, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x49}]}]}, 0x30}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000e80)}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) 925.248035ms ago: executing program 1 (id=522): prlimit64(0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000010000100000000000000000000100000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c000280080007000000000008000100100000000800030001000000"], 0x4c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x4, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="3b000e0080000000080211000000080211000000505050505050000000000000000000006400000000060202020202020301ae040600000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200225bd7000fcdbdf257c0000000a000600ffffffffffff00000a000600ffffffffffff00000a00060008021100000000000a000600ffffffffffff0000faffffffffffffff000000000a0006000802110000000000"], 0x5c}}, 0x40080) socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000700)="a463b6d0c1e1dac51f2d6ba59c2a91c78e52b208b665ecaa9b7f4b54322adfcdb1452a3668c416a6da21b6fa24943606a10826f0224311c3b9c531627a47e6cce398784210f6bb04e4ba4c416ed009f99062e245a6d3cf52923b06f5f98b7f19c7c1dc3f6b833fd7abbb94e2c425b416179141b876c6b051f766b6302853532113e9579e2ad2305b9b8fbc62065fb41e6d94e651aea372d9f6a309746f4128a4b60b86cd33a09175ccb917eb6f5a4eb001979304b0dd0a4e65c908ccfd303276c03b1503773d8c00"/210, 0xd2}], 0x1}, 0x31c467c443849ffc) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) 882.459718ms ago: executing program 4 (id=523): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0xfffffffffffffcbc}, {0x0, 0x0, @any, 0x2}}}, 0x14) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x40046306}], 0x0, 0x0, 0x0}) 739.852504ms ago: executing program 0 (id=524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) 593.242248ms ago: executing program 3 (id=525): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x2, 0x4, 0x3c0, 0x108, 0x108, 0x0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x27e9, 0xfffc}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x86, 0x55, 0x21, 0x8, 0xccd, 0x69, 0x6e55, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$swradio(0x0, 0x1, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100"/11], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x1, 0xf7, 0xfffffffffffffffc}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x14, 0x1, "000000fd8005eda4bcf55e60f9690000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001180)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) pwrite64(r7, &(0x7f00000012c0)="8cfea4e9b9692a0d45b130ca29187192cc9029b0ddb10f3de495c83a5cb26512a320854ac91c5bf3f4fb19e42d2fde816fa6c477219090c84aa0f38ea94b62f9364a2e43e632117d53a43be5b6bd55e26de3f7b392de52914adc792322a3f23b9b3cba168322574fbe1e1b117985", 0x6e, 0x9) r8 = dup(r6) write$UHID_INPUT(r8, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x5000)=nil, &(0x7f0000001080)="c6797d45bd5d47f8bab4deb5a1b39bb69fadd5ffd6f1ec067974083b41eff278d3de13d243540aa64e7ab8986652df13f18ea2f1ba71f55b6d0674232bfd6ceb3a501b7af122fd7e232a876e04298c49cda6ec2ce27174e63959aa0a56846c96e00d1bb89f4ef9c0", 0x68, r6}, 0x68) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x60}, 0x0) 481.302983ms ago: executing program 4 (id=526): r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x12, &(0x7f0000002140)=@framed={{}, [@cb_func, @exit, @ringbuf_output, @cb_func, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'veth0_vlan\x00', @random='\x00\x00\x00 \x00'}) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x0, @thr={&(0x7f0000003c80)="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", &(0x7f0000000300)="f2cecfa055b71d81b399fa004ba1e410742888a928a8c6deb3bd21e8c95ae3b7ad499bc252896a30e05d415f507280d3f105b70975a1302e97535e3318156a5ce8588edbb178f00e1b47204fc9b96104e2a944f3f23d1454ce6c3e09d19c8e542038fa4f006c2d8fdf7acd03c20c7212cc93d3f7971951303bceb6230fac9b56e0c66e6fb734494e9c058e5482089663ac1d24c1d8b88f7abc84448906f3c32a147601b835ca3faf2df62679e1be23a867d0ff614175d405a5a62185309969c7d8"}}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 417.800358ms ago: executing program 4 (id=527): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000200)=0xa0000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300000000000001000b00"], 0x14}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000046568000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf9100000000000007080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000001340)={{@local}, @any, 0x0, 0x4}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r5, &(0x7f00000001c0)="8e77ca3389787867582dd0b9999e5e7ce579fc6b2977bf71ab517f68a8ddb58b93c91675a4b5dde502242a66491162f75f9b28f59cd9746ff7140fde3923b99bcc4c2cc72443169b2ab2f90a0f03dd842adba400500327de779dc66f3ebd32a81ebea8b89c9cc7e0f46e28fc1ff127a0", 0x70, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r5, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x104) shutdown(r5, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100031c29b308d80408fde332010203010902240001080600220904a501020a5729080905cca2", @ANYRES32=r1, @ANYRESOCT=r1], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x8a, &(0x7f0000000380)=ANY=[@ANYBLOB="8a035af9758faa56c83b6b5dd95c449e4d3b4e87a557f00f87d083edbd02d41c8307005323a4fce6aabf41fa30b374d035517befc59cc008bbab2e1e66a217a136f985130b1cf14fe3566364cf323c3e4fe1cba06ee0ffbb70611b17d1da88cdce4532aa846751228e237aa5fccfb2ccfe934eee987da4c96a439f6d1f4dba4df6b607af54b0ad05f59c13924f39d5dc3cc3ba6aceef52f53fcd"]}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x455}}]}) 353.25618ms ago: executing program 1 (id=528): syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) socket$inet(0x2, 0x2, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001439) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x2000000b) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCDISCONN(r6, 0x7439) 0s ago: executing program 2 (id=529): socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x30000, 0x129) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000001a80)=""/102388, 0x19000}], 0x1000000000000069, 0xfffffffe, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @p_u8=0x0}}) socket$unix(0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6]}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'rose0\x00', 'geneve1\x00'}}, @common=@inet=@tos={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SIOCGSTAMP(r5, 0x8906, 0x0) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c000000000000000000fe0000070000004404530001800000"], 0x40}, 0x0) kernel console output (not intermixed with test programs): a:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.209261][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.237745][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.256387][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.280731][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.295582][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.333178][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.365234][ T6709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.406311][ T6709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.458118][ T6709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.467552][ T6709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.488238][ T46] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 189.680872][ T46] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 189.698717][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.731388][ T46] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 189.747497][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.763166][ T46] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 189.777292][ T46] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 189.818770][ T46] usb 5-1: Manufacturer: syz [ 189.834985][ T46] usb 5-1: SerialNumber: syz [ 189.853185][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.898447][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.011075][ T29] audit: type=1326 audit(1727256670.373:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.287" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa90f7def9 code=0x0 [ 190.157348][ T6907] x_tables: duplicate underflow at hook 3 [ 190.740170][ T29] audit: type=1326 audit(1727256671.103:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.2.289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x0 [ 191.298160][ T937] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 191.450171][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 191.497388][ T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.508267][ T937] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 191.567099][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.625230][ T937] usb 4-1: config 0 descriptor?? [ 191.672765][ T937] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 191.809855][ T5280] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.996257][ T5280] usb 3-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 192.054966][ T5280] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.076451][ T46] usb 5-1: USB disconnect, device number 13 [ 192.115145][ T5280] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 192.193962][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.257736][ T5280] usb 3-1: config 0 descriptor?? [ 192.393249][ T937] gspca_vc032x: reg_w err -110 [ 192.442561][ T937] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 192.587650][ T6965] binder: 6964:6965 unknown command 0 [ 192.606850][ T6965] binder: 6964:6965 ioctl c0306201 20000a80 returned -22 [ 193.248135][ T5292] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.428164][ T5292] usb 5-1: Using ep0 maxpacket: 16 [ 193.447084][ T5292] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 193.469659][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.493016][ T5292] usb 5-1: Product: syz [ 193.503858][ T5292] usb 5-1: Manufacturer: syz [ 193.520618][ T5292] usb 5-1: SerialNumber: syz [ 193.559008][ T5292] usb 5-1: config 0 descriptor?? [ 193.574816][ T5292] appledisplay 5-1:0.0: Could not find int-in endpoint [ 193.602731][ T5292] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 193.784081][ T5292] usb 5-1: USB disconnect, device number 14 [ 194.195371][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.302'. [ 194.215875][ T46] usb 4-1: USB disconnect, device number 25 [ 194.517114][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.529218][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.671008][ T5280] usb 3-1: string descriptor 0 read error: -71 [ 194.707351][ T5280] usb 3-1: USB disconnect, device number 13 [ 194.734570][ T29] audit: type=1326 audit(1727256675.093:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7017 comm="syz.4.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd70b7def9 code=0x0 [ 194.958104][ T5279] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 195.162022][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 195.187211][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.218394][ T5279] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 195.247203][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.285938][ T5279] usb 2-1: config 0 descriptor?? [ 195.297684][ T5279] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 195.597599][ T46] IPVS: starting estimator thread 0... [ 195.728230][ T7056] IPVS: using max 25 ests per chain, 60000 per kthread [ 195.944551][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.313'. [ 196.763185][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.929291][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 196.937509][ T46] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 196.950137][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.991627][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 197.005492][ T46] usb 5-1: Product: syz [ 197.007082][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.010975][ T46] usb 5-1: Manufacturer: syz [ 197.025944][ T46] usb 5-1: SerialNumber: syz [ 197.050969][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 197.066268][ T46] usb 5-1: config 0 descriptor?? [ 197.077606][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 197.098366][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 197.112403][ T46] appledisplay 5-1:0.0: Could not find int-in endpoint [ 197.142852][ T46] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 197.148413][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 197.169573][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.306125][ T937] usb 5-1: USB disconnect, device number 15 [ 197.336248][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.440416][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.500518][ T7038] coredump: 185(syz.0.309): interrupted: fatal signal pending [ 197.508653][ T7038] coredump: 185(syz.0.309): written to core: VMAs: 36, size 99516416; core: 27178087 bytes, pos 36261888 [ 197.544827][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.765669][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 197.779670][ T5222] usb 2-1: USB disconnect, device number 12 [ 197.926588][ T11] bridge_slave_1: left allmulticast mode [ 197.933021][ T11] bridge_slave_1: left promiscuous mode [ 197.939012][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.989870][ T11] bridge_slave_0: left allmulticast mode [ 197.995698][ T11] bridge_slave_0: left promiscuous mode [ 198.002246][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.195386][ T29] audit: type=1326 audit(1727256678.553:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7082 comm="syz.1.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 198.324152][ T29] audit: type=1326 audit(1727256678.613:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.4.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd70b7def9 code=0x0 [ 198.345835][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.238244][ T5235] Bluetooth: hci2: command tx timeout [ 199.290508][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.309431][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.321567][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.329660][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.337541][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.346118][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.567577][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.589655][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.610059][ T11] bond0 (unregistering): Released all slaves [ 199.702877][ T5292] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 199.773917][ T29] audit: type=1800 audit(1727256680.123:46): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.328" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 199.799038][ T29] audit: type=1326 audit(1727256680.153:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7121 comm="syz.1.328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 199.904309][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 199.963120][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.977124][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.997024][ T5292] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.001367][ T7077] bridge_slave_0: entered allmulticast mode [ 200.019572][ T7077] bridge_slave_0: entered promiscuous mode [ 200.034698][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.064759][ T5292] usb 5-1: Product: syz [ 200.077132][ T5292] usb 5-1: Manufacturer: syz [ 200.078502][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.090633][ T5292] usb 5-1: SerialNumber: syz [ 200.105151][ T5292] usb 5-1: config 0 descriptor?? [ 200.108659][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.117396][ T7077] bridge_slave_1: entered allmulticast mode [ 200.184562][ T7077] bridge_slave_1: entered promiscuous mode [ 200.335655][ T11] hsr_slave_0: left promiscuous mode [ 200.337153][ T5224] usb 5-1: USB disconnect, device number 16 [ 200.369771][ T11] hsr_slave_1: left promiscuous mode [ 200.380878][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.401060][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.417658][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.464066][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.479802][ T5292] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 200.517134][ T11] veth1_macvtap: left promiscuous mode [ 200.534110][ T11] veth0_macvtap: left promiscuous mode [ 200.543075][ T11] veth1_vlan: left promiscuous mode [ 200.553122][ T11] veth0_vlan: left promiscuous mode [ 200.650578][ T5292] usb 3-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 200.684658][ T5292] usb 3-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 200.745632][ T5292] usb 3-1: config 0 interface 0 has no altsetting 0 [ 200.769817][ T5292] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 200.791324][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.818937][ T5292] usb 3-1: Product: syz [ 200.854852][ T5292] usb 3-1: Manufacturer: syz [ 200.869998][ T5292] usb 3-1: SerialNumber: syz [ 200.885491][ T5292] usb 3-1: config 0 descriptor?? [ 201.317198][ T29] audit: type=1326 audit(1727256681.663:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd70b7def9 code=0x7ffc0000 [ 201.322339][ T5231] Bluetooth: hci2: command tx timeout [ 201.388396][ T5231] Bluetooth: hci3: command tx timeout [ 201.405888][ T29] audit: type=1326 audit(1727256681.673:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcd70b7def9 code=0x7ffc0000 [ 201.447050][ T29] audit: type=1326 audit(1727256681.673:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd70b7def9 code=0x7ffc0000 [ 201.479717][ T29] audit: type=1326 audit(1727256681.673:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd70b7c890 code=0x7ffc0000 [ 201.504716][ T29] audit: type=1326 audit(1727256681.673:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd70b7dafb code=0x7ffc0000 [ 201.528531][ T29] audit: type=1326 audit(1727256681.673:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7148 comm="syz.4.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd70b7dafb code=0x7ffc0000 [ 201.634269][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.819691][ T46] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 201.857830][ T46] usb 5-1: config 0 has no interface number 0 [ 201.869521][ T46] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e350, bcdDevice=f8.fa [ 201.879918][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.902082][ T46] usb 5-1: config 0 descriptor?? [ 202.100936][ T11] team0 (unregistering): Port device team_slave_1 removed [ 202.176275][ T11] team0 (unregistering): Port device team_slave_0 removed [ 202.895539][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.924330][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.995412][ T5222] usb 5-1: USB disconnect, device number 17 [ 203.227684][ T5292] ch341 3-1:0.0: ch341-uart converter detected [ 203.278205][ T5292] usb 3-1: failed to receive control message: -71 [ 203.284681][ T5292] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 203.292459][ T7077] team0: Port device team_slave_0 added [ 203.320193][ T7077] team0: Port device team_slave_1 added [ 203.368541][ T5292] usb 3-1: USB disconnect, device number 14 [ 203.375601][ T5292] ch341 3-1:0.0: device disconnected [ 203.388898][ T5231] Bluetooth: hci2: command tx timeout [ 203.443744][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.469250][ T5231] Bluetooth: hci3: command tx timeout [ 203.481940][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.544563][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.573527][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 203.594690][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.608076][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.653145][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.839349][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 203.839370][ T29] audit: type=1326 audit(1727256684.203:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x7ffc0000 [ 203.931091][ T29] audit: type=1326 audit(1727256684.203:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x7ffc0000 [ 203.980255][ T29] audit: type=1326 audit(1727256684.213:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe60377def9 code=0x7ffc0000 [ 204.002758][ T29] audit: type=1326 audit(1727256684.213:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x7ffc0000 [ 204.025763][ T29] audit: type=1326 audit(1727256684.213:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x7ffc0000 [ 204.056744][ T29] audit: type=1326 audit(1727256684.213:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe60377c890 code=0x7ffc0000 [ 204.091540][ T29] audit: type=1326 audit(1727256684.213:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60377dafb code=0x7ffc0000 [ 204.114697][ T5292] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 204.151533][ T29] audit: type=1326 audit(1727256684.213:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60377dafb code=0x7ffc0000 [ 204.203552][ T29] audit: type=1326 audit(1727256684.213:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60377dafb code=0x7ffc0000 [ 204.225981][ T29] audit: type=1326 audit(1727256684.213:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7178 comm="syz.2.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe60377dafb code=0x7ffc0000 [ 204.251338][ T7077] hsr_slave_0: entered promiscuous mode [ 204.274337][ T7077] hsr_slave_1: entered promiscuous mode [ 204.294635][ T7077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.308390][ T7077] Cannot create hsr debugfs directory [ 204.400881][ T5292] usb 3-1: config 0 has no interfaces? [ 204.406430][ T5292] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 204.416479][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.476877][ T5292] usb 3-1: config 0 descriptor?? [ 204.582224][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.605772][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.627316][ T7119] bridge_slave_0: entered allmulticast mode [ 204.655469][ T7119] bridge_slave_0: entered promiscuous mode [ 205.473440][ T5231] Bluetooth: hci2: command tx timeout [ 205.548781][ T5231] Bluetooth: hci3: command tx timeout [ 205.549044][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.597754][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.640511][ T7119] bridge_slave_1: entered allmulticast mode [ 205.660769][ T7119] bridge_slave_1: entered promiscuous mode [ 205.953832][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.009353][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.376487][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.475313][ T7119] team0: Port device team_slave_0 added [ 206.523404][ T7119] team0: Port device team_slave_1 added [ 206.767101][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.875847][ T5292] usb 3-1: USB disconnect, device number 15 [ 206.882023][ T5222] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 207.078688][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.108088][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.122250][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.147663][ T5222] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.174012][ T5222] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 207.184706][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.198043][ T5222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.206235][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.249510][ T5222] usb 5-1: config 0 descriptor?? [ 207.277635][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.433991][ T7225] loop0: detected capacity change from 0 to 7 [ 207.485286][ T7225] Dev loop0: unable to read RDB block 7 [ 207.491943][ T7225] loop0: unable to read partition table [ 207.507636][ T7225] loop0: partition table beyond EOD, truncated [ 207.554739][ T7225] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 207.554739][ T7225] ) failed (rc=-5) [ 207.597672][ T11] team0: Port device netdevsim0 removed [ 207.612556][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.628406][ T5231] Bluetooth: hci3: command tx timeout [ 207.648945][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.676668][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.769687][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.280753][ T7119] hsr_slave_0: entered promiscuous mode [ 208.303159][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 208.322333][ T7119] hsr_slave_1: entered promiscuous mode [ 208.329438][ T7234] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 208.329438][ T7234] The task syz.2.345 (7234) triggered the difference, watch for misbehavior. [ 208.350235][ T7119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.358118][ T7119] Cannot create hsr debugfs directory [ 208.384395][ T7235] kAFS: unable to lookup cell '.,' [ 208.654956][ T11] bridge_slave_1: left allmulticast mode [ 208.670432][ T11] bridge_slave_1: left promiscuous mode [ 208.683681][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.697624][ T11] bridge_slave_0: left allmulticast mode [ 208.707255][ T11] bridge_slave_0: left promiscuous mode [ 208.716170][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.360408][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.377314][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.398724][ T11] bond0 (unregistering): Released all slaves [ 209.514039][ T5280] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 209.619944][ T5222] usbhid 5-1:0.0: can't add hid device: -71 [ 209.626096][ T5222] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 209.655860][ T5222] usb 5-1: USB disconnect, device number 18 [ 209.680113][ T5280] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.715288][ T5280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.759328][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.776889][ T7077] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.778597][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.805662][ T7077] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.823783][ T5280] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.835916][ T7077] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.845901][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.855353][ T5280] usb 2-1: Product: syz [ 209.874822][ T5280] usb 2-1: Manufacturer: syz [ 209.893409][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 209.903475][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 209.913730][ T5280] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 209.924600][ T5280] cdc_wdm 2-1:1.0: Unknown control protocol [ 210.000307][ T7077] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.147548][ C0] wdm_int_callback: 6079 callbacks suppressed [ 210.147576][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.160396][ C0] wdm_int_callback: 6079 callbacks suppressed [ 210.160415][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.172747][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.179359][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.185733][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.192347][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.198600][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.205190][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.211430][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.218044][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.224290][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.230957][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.237300][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.243897][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.250148][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.256772][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.263089][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.269691][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.276016][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 210.282623][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 210.293997][ T5280] usb 2-1: USB disconnect, device number 13 [ 210.299949][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 210.334801][ T7251] ALSA: seq fatal error: cannot create timer (-22) [ 210.531496][ T11] hsr_slave_0: left promiscuous mode [ 210.560409][ T11] hsr_slave_1: left promiscuous mode [ 210.601668][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.621495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.636304][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.651070][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.695437][ T11] veth0_macvtap: left promiscuous mode [ 210.705539][ T11] veth1_vlan: left promiscuous mode [ 210.713778][ T11] veth0_vlan: left promiscuous mode [ 210.818460][ T5224] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 211.003979][ T5224] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 211.014563][ T5224] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.028601][ T5224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 211.037745][ T5224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.060298][ T5224] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 211.070590][ T5224] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 211.078775][ T5224] usb 2-1: Product: syz [ 211.082998][ T5224] usb 2-1: Manufacturer: syz [ 211.112058][ T5224] cdc_wdm 2-1:1.0: skipping garbage [ 211.117920][ T5224] cdc_wdm 2-1:1.0: skipping garbage [ 211.132691][ T5224] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 211.148860][ T5224] cdc_wdm 2-1:1.0: Unknown control protocol [ 211.437593][ T11] team0 (unregistering): Port device team_slave_1 removed [ 211.482135][ T11] team0 (unregistering): Port device team_slave_0 removed [ 211.724445][ T7262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.854317][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.927873][ T7263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.954126][ T7263] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.045452][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.096735][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.145601][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.152797][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.211422][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.218639][ T5541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.407946][ T937] usb 2-1: USB disconnect, device number 14 [ 212.421948][ T7119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.503059][ T7119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.559179][ T7119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.582136][ T5280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.611341][ T7119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.623768][ T5280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.644259][ T5280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.670933][ T5280] rtc_cmos 00:00: Alarms can be up to one day in the future [ 212.683958][ T5280] rtc rtc0: __rtc_set_alarm: err=-22 [ 212.707665][ T11] IPVS: stop unused estimator thread 0... [ 212.823244][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.187514][ T7288] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 213.354664][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.417059][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.544725][ T7077] veth0_vlan: entered promiscuous mode [ 213.557337][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.564607][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.603073][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.610317][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.764554][ T7077] veth1_vlan: entered promiscuous mode [ 213.783714][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 213.783733][ T29] audit: type=1326 audit(1727256694.143:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7298 comm="syz.2.357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x0 [ 213.785786][ T7077] veth0_macvtap: entered promiscuous mode [ 213.824312][ T7077] veth1_macvtap: entered promiscuous mode [ 213.841368][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.852318][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.862558][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.873666][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.883915][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.894776][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.907469][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.027310][ T7119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 214.082287][ T7119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.194142][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.347240][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.365141][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.382436][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.401006][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.425062][ T7077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.454579][ T7077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.529693][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.687314][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.760009][ T7326] batman_adv: batadv0: Adding interface: wlan1 [ 214.766221][ T7326] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.803015][ T7326] batman_adv: batadv0: Interface activated: wlan1 [ 214.828876][ T7327] batman_adv: batadv0: Interface deactivated: wlan1 [ 214.971854][ T7329] batman_adv: batadv0: Removing interface: wlan1 [ 214.974637][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.018253][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.041180][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.050376][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.067100][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.080120][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.108462][ T46] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.132493][ T7077] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.150280][ T7077] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.162198][ T7077] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.171659][ T7077] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.212154][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.258496][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 215.273337][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.273571][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.297805][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.308811][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.319621][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.336926][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.346532][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.394588][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.537043][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.571137][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.617827][ T46] usb 3-1: usb_control_msg returned -32 [ 215.623777][ T46] usbtmc 3-1:16.0: can't read capabilities [ 215.715526][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.766175][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.855759][ T7119] veth0_vlan: entered promiscuous mode [ 215.890789][ T11] bridge_slave_1: left allmulticast mode [ 215.896512][ T11] bridge_slave_1: left promiscuous mode [ 215.938475][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.989113][ T11] bridge_slave_0: left allmulticast mode [ 216.000057][ T11] bridge_slave_0: left promiscuous mode [ 216.015774][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.331665][ T7371] netlink: 'syz.1.366': attribute type 16 has an invalid length. [ 216.360312][ T7371] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 216.381557][ T7371] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.366'. [ 216.428406][ T46] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 216.606765][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.620794][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 216.649161][ T46] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 216.651097][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.665273][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.699691][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.725202][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.849783][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.910039][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.999169][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.148288][ T5235] Bluetooth: hci1: command tx timeout [ 217.254025][ T46] usb 4-1: usb_control_msg returned -32 [ 217.261199][ T46] usbtmc 4-1:16.0: can't read capabilities [ 217.394559][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.421551][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.445165][ T11] bond0 (unregistering): Released all slaves [ 217.507697][ T7336] chnl_net:caif_netlink_parms(): no params data found [ 217.618565][ T11] IPVS: stopping backup sync thread 6547 ... [ 217.690507][ T7119] veth1_vlan: entered promiscuous mode [ 217.747621][ T7329] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 217.748205][ T46] usb 3-1: USB disconnect, device number 16 [ 218.092523][ T7119] veth0_macvtap: entered promiscuous mode [ 218.111105][ T7119] veth1_macvtap: entered promiscuous mode [ 218.281947][ T29] audit: type=1326 audit(1727256698.623:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.2.370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe60377def9 code=0x0 [ 218.364996][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.379010][ T7336] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.386634][ T7336] bridge_slave_0: entered allmulticast mode [ 218.398670][ T7336] bridge_slave_0: entered promiscuous mode [ 218.407509][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.428519][ T7336] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.438943][ T7336] bridge_slave_1: entered allmulticast mode [ 218.445889][ T7336] bridge_slave_1: entered promiscuous mode [ 218.503497][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.514750][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.526092][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.538211][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.550325][ T5235] Bluetooth: hci5: ISO packet too small [ 218.557082][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.581601][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.595419][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.609041][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.629568][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.668600][ T7336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.704646][ T11] hsr_slave_0: left promiscuous mode [ 218.714332][ T11] hsr_slave_1: left promiscuous mode [ 218.730546][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.744213][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.764727][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.781549][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.808144][ T5224] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.849625][ T11] veth1_macvtap: left promiscuous mode [ 218.855583][ T11] veth0_macvtap: left promiscuous mode [ 218.863705][ T11] veth1_vlan: left promiscuous mode [ 218.869690][ T11] veth0_vlan: left promiscuous mode [ 218.986836][ T5224] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 219.030514][ T5224] usb 2-1: config 0 has no interface number 0 [ 219.043565][ T5224] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 219.054532][ T5224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.079533][ T5224] usb 2-1: Product: syz [ 219.089535][ T5224] usb 2-1: Manufacturer: syz [ 219.104964][ T5224] usb 2-1: SerialNumber: syz [ 219.120252][ T5224] usb 2-1: config 0 descriptor?? [ 219.228187][ T5235] Bluetooth: hci1: command tx timeout [ 219.238357][ T5280] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 219.321691][ T5224] usb 4-1: USB disconnect, device number 26 [ 219.412853][ T7430] x_tables: unsorted underflow at hook 2 [ 219.419274][ T5280] usb 3-1: Using ep0 maxpacket: 8 [ 219.428464][ T5280] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 219.447079][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 219.476733][ T5280] usb 3-1: Product: syz [ 219.496386][ T5280] usb 3-1: Manufacturer: syz [ 219.511898][ T5280] usb 3-1: SerialNumber: syz [ 219.530275][ T5280] usb 3-1: config 0 descriptor?? [ 219.541960][ T5280] usbtest 3-1:0.0: FX2 device [ 219.546849][ T5280] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 219.906964][ T7435] fuse: Bad value for 'group_id' [ 219.912157][ T7435] fuse: Bad value for 'group_id' [ 220.102917][ T11] team0 (unregistering): Port device team_slave_1 removed [ 220.173448][ T11] team0 (unregistering): Port device team_slave_0 removed [ 220.875626][ T7336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.939131][ T937] usb 2-1: USB disconnect, device number 15 [ 220.951742][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.953083][ T46] usb 3-1: USB disconnect, device number 17 [ 220.970923][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.992814][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.005758][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.038377][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.072753][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.094301][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.146189][ T7119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.169018][ T7119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.178356][ T7119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.187095][ T7119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.278334][ T7336] team0: Port device team_slave_0 added [ 221.292832][ T7336] team0: Port device team_slave_1 added [ 221.308666][ T5235] Bluetooth: hci1: command tx timeout [ 221.403558][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.443270][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.482736][ T7336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.564185][ T7336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.571461][ T11] IPVS: stop unused estimator thread 0... [ 221.579263][ T7336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.703336][ T7336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.849352][ T4216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.867929][ T4216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.881180][ T7448] input: syz0 as /devices/virtual/input/input13 [ 221.897373][ T7336] hsr_slave_0: entered promiscuous mode [ 221.925576][ T7336] hsr_slave_1: entered promiscuous mode [ 222.030841][ T5279] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.179041][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.203856][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 222.221393][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.234153][ T5279] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 222.280723][ T5279] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 222.320920][ T5279] usb 3-1: New USB device strings: Mfr=251, Product=1, SerialNumber=3 [ 222.352371][ T5279] usb 3-1: Product: syz [ 222.367319][ T5279] usb 3-1: Manufacturer: syz [ 222.389892][ T5279] usb 3-1: SerialNumber: syz [ 222.449045][ T5279] usb 3-1: config 0 descriptor?? [ 222.474037][ T5279] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 222.504069][ T5279] usb 3-1: Detected FT2232C/D [ 222.682520][ T7456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.028197][ T5222] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 223.200972][ T5222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.238854][ T5222] usb 1-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 223.262145][ T5222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.316913][ T5222] usb 1-1: config 0 descriptor?? [ 223.345867][ T5222] usb 1-1: bad CDC descriptors [ 223.388416][ T5235] Bluetooth: hci1: command tx timeout [ 223.583557][ T5222] usb 1-1: USB disconnect, device number 19 [ 223.900272][ T7336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.963410][ T7336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.006148][ T7336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.026016][ T7336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.397801][ T7336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.456194][ T29] audit: type=1326 audit(1727256704.813:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.1.381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 224.516078][ T7336] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.545933][ T7495] lo: entered promiscuous mode [ 224.575092][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.582465][ T5541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.604452][ T7490] lo: left promiscuous mode [ 224.644034][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.651207][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.906386][ T5279] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 224.957200][ T5279] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 224.975068][ T7336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.019991][ T7500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'. [ 225.036187][ T5279] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 225.103829][ T5279] usb 3-1: USB disconnect, device number 18 [ 225.171801][ T5279] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 225.173166][ T7336] veth0_vlan: entered promiscuous mode [ 225.237701][ T5279] ftdi_sio 3-1:0.0: device disconnected [ 225.249628][ T7336] veth1_vlan: entered promiscuous mode [ 225.321165][ T7336] veth0_macvtap: entered promiscuous mode [ 225.564979][ T7336] veth1_macvtap: entered promiscuous mode [ 225.788451][ T5279] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 225.892056][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.981792][ T7527] syz.1.390 uses obsolete (PF_INET,SOCK_PACKET) [ 226.048417][ T5279] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 226.069329][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.077359][ T5279] usb 3-1: Product: syz [ 226.115928][ T5279] usb 3-1: Manufacturer: syz [ 226.120762][ T5279] usb 3-1: SerialNumber: syz [ 226.134578][ T5279] usb 3-1: config 0 descriptor?? [ 226.393333][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.405525][ T5224] usb 3-1: USB disconnect, device number 19 [ 226.551480][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.598241][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.650964][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.713100][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.774785][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.884064][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.914589][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.965641][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.002466][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.132814][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.197498][ T7547] netdevsim netdevsim0: Direct firmware load for WZ failed with error -2 [ 227.209731][ T7547] netdevsim netdevsim0: Falling back to sysfs fallback for: WZ [ 227.300311][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.310087][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.320278][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.333832][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.362554][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.372734][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.403013][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.465649][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.526868][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.569840][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.612023][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.653272][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.702158][ T7336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.765173][ T7336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.785432][ T7336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.858183][ T5224] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.917279][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.025639][ T7336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.036081][ T29] audit: type=1326 audit(1727256708.393:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b0737def9 code=0x0 [ 228.037829][ T7336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.079522][ T5224] usb 2-1: Using ep0 maxpacket: 32 [ 228.086529][ T7336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.096509][ T7336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.119173][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.138427][ T5224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.163926][ T5224] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 228.180560][ T5224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.243879][ T5224] usb 2-1: config 0 descriptor?? [ 228.621717][ T35] bridge_slave_1: left allmulticast mode [ 228.629042][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.636978][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.651778][ T35] bridge_slave_1: left promiscuous mode [ 228.657577][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.692278][ T7573] sg_write: process 78 (syz.2.396) changed security contexts after opening file descriptor, this is not allowed. [ 228.710746][ T35] bridge_slave_0: left allmulticast mode [ 228.716606][ T35] bridge_slave_0: left promiscuous mode [ 228.722550][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.734082][ T5224] kye 0003:0458:5016.0006: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 228.756188][ T5224] kye 0003:0458:5016.0006: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 228.767808][ T5224] kye 0003:0458:5016.0006: tablet-enabling feature report not found [ 228.776302][ T5224] kye 0003:0458:5016.0006: tablet enabling failed [ 228.937291][ T5224] usb 2-1: USB disconnect, device number 16 [ 229.272419][ T7586] loop7: detected capacity change from 0 to 2 [ 229.371792][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.384041][ T7586] Dev loop7: unable to read RDB block 2 [ 229.390461][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.396793][ T7586] loop7: unable to read partition table [ 229.405323][ T7586] loop7: partition table beyond EOD, truncated [ 229.414034][ T35] bond0 (unregistering): Released all slaves [ 229.417604][ T7586] loop_reread_partitions: partition scan of loop7 (SaEǷ>#|J_diV3Q~d!=U5hcs-3hгJHv>l,) failed (rc=-5) [ 229.478519][ T5235] Bluetooth: hci2: command tx timeout [ 229.524874][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 229.635696][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.672428][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.804000][ T7589] netlink: 'syz.2.402': attribute type 8 has an invalid length. [ 230.265126][ T35] hsr_slave_0: left promiscuous mode [ 230.300778][ T35] hsr_slave_1: left promiscuous mode [ 230.341121][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.359341][ T7621] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 230.364747][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.373607][ T7621] PKCS7: Only support pkcs7_signedData type [ 230.397517][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.418318][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.449833][ T29] audit: type=1326 audit(1727256710.813:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7612 comm="syz.0.405" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b0737def9 code=0x0 [ 230.475855][ T35] veth1_macvtap: left promiscuous mode [ 230.492285][ T35] veth0_macvtap: left promiscuous mode [ 230.507731][ T35] veth1_vlan: left promiscuous mode [ 230.524874][ T35] veth0_vlan: left promiscuous mode [ 230.599237][ T5292] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 230.768155][ T5292] usb 2-1: Using ep0 maxpacket: 16 [ 230.796063][ T5292] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 230.830124][ T5292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.849738][ T5292] usb 2-1: Product: syz [ 230.856153][ T5292] usb 2-1: Manufacturer: syz [ 230.865917][ T5292] usb 2-1: SerialNumber: syz [ 230.891684][ T5292] r8152-cfgselector 2-1: Unknown version 0x0000 [ 230.901781][ T5292] r8152-cfgselector 2-1: config 0 descriptor?? [ 231.550485][ T5235] Bluetooth: hci2: command tx timeout [ 231.565242][ T35] team0 (unregistering): Port device team_slave_1 removed [ 231.750756][ T35] team0 (unregistering): Port device team_slave_0 removed [ 232.632968][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.653409][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.675024][ T7551] bridge_slave_0: entered allmulticast mode [ 232.697514][ T7551] bridge_slave_0: entered promiscuous mode [ 232.738722][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.773012][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.804184][ T7551] bridge_slave_1: entered allmulticast mode [ 232.826930][ T7551] bridge_slave_1: entered promiscuous mode [ 232.983359][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.056519][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.167581][ T7643] geneve0: entered promiscuous mode [ 233.202549][ T7643] macvlan2: entered promiscuous mode [ 233.215653][ T7643] macvlan2: entered allmulticast mode [ 233.232689][ T7643] geneve0: entered allmulticast mode [ 233.316007][ T7551] team0: Port device team_slave_0 added [ 233.357103][ T7551] team0: Port device team_slave_1 added [ 233.528673][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.547364][ T5292] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 233.578513][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.626164][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.639295][ T5235] Bluetooth: hci2: command tx timeout [ 233.664537][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.673450][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.700287][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.005240][ T7551] hsr_slave_0: entered promiscuous mode [ 234.048908][ T7551] hsr_slave_1: entered promiscuous mode [ 234.128521][ T7551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.145721][ T7551] Cannot create hsr debugfs directory [ 234.792074][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.040015][ T29] audit: type=1326 audit(1727256715.373:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7683 comm="syz.1.420" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 235.041910][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.310493][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.565901][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.593612][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.604695][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.614079][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.622681][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.630578][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.646705][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.708261][ T5235] Bluetooth: hci2: command tx timeout [ 235.843951][ T7712] pim6reg: entered allmulticast mode [ 236.000107][ T7720] pim6reg: left allmulticast mode [ 236.699636][ T11] bridge_slave_1: left allmulticast mode [ 236.705447][ T11] bridge_slave_1: left promiscuous mode [ 236.740178][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.795542][ T7741] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 236.821600][ T11] bridge_slave_0: left allmulticast mode [ 236.827397][ T11] bridge_slave_0: left promiscuous mode [ 236.839596][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.238317][ T5222] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 237.411720][ T5222] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 237.436132][ T5222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.472486][ T5222] usb 5-1: config 0 descriptor?? [ 237.708188][ T5235] Bluetooth: hci3: command tx timeout [ 238.114611][ T7749] SET target dimension over the limit! [ 238.195012][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.220299][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.247830][ T11] bond0 (unregistering): Released all slaves [ 238.321814][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 238.377319][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 238.476647][ T7551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.639845][ T7551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.716387][ T7551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.736335][ T7551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.738345][ T7795] sctp: [Deprecated]: syz.2.434 (pid 7795) Use of int in max_burst socket option. [ 238.738345][ T7795] Use struct sctp_assoc_value instead [ 238.880905][ T29] audit: type=1326 audit(1727256719.243:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7788 comm="syz.1.433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 238.902620][ C1] vkms_vblank_simulate: vblank timer overrun [ 238.935071][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.942497][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.951840][ T7713] bridge_slave_0: entered allmulticast mode [ 238.966003][ T7713] bridge_slave_0: entered promiscuous mode [ 238.984255][ T11] hsr_slave_0: left promiscuous mode [ 238.996751][ T11] hsr_slave_1: left promiscuous mode [ 239.004338][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.012453][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.021208][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.028844][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.055879][ T11] veth1_macvtap: left promiscuous mode [ 239.061744][ T11] veth0_macvtap: left promiscuous mode [ 239.067474][ T11] veth1_vlan: left promiscuous mode [ 239.073546][ T11] veth0_vlan: left promiscuous mode [ 239.207444][ T5222] usb 5-1: Cannot set autoneg [ 239.212537][ T5222] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 239.227914][ T5222] usb 5-1: USB disconnect, device number 19 [ 239.780384][ T11] team0 (unregistering): Port device team_slave_1 removed [ 239.788210][ T5235] Bluetooth: hci3: command tx timeout [ 239.938822][ T11] team0 (unregistering): Port device team_slave_0 removed [ 240.917658][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.933831][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.942527][ T7713] bridge_slave_1: entered allmulticast mode [ 240.956739][ T7713] bridge_slave_1: entered promiscuous mode [ 241.047413][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.104725][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.296599][ T7713] team0: Port device team_slave_0 added [ 241.323919][ T7713] team0: Port device team_slave_1 added [ 241.405222][ T29] audit: type=1326 audit(1727256721.753:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7827 comm="syz.1.443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5837def9 code=0x0 [ 241.473981][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.491636][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.586708][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.627150][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.652985][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.736909][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.845255][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.869419][ T5235] Bluetooth: hci3: command tx timeout [ 241.881011][ T7822] dccp_close: ABORT with 32 bytes unread [ 242.024257][ T7713] hsr_slave_0: entered promiscuous mode [ 242.068677][ T7713] hsr_slave_1: entered promiscuous mode [ 242.134766][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.174775][ T7713] Cannot create hsr debugfs directory [ 242.468691][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.482314][ T7857] netlink: 'syz.2.446': attribute type 12 has an invalid length. [ 242.549150][ T7857] netlink: 'syz.2.446': attribute type 11 has an invalid length. [ 242.570826][ T7857] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.446'. [ 242.621730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.628951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.688926][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.696047][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.521069][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.948356][ T5235] Bluetooth: hci3: command tx timeout [ 244.112910][ T7551] veth0_vlan: entered promiscuous mode [ 244.200029][ T7551] veth1_vlan: entered promiscuous mode [ 244.270941][ T7888] coredump: 158(syz.2.452): interrupted: fatal signal pending [ 244.304512][ T7888] coredump: 158(syz.2.452): written to core: VMAs: 36, size 97419264; core: 4166710 bytes, pos 4861952 [ 244.342961][ T7551] veth0_macvtap: entered promiscuous mode [ 244.415481][ T7551] veth1_macvtap: entered promiscuous mode [ 244.555916][ T7713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.617262][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.661268][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.677674][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.716382][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.745541][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.756378][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.791551][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.857712][ T7713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.973968][ T7713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.095353][ T5222] IPVS: starting estimator thread 0... [ 245.192882][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.208169][ T7922] IPVS: using max 19 ests per chain, 45600 per kthread [ 245.270280][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.285297][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.335462][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.347184][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.365906][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.396310][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.419368][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.568219][ T7713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.616161][ T7551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.636113][ T7551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.676196][ T7551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.685457][ T7551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.717269][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.737640][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.799261][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.807583][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.832019][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.840259][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.940845][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.151511][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.355510][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.437529][ T5541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.461819][ T5541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.579367][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.589583][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.598599][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.610701][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.615148][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.628543][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.638741][ T4216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.639308][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.654130][ T4216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.706420][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.820181][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.827429][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.943133][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.950307][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.004511][ T12] bridge_slave_1: left allmulticast mode [ 247.013493][ T12] bridge_slave_1: left promiscuous mode [ 247.022359][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.037716][ T12] bridge_slave_0: left allmulticast mode [ 247.043945][ T12] bridge_slave_0: left promiscuous mode [ 247.050404][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.741386][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.753633][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.765725][ T12] bond0 (unregistering): Released all slaves [ 247.948130][ T5231] Bluetooth: hci0: command tx timeout [ 247.979213][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 248.215235][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.247038][ T7713] veth0_vlan: entered promiscuous mode [ 248.258685][ T7713] veth1_vlan: entered promiscuous mode [ 248.365611][ T7972] binder: 7965:7972 ioctl c0306201 0 returned -14 [ 248.635291][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.653991][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.665189][ T7937] bridge_slave_0: entered allmulticast mode [ 248.684110][ T7937] bridge_slave_0: entered promiscuous mode [ 248.712901][ T7713] veth0_macvtap: entered promiscuous mode [ 248.748326][ T5231] Bluetooth: hci4: command tx timeout [ 248.757114][ T12] hsr_slave_0: left promiscuous mode [ 248.773661][ T12] hsr_slave_1: left promiscuous mode [ 248.787289][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.811222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.822252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.834328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.860968][ T12] veth1_macvtap: left promiscuous mode [ 248.867253][ T12] veth0_macvtap: left promiscuous mode [ 248.873275][ T12] veth1_vlan: left promiscuous mode [ 248.879348][ T12] veth0_vlan: left promiscuous mode [ 249.644493][ T12] team0 (unregistering): Port device team_slave_1 removed [ 249.768654][ T12] team0 (unregistering): Port device team_slave_0 removed [ 250.025239][ T7982] delete_channel: no stack [ 250.038582][ T5231] Bluetooth: hci0: command tx timeout [ 250.644023][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.653725][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.672271][ T7937] bridge_slave_1: entered allmulticast mode [ 250.685213][ T7937] bridge_slave_1: entered promiscuous mode [ 250.720391][ T7713] veth1_macvtap: entered promiscuous mode [ 250.779439][ T7950] chnl_net:caif_netlink_parms(): no params data found [ 250.838912][ T5231] Bluetooth: hci4: command tx timeout [ 250.875069][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.901974][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.923923][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.948030][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.969133][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.989195][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.019480][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.080215][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.128640][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.334771][ T7937] team0: Port device team_slave_0 added [ 251.364973][ T7937] team0: Port device team_slave_1 added [ 251.390399][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.401146][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.411996][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.423089][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.435247][ T7713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.446209][ T7713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.469105][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.667207][ T7950] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.676148][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.704669][ T7950] bridge_slave_0: entered allmulticast mode [ 251.718120][ T7950] bridge_slave_0: entered promiscuous mode [ 251.773759][ T7713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.788730][ T7713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.807497][ T7713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.826141][ T7713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.838564][ T7950] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.845688][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.865160][ T7950] bridge_slave_1: entered allmulticast mode [ 251.873393][ T7950] bridge_slave_1: entered promiscuous mode [ 251.889998][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.905877][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.931810][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.950724][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.982810][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.993452][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.020308][ T5222] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.043449][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.064655][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.080507][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.091197][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.100462][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.109338][ T5235] Bluetooth: hci0: command tx timeout [ 252.117344][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 252.126352][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.172122][ T7950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.184275][ T5222] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.197489][ T5222] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 252.209774][ T5222] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 252.220471][ T5222] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.238065][ T5222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.255098][ T8001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 252.265805][ T5222] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 252.283002][ T7950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.391059][ T7950] team0: Port device team_slave_0 added [ 252.451189][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.483971][ T7950] team0: Port device team_slave_1 added [ 252.547310][ T7937] hsr_slave_0: entered promiscuous mode [ 252.558321][ T7937] hsr_slave_1: entered promiscuous mode [ 252.565196][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.573221][ T7937] Cannot create hsr debugfs directory [ 252.626056][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.657424][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.665006][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.690973][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.697873][ T7950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.758113][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.797190][ T5292] usb 5-1: USB disconnect, device number 20 [ 252.829388][ T7950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.836505][ T7950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.862786][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.877656][ T7950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.908571][ T5231] Bluetooth: hci4: command tx timeout [ 252.944320][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.002725][ T5483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.028342][ T5483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.097827][ T7950] hsr_slave_0: entered promiscuous mode [ 253.107166][ T7950] hsr_slave_1: entered promiscuous mode [ 253.116747][ T7950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.125571][ T7950] Cannot create hsr debugfs directory [ 253.367094][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.421701][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 253.482905][ T5541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.527579][ T5541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.620475][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.841212][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.890251][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.897498][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.918263][ T8011] bridge_slave_0: entered allmulticast mode [ 253.935738][ T8011] bridge_slave_0: entered promiscuous mode [ 254.049197][ T937] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.054162][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.070834][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.078203][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.085438][ T8011] bridge_slave_1: entered allmulticast mode [ 254.092638][ T8011] bridge_slave_1: entered promiscuous mode [ 254.188149][ T5231] Bluetooth: hci2: command tx timeout [ 254.188757][ T5235] Bluetooth: hci0: command tx timeout [ 254.230991][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.243586][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.253538][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 254.277437][ T937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 254.294571][ T937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8383, setting to 1024 [ 254.313756][ T937] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 254.324254][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.333603][ T937] usb 1-1: Product: ☜萏断鯿⎎緱殘꧃嫏לៈꚁﴍ固죝斈ﲩ䓙敥큑ꇖ橨駳蓅᧡㮱䔎﷯㔛嚴惶浞ౚᎮ屫㳛ㄛ쓉叺鯉莄靚Ὁ砵ڙᎸ뫸騸ᱚ梮 [ 254.384061][ T937] usb 1-1: Manufacturer: Т [ 254.404718][ T937] usb 1-1: SerialNumber: syz [ 254.532100][ T8011] team0: Port device team_slave_0 added [ 254.542890][ T8011] team0: Port device team_slave_1 added [ 254.733480][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.749932][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.796940][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.818557][ T12] bridge_slave_1: left allmulticast mode [ 254.829191][ T12] bridge_slave_1: left promiscuous mode [ 254.835060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.909225][ T12] bridge_slave_0: left allmulticast mode [ 254.933944][ T12] bridge_slave_0: left promiscuous mode [ 254.953780][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.982014][ T937] usbhid 1-1:1.0: can't add hid device: -71 [ 254.989009][ T5235] Bluetooth: hci4: command tx timeout [ 255.000667][ T12] bridge_slave_1: left allmulticast mode [ 255.006382][ T12] bridge_slave_1: left promiscuous mode [ 255.019188][ T937] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 255.051646][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.061273][ T937] usb 1-1: USB disconnect, device number 20 [ 255.108682][ T12] bridge_slave_0: left allmulticast mode [ 255.114406][ T12] bridge_slave_0: left promiscuous mode [ 255.140295][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.438103][ T46] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 255.600274][ T46] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 255.635723][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.667175][ T46] usb 5-1: config 0 descriptor?? [ 255.958526][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965146][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101726][ T46] ath6kl: Unsupported hardware version: 0x0 [ 256.123917][ T46] ath6kl: Failed to init ath6kl core: -22 [ 256.140646][ T46] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 256.278096][ T5235] Bluetooth: hci2: command tx timeout [ 256.521554][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.533644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.544785][ T12] bond0 (unregistering): Released all slaves [ 256.667909][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.684544][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.695963][ T12] bond0 (unregistering): Released all slaves [ 256.706825][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.714643][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.740980][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.959040][ T8011] hsr_slave_0: entered promiscuous mode [ 256.965855][ T8011] hsr_slave_1: entered promiscuous mode [ 256.975266][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.984146][ T8011] Cannot create hsr debugfs directory [ 257.310762][ T7937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.334957][ T7937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.360803][ T12] hsr_slave_0: left promiscuous mode [ 257.366779][ T12] hsr_slave_1: left promiscuous mode [ 257.372988][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.380665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.390014][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.397568][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.412948][ T12] hsr_slave_0: left promiscuous mode [ 257.420602][ T12] hsr_slave_1: left promiscuous mode [ 257.426732][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.434551][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.443568][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.451757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.459800][ T12] batman_adv: batadv0: Removing interface: ipvlan2 [ 257.492556][ T12] veth1_macvtap: left promiscuous mode [ 257.498407][ T12] veth0_macvtap: left promiscuous mode [ 257.503972][ T12] veth1_vlan: left promiscuous mode [ 257.509631][ T12] veth0_vlan: left promiscuous mode [ 257.515568][ T12] veth1_macvtap: left promiscuous mode [ 257.521272][ T12] veth0_macvtap: left promiscuous mode [ 257.527169][ T12] veth1_vlan: left promiscuous mode [ 257.533181][ T12] veth0_vlan: left promiscuous mode [ 257.971082][ T5279] usb 5-1: USB disconnect, device number 21 [ 258.190610][ T12] team0 (unregistering): Port device team_slave_1 removed [ 258.245558][ T8083] kvm: kvm [8082]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000 [ 258.259939][ T8083] kvm: kvm [8082]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 258.260167][ T12] team0 (unregistering): Port device team_slave_0 removed [ 258.288551][ T8083] kvm: kvm [8082]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 258.302379][ T8083] kvm: kvm [8082]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0xbe702131 [ 258.320090][ T8083] kvm: kvm [8082]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0xbe702131 [ 258.344573][ T8083] kvm_intel: kvm [8082]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0xbe702101 [ 258.354339][ T5235] Bluetooth: hci2: command tx timeout [ 259.684475][ T12] team0 (unregistering): Port device team_slave_1 removed [ 259.734017][ T12] team0 (unregistering): Port device team_slave_0 removed [ 260.130029][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 260.140679][ T8093] netlink: 148 bytes leftover after parsing attributes in process `syz.4.481'. [ 260.313586][ T7937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.333441][ T7937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.376897][ T8093] netlink: 'syz.4.481': attribute type 29 has an invalid length. [ 260.387973][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 260.431504][ T5235] Bluetooth: hci2: command tx timeout [ 260.512932][ T7950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.559437][ T7950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.698868][ T7950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.751943][ T7950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.799009][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 261.029646][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 261.056198][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 261.077860][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.096101][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.131954][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.171289][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.192619][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.236157][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.268919][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.334233][ T5483] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.341465][ T5483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.369123][ T5483] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.376324][ T5483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.433734][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.445216][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.488209][ T7950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.493424][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.502449][ T9] usb 5-1: usb_control_msg returned -32 [ 261.509738][ T9] usbtmc 5-1:16.0: can't read capabilities [ 261.524600][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.535481][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 261.543682][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.627860][ T7950] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.683553][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.690739][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.710977][ T8011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.724147][ T8011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.747284][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.754445][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.780023][ T8011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.804396][ T8011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.851937][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 261.877110][ T8114] usbtmc 5-1:16.0: Unable to send data, error -71 [ 261.939863][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.027413][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.084370][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.221131][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.305422][ T8112] chnl_net:caif_netlink_parms(): no params data found [ 262.342572][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.374109][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.613260][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.626548][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.636987][ T8112] bridge_slave_0: entered allmulticast mode [ 262.650485][ T8112] bridge_slave_0: entered promiscuous mode [ 262.681408][ T7937] veth0_vlan: entered promiscuous mode [ 262.693339][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.721496][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.735578][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.744979][ T8112] bridge_slave_1: entered allmulticast mode [ 262.760168][ T8112] bridge_slave_1: entered promiscuous mode [ 262.844620][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.865929][ T12] bridge_slave_1: left allmulticast mode [ 262.877211][ T12] bridge_slave_1: left promiscuous mode [ 262.886883][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.897437][ T12] bridge_slave_0: left allmulticast mode [ 262.903618][ T12] bridge_slave_0: left promiscuous mode [ 262.910128][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.264802][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.276797][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.288326][ T12] bond0 (unregistering): Released all slaves [ 263.304564][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.347605][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.356641][ T7937] veth1_vlan: entered promiscuous mode [ 263.411209][ T8112] team0: Port device team_slave_0 added [ 263.453749][ T7950] veth0_vlan: entered promiscuous mode [ 263.466992][ T8112] team0: Port device team_slave_1 added [ 263.492359][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.499526][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.581216][ T8] usb 5-1: USB disconnect, device number 22 [ 263.628716][ T5231] Bluetooth: hci3: command tx timeout [ 263.656420][ T8148] xt_l2tp: v2 doesn't support IP mode [ 263.665285][ T29] audit: type=1326 audit(1727256744.023:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8147 comm="syz.4.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd94537def9 code=0x0 [ 263.667856][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.697753][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.724805][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.737806][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.744913][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.776232][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.800380][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.807534][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.845750][ T7950] veth1_vlan: entered promiscuous mode [ 263.903906][ T12] hsr_slave_0: left promiscuous mode [ 263.911079][ T12] hsr_slave_1: left promiscuous mode [ 263.930334][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.942082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.955440][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.965794][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.007849][ T12] veth1_macvtap: left promiscuous mode [ 264.016266][ T12] veth0_macvtap: left promiscuous mode [ 264.027407][ T12] veth1_vlan: left promiscuous mode [ 264.035492][ T12] veth0_vlan: left promiscuous mode [ 264.722535][ T12] team0 (unregistering): Port device team_slave_1 removed [ 264.789090][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.522530][ T8112] hsr_slave_0: entered promiscuous mode [ 265.542448][ T8112] hsr_slave_1: entered promiscuous mode [ 265.558792][ T8112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.566397][ T8112] Cannot create hsr debugfs directory [ 265.609083][ T8011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.707719][ T7950] veth0_macvtap: entered promiscuous mode [ 265.718495][ T5231] Bluetooth: hci3: command tx timeout [ 265.729738][ T7950] veth1_macvtap: entered promiscuous mode [ 265.825390][ T8169] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(70198957492252) <= P.seqno(0) <= S.SWH(70198957492326)) and (P.ackno exists or LAWL(166018233195392) <= P.ackno(166018233195393) <= S.AWH(166018233195393), sending SYNC... [ 265.874693][ T7937] veth0_macvtap: entered promiscuous mode [ 265.916564][ T7937] veth1_macvtap: entered promiscuous mode [ 265.928971][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.940544][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.953082][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.965125][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.084678][ T7950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.096185][ T7950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.108927][ T7950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.165226][ T7950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.185070][ T7950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.204820][ T7950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.229365][ T7950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.288454][ T5277] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.337538][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.358878][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.379629][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.396123][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.415379][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.454687][ T5277] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.486401][ T5277] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.512097][ T5277] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.539956][ T5277] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 266.570159][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.603394][ T8178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 266.656219][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.667259][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.678027][ T7937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.688780][ T7937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.702132][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.712351][ T7937] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.721235][ T7937] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.730503][ T7937] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.739575][ T7937] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.891393][ T8011] veth0_vlan: entered promiscuous mode [ 266.987708][ T8011] veth1_vlan: entered promiscuous mode [ 267.133350][ T8011] veth0_macvtap: entered promiscuous mode [ 267.151946][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.161386][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.203783][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.218142][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.225958][ T8011] veth1_macvtap: entered promiscuous mode [ 267.313791][ T8085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.346253][ T8085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.364334][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.379529][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.402914][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.427312][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.468203][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.498517][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.526868][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.554348][ T8112] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.569582][ T8112] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.596941][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.627198][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.647005][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.665425][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.676466][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.692713][ T5277] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 267.706020][ T5277] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input14 [ 267.717759][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.739400][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.761018][ T5277] usb 5-1: USB disconnect, device number 23 [ 267.766986][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 267.774217][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.800317][ T5231] Bluetooth: hci3: command tx timeout [ 267.809530][ T8112] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.826579][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.835412][ T8112] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.913233][ T8011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.945939][ T8011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.966101][ T8011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.980223][ T8011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.196803][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.218392][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.220891][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.316933][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.323963][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.352255][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.417035][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.424349][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.475277][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.482500][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.714732][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.818325][ T5224] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 268.820434][ T8112] veth0_vlan: entered promiscuous mode [ 268.974391][ T8112] veth1_vlan: entered promiscuous mode [ 268.989331][ T5224] usb 3-1: Using ep0 maxpacket: 8 [ 269.001087][ T5224] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 269.025450][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.077774][ T5224] usb 3-1: Product: syz [ 269.095020][ T5224] usb 3-1: Manufacturer: syz [ 269.132307][ T5224] usb 3-1: SerialNumber: syz [ 269.135869][ T8112] veth0_macvtap: entered promiscuous mode [ 269.181725][ T5224] usb 3-1: config 0 descriptor?? [ 269.223238][ T8112] veth1_macvtap: entered promiscuous mode [ 269.433471][ T5224] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 269.447749][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.541489][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.571550][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.618127][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.638552][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.651736][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.687865][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.728066][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.766965][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.830118][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.864586][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.874754][ T5231] Bluetooth: hci3: command tx timeout [ 269.883893][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.896308][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.912697][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.924769][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.934821][ T8112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.945682][ T8112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.957678][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.970155][ T29] audit: type=1326 audit(1727256750.333:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.4.493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd94537def9 code=0x0 [ 270.085148][ T8112] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.113645][ T8112] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.161559][ T8112] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.182103][ T8112] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.409995][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.429019][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 270.452528][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.553363][ T8085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.589252][ T8085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.630238][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.657329][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.716772][ T9] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 270.747672][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.819858][ T9] usb 2-1: config 0 descriptor?? [ 271.141582][ T5224] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 271.181229][ T5224] usb 3-1: USB disconnect, device number 20 [ 271.328319][ T5277] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 271.488350][ T9] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 271.528179][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 271.540748][ T9] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized [ 271.553647][ T5277] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 271.553683][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.553708][ T5277] usb 1-1: Product: syz [ 271.553727][ T5277] usb 1-1: Manufacturer: syz [ 271.553746][ T5277] usb 1-1: SerialNumber: syz [ 271.609937][ T5277] usb 1-1: config 0 descriptor?? [ 271.612303][ T5277] appledisplay 1-1:0.0: Could not find int-in endpoint [ 271.613622][ T5277] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 271.759808][ T8300] xt_nat: multiple ranges no longer supported [ 271.831676][ T8299] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.500'. [ 271.831742][ T8299] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 271.914691][ T5224] usb 1-1: USB disconnect, device number 21 [ 272.480974][ T5276] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 272.529363][ T8310] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 272.706273][ T5276] usb 4-1: config 0 has no interfaces? [ 272.732511][ T5276] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 272.765906][ T5276] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.788421][ T46] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 272.789818][ T5276] usb 4-1: Product: syz [ 272.814155][ T5276] usb 4-1: Manufacturer: syz [ 272.843936][ T5276] usb 4-1: SerialNumber: syz [ 272.878281][ T5276] usb 4-1: config 0 descriptor?? [ 272.971913][ T5276] usb 2-1: USB disconnect, device number 18 [ 273.011994][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.046673][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.075457][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.110066][ T46] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 273.176887][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.247070][ T46] usb 1-1: config 0 descriptor?? [ 273.314324][ T5231] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 273.323141][ T5231] Bluetooth: hci2: Injecting HCI hardware error event [ 273.332225][ T5231] Bluetooth: hci2: hardware error 0x00 [ 273.664716][ T8305] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 273.721252][ T5277] usb 4-1: USB disconnect, device number 27 [ 273.764051][ T46] hid-udraw 0003:20D6:CB17.0008: unknown main item tag 0x0 [ 273.774684][ T46] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input16 [ 273.855088][ T46] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input17 [ 273.906778][ T46] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input18 [ 273.930006][ T46] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:20D6:CB17.0008/input/input19 [ 273.987777][ T46] hid-udraw 0003:20D6:CB17.0008: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.0-1/input0 [ 274.210534][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'. [ 274.252229][ T8340] bridge_slave_1: left allmulticast mode [ 274.259159][ T5277] usb 1-1: USB disconnect, device number 22 [ 274.274294][ T8340] bridge_slave_1: left promiscuous mode [ 274.284384][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.298660][ T5280] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 274.466384][ T8340] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 274.490621][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 274.519340][ T5280] usb 5-1: config index 0 descriptor too short (expected 17417, got 9) [ 274.545828][ T5280] usb 5-1: config 225 has too many interfaces: 34, using maximum allowed: 32 [ 274.562549][ T5280] usb 5-1: config 225 has 0 interfaces, different from the descriptor's value: 34 [ 274.578175][ T5280] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 6.0f [ 274.594795][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.839672][ T5280] usb 5-1: string descriptor 0 read error: -71 [ 274.868170][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 274.887288][ T5280] usb 5-1: USB disconnect, device number 24 [ 275.069252][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.091806][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.103216][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 275.114816][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.131874][ T9] usb 4-1: config 0 descriptor?? [ 275.328322][ T5280] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 275.489901][ T5277] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 275.499666][ T5280] usb 1-1: Using ep0 maxpacket: 16 [ 275.524615][ T5280] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 275.535678][ T5280] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.549094][ T5231] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 275.562815][ T9] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 275.582988][ T5280] usb 1-1: Product: syz [ 275.592941][ T9] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 275.606260][ T5280] usb 1-1: Manufacturer: syz [ 275.611327][ T5280] usb 1-1: SerialNumber: syz [ 275.635201][ T5280] usb 1-1: config 0 descriptor?? [ 275.654086][ T5280] appledisplay 1-1:0.0: Could not find int-in endpoint [ 275.669626][ T5280] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 275.690295][ T5277] usb 3-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=fc.b9 [ 275.701911][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.714438][ T5277] usb 3-1: Product: syz [ 275.719017][ T5277] usb 3-1: Manufacturer: syz [ 275.723966][ T5277] usb 3-1: SerialNumber: syz [ 275.735228][ T5277] usb 3-1: config 0 descriptor?? [ 275.750175][ T5277] cypress_m8 3-1:0.0: DeLorme Earthmate USB converter detected [ 275.759453][ T9] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 275.767851][ T5277] earthmate ttyUSB0: required endpoint is missing [ 275.878128][ T5224] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 275.906794][ T5277] usb 1-1: USB disconnect, device number 23 [ 276.022633][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.041517][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 276.051862][ T5224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 276.063216][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.072642][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 276.087261][ T5224] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 276.121341][ T5224] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 276.136917][ T5224] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.160647][ T5224] usb 5-1: Product: syz [ 276.168151][ T5224] usb 5-1: Manufacturer: syz [ 276.172797][ T5224] usb 5-1: SerialNumber: syz [ 276.206322][ T5224] usb 5-1: config 0 descriptor?? [ 276.229932][ T5224] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 276.256948][ T5224] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB1 [ 276.387653][ T8346] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 276.652730][ T5280] usb 4-1: USB disconnect, device number 28 [ 276.814585][ T9] usb 5-1: USB disconnect, device number 25 [ 276.827548][ T9] ti_usb_3410_5052_1 ttyUSB1: TI USB 3410 1 port adapter converter now disconnected from ttyUSB1 [ 276.925275][ T9] ti_usb_3410_5052 5-1:0.0: device disconnected [ 276.992085][ T8378] xt_limit: Overflow, try lower: 0/0 [ 277.600595][ T8386] binder: 8385:8386 unknown command 0 [ 277.693297][ T8386] binder: 8385:8386 ioctl c0306201 20000480 returned -22 [ 277.790203][ T8391] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 278.060306][ T5224] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 278.068107][ T5277] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 278.218346][ T5224] usb 4-1: Using ep0 maxpacket: 8 [ 278.232637][ T5277] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 278.248330][ T5224] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 278.259824][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.278190][ T3288] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 278.288181][ T5224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.300296][ T5277] usb 1-1: Product: syz [ 278.313250][ T5277] usb 1-1: Manufacturer: syz [ 278.319098][ T5222] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 278.326896][ T5224] usb 4-1: Product: syz [ 278.335149][ T5277] usb 1-1: SerialNumber: syz [ 278.340697][ T5224] usb 4-1: Manufacturer: syz [ 278.346443][ T5224] usb 4-1: SerialNumber: syz [ 278.354633][ T5277] usb 1-1: config 0 descriptor?? [ 278.369481][ T5277] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 278.379245][ T5224] usb 4-1: config 0 descriptor?? [ 278.408461][ T9] usb 3-1: USB disconnect, device number 21 [ 278.427380][ T9] cypress_m8 3-1:0.0: device disconnected [ 278.461104][ T3288] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.479246][ T3288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.489368][ T5222] usb 5-1: Using ep0 maxpacket: 8 [ 278.498886][ T5222] usb 5-1: unable to get BOS descriptor or descriptor too short [ 278.514680][ T3288] usb 2-1: config 0 descriptor?? [ 278.524504][ T5222] usb 5-1: config 8 has an invalid interface number: 165 but max is 0 [ 278.534490][ T5222] usb 5-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 278.536478][ T3288] cp210x 2-1:0.0: cp210x converter detected [ 278.554045][ T5222] usb 5-1: config 8 has no interface number 0 [ 278.569561][ T5222] usb 5-1: config 8 interface 165 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 278.627528][ T8405] Cannot find add_set index 0 as target [ 278.634731][ T5222] usb 5-1: config 8 interface 165 altsetting 1 bulk endpoint 0x8C has invalid maxpacket 4 [ 278.673788][ T5222] usb 5-1: config 8 interface 165 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.673818][ T5222] usb 5-1: config 8 interface 165 has no altsetting 0 [ 278.715669][ T5222] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=32.e3 [ 278.716252][ T5222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.718216][ T5222] usb 5-1: Product: ѕ [ 278.739962][ T5222] usb 5-1: Manufacturer: Б [ 278.766972][ T5222] usb 5-1: SerialNumber: syz [ 278.825556][ T8398] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22 [ 278.913962][ T8401] [ 278.913977][ T8401] ===================================================== [ 278.913986][ T8401] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 278.914000][ T8401] 6.11.0-syzkaller-10547-g684a64bf32b6 #0 Not tainted [ 278.914013][ T8401] ----------------------------------------------------- [ 278.914022][ T8401] syz.1.528/8401 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire: [ 278.914047][ T8401] ffff88807c8081e0 (&pch->downl){+.+.}-{2:2}, at: ppp_connect_channel+0x194/0x650 [ 278.914121][ T8401] [ 278.914121][ T8401] and this task is already holding: [ 278.914129][ T8401] ffff8880762a2e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 278.914191][ T8401] which would create a new lock dependency: [ 278.914199][ T8401] (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2} [ 278.914253][ T8401] [ 278.914253][ T8401] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 278.914265][ T8401] (&pch->upl){++.-}-{2:2} [ 278.914288][ T8401] [ 278.914288][ T8401] ... which became SOFTIRQ-READ-irq-safe at: [ 278.914300][ T8401] lock_acquire+0x1ed/0x550 [ 278.914332][ T8401] _raw_read_lock_bh+0x3d/0x50 [ 278.914356][ T8401] ppp_input_error+0x60/0x1b0 [ 278.914382][ T8401] ppp_sync_process+0x82/0x160 [ 278.914405][ T8401] tasklet_action_common+0x321/0x4d0 [ 278.914437][ T8401] handle_softirqs+0x2c5/0x980 [ 278.914464][ T8401] run_ksoftirqd+0xca/0x130 [ 278.914493][ T8401] smpboot_thread_fn+0x544/0xa30 [ 278.914523][ T8401] kthread+0x2f0/0x390 [ 278.914542][ T8401] ret_from_fork+0x4b/0x80 [ 278.914580][ T8401] ret_from_fork_asm+0x1a/0x30 [ 278.914613][ T8401] [ 278.914613][ T8401] to a SOFTIRQ-READ-irq-unsafe lock: [ 278.914622][ T8401] (&pch->downl){+.+.}-{2:2} [ 278.914646][ T8401] [ 278.914646][ T8401] ... which became SOFTIRQ-READ-irq-unsafe at: [ 278.914658][ T8401] ... [ 278.914663][ T8401] lock_acquire+0x1ed/0x550 [ 278.914695][ T8401] _raw_spin_lock+0x2e/0x40 [ 278.914716][ T8401] ppp_input+0x18b/0xa10 [ 278.914739][ T8401] pppoe_rcv_core+0x117/0x310 [ 278.914765][ T8401] __release_sock+0x243/0x350 [ 278.914796][ T8401] release_sock+0x61/0x1f0 [ 278.914819][ T8401] pppoe_sendmsg+0xd5/0x750 [ 278.914845][ T8401] __sock_sendmsg+0x221/0x270 [ 278.914866][ T8401] ____sys_sendmsg+0x52a/0x7e0 [ 278.914895][ T8401] __sys_sendmmsg+0x3ab/0x730 [ 278.914924][ T8401] __x64_sys_sendmmsg+0xa0/0xb0 [ 278.914963][ T8401] do_syscall_64+0xf3/0x230 [ 278.914989][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.915014][ T8401] [ 278.915014][ T8401] other info that might help us debug this: [ 278.915014][ T8401] [ 278.915023][ T8401] Chain exists of: [ 278.915023][ T8401] &pch->upl --> &ppp->rlock --> &pch->downl [ 278.915023][ T8401] [ 278.915063][ T8401] Possible interrupt unsafe locking scenario: [ 278.915063][ T8401] [ 278.915071][ T8401] CPU0 CPU1 [ 278.915078][ T8401] ---- ---- [ 278.915086][ T8401] lock(&pch->downl); [ 278.915102][ T8401] local_irq_disable(); [ 278.915110][ T8401] lock(&pch->upl); [ 278.915128][ T8401] lock(&ppp->rlock); [ 278.915145][ T8401] [ 278.915151][ T8401] lock(&pch->upl); [ 278.915167][ T8401] [ 278.915167][ T8401] *** DEADLOCK *** [ 278.915167][ T8401] [ 278.915173][ T8401] 5 locks held by syz.1.528/8401: [ 278.915186][ T8401] #0: ffffffff8f4ba388 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 278.915250][ T8401] #1: ffff8880269d90c0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_connect_channel+0x5e/0x650 [ 278.915314][ T8401] #2: ffff88807c808248 (&pch->upl){++.-}-{2:2}, at: ppp_connect_channel+0x87/0x650 [ 278.915377][ T8401] #3: ffff8880762a2e50 (&ppp->wlock){+...}-{2:2}, at: ppp_connect_channel+0x174/0x650 [ 278.915460][ T8401] #4: ffff8880762a2e10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 278.915528][ T8401] [ 278.915528][ T8401] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.915541][ T8401] -> (&pch->upl){++.-}-{2:2} { [ 278.915581][ T8401] HARDIRQ-ON-W at: [ 278.915594][ T8401] lock_acquire+0x1ed/0x550 [ 278.915626][ T8401] _raw_write_lock_bh+0x35/0x50 [ 278.915651][ T8401] ppp_disconnect_channel+0x2f/0x2d0 [ 278.915679][ T8401] ppp_unregister_channel+0xb9/0x300 [ 278.915707][ T8401] ppp_asynctty_close+0xf8/0x190 [ 278.915739][ T8401] tty_ldisc_kill+0xa3/0x1a0 [ 278.915761][ T8401] tty_ldisc_release+0x1a1/0x200 [ 278.915786][ T8401] tty_release_struct+0x2b/0xe0 [ 278.915809][ T8401] tty_release+0xd06/0x12c0 [ 278.915831][ T8401] __fput+0x23f/0x880 [ 278.915859][ T8401] __x64_sys_close+0x7f/0x110 [ 278.915887][ T8401] do_syscall_64+0xf3/0x230 [ 278.915913][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.915938][ T8401] HARDIRQ-ON-R at: [ 278.915953][ T8401] lock_acquire+0x1ed/0x550 [ 278.915984][ T8401] _raw_read_lock_bh+0x3d/0x50 [ 278.916008][ T8401] ppp_input_error+0x60/0x1b0 [ 278.916034][ T8401] ppp_sync_process+0x82/0x160 [ 278.916056][ T8401] tasklet_action_common+0x321/0x4d0 [ 278.916085][ T8401] handle_softirqs+0x2c5/0x980 [ 278.916115][ T8401] run_ksoftirqd+0xca/0x130 [ 278.916146][ T8401] smpboot_thread_fn+0x544/0xa30 [ 278.916175][ T8401] kthread+0x2f0/0x390 [ 278.916194][ T8401] ret_from_fork+0x4b/0x80 [ 278.916225][ T8401] ret_from_fork_asm+0x1a/0x30 [ 278.916255][ T8401] IN-SOFTIRQ-R at: [ 278.916269][ T8401] lock_acquire+0x1ed/0x550 [ 278.916300][ T8401] _raw_read_lock_bh+0x3d/0x50 [ 278.916323][ T8401] ppp_input_error+0x60/0x1b0 [ 278.916347][ T8401] ppp_sync_process+0x82/0x160 [ 278.916369][ T8401] tasklet_action_common+0x321/0x4d0 [ 278.916400][ T8401] handle_softirqs+0x2c5/0x980 [ 278.916428][ T8401] run_ksoftirqd+0xca/0x130 [ 278.916459][ T8401] smpboot_thread_fn+0x544/0xa30 [ 278.916488][ T8401] kthread+0x2f0/0x390 [ 278.916507][ T8401] ret_from_fork+0x4b/0x80 [ 278.916537][ T8401] ret_from_fork_asm+0x1a/0x30 [ 278.916576][ T8401] INITIAL USE at: [ 278.916590][ T8401] lock_acquire+0x1ed/0x550 [ 278.916620][ T8401] _raw_write_lock_bh+0x35/0x50 [ 278.916646][ T8401] ppp_disconnect_channel+0x2f/0x2d0 [ 278.916674][ T8401] ppp_unregister_channel+0xb9/0x300 [ 278.916702][ T8401] ppp_asynctty_close+0xf8/0x190 [ 278.916734][ T8401] tty_ldisc_kill+0xa3/0x1a0 [ 278.916755][ T8401] tty_ldisc_release+0x1a1/0x200 [ 278.916778][ T8401] tty_release_struct+0x2b/0xe0 [ 278.916800][ T8401] tty_release+0xd06/0x12c0 [ 278.916822][ T8401] __fput+0x23f/0x880 [ 278.916850][ T8401] __x64_sys_close+0x7f/0x110 [ 278.916877][ T8401] do_syscall_64+0xf3/0x230 [ 278.916904][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.916929][ T8401] INITIAL READ USE at: [ 278.916944][ T8401] lock_acquire+0x1ed/0x550 [ 278.916987][ T8401] _raw_read_lock_bh+0x3d/0x50 [ 278.917011][ T8401] ppp_input_error+0x60/0x1b0 [ 278.917036][ T8401] ppp_sync_process+0x82/0x160 [ 278.917057][ T8401] tasklet_action_common+0x321/0x4d0 [ 278.917088][ T8401] handle_softirqs+0x2c5/0x980 [ 278.917112][ T8401] run_ksoftirqd+0xca/0x130 [ 278.917142][ T8401] smpboot_thread_fn+0x544/0xa30 [ 278.917170][ T8401] kthread+0x2f0/0x390 [ 278.917190][ T8401] ret_from_fork+0x4b/0x80 [ 278.917218][ T8401] ret_from_fork_asm+0x1a/0x30 [ 278.917246][ T8401] } [ 278.917253][ T8401] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 278.917283][ T8401] -> (&ppp->wlock){+...}-{2:2} { [ 278.917317][ T8401] HARDIRQ-ON-W at: [ 278.917331][ T8401] lock_acquire+0x1ed/0x550 [ 278.917359][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.917380][ T8401] ppp_get_stats64+0xc3/0x290 [ 278.917410][ T8401] dev_get_stats+0xad/0xa00 [ 278.917437][ T8401] rtnl_fill_stats+0x47/0x880 [ 278.917469][ T8401] rtnl_fill_ifinfo+0x18da/0x2270 [ 278.917515][ T8401] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 278.917545][ T8401] rtmsg_ifinfo+0x91/0x1b0 [ 278.917580][ T8401] register_netdevice+0x1774/0x1b00 [ 278.917610][ T8401] ppp_dev_configure+0x883/0xb10 [ 278.917640][ T8401] ppp_ioctl+0x797/0x1cd0 [ 278.917668][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.917700][ T8401] do_syscall_64+0xf3/0x230 [ 278.917727][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.917754][ T8401] INITIAL USE at: [ 278.917769][ T8401] lock_acquire+0x1ed/0x550 [ 278.917799][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.917822][ T8401] ppp_get_stats64+0xc3/0x290 [ 278.917851][ T8401] dev_get_stats+0xad/0xa00 [ 278.917880][ T8401] rtnl_fill_stats+0x47/0x880 [ 278.917913][ T8401] rtnl_fill_ifinfo+0x18da/0x2270 [ 278.917941][ T8401] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 278.917969][ T8401] rtmsg_ifinfo+0x91/0x1b0 [ 278.917996][ T8401] register_netdevice+0x1774/0x1b00 [ 278.918025][ T8401] ppp_dev_configure+0x883/0xb10 [ 278.918055][ T8401] ppp_ioctl+0x797/0x1cd0 [ 278.918083][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.918114][ T8401] do_syscall_64+0xf3/0x230 [ 278.918142][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.918169][ T8401] } [ 278.918177][ T8401] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 278.918204][ T8401] ... acquired at: [ 278.918212][ T8401] lock_acquire+0x1ed/0x550 [ 278.918239][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.918261][ T8401] ppp_connect_channel+0x174/0x650 [ 278.918292][ T8401] ppp_ioctl+0xdd4/0x1cd0 [ 278.918320][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.918350][ T8401] do_syscall_64+0xf3/0x230 [ 278.918376][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.918399][ T8401] [ 278.918407][ T8401] -> (&ppp->rlock){+...}-{2:2} { [ 278.918442][ T8401] HARDIRQ-ON-W at: [ 278.918457][ T8401] lock_acquire+0x1ed/0x550 [ 278.918488][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.918509][ T8401] ppp_get_stats64+0x33/0x290 [ 278.918536][ T8401] dev_get_stats+0xad/0xa00 [ 278.918574][ T8401] rtnl_fill_stats+0x47/0x880 [ 278.918609][ T8401] rtnl_fill_ifinfo+0x18da/0x2270 [ 278.918638][ T8401] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 278.918667][ T8401] rtmsg_ifinfo+0x91/0x1b0 [ 278.918696][ T8401] register_netdevice+0x1774/0x1b00 [ 278.918725][ T8401] ppp_dev_configure+0x883/0xb10 [ 278.918756][ T8401] ppp_ioctl+0x797/0x1cd0 [ 278.918786][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.918817][ T8401] do_syscall_64+0xf3/0x230 [ 278.918844][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.918870][ T8401] INITIAL USE at: [ 278.918884][ T8401] lock_acquire+0x1ed/0x550 [ 278.918916][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.918938][ T8401] ppp_get_stats64+0x33/0x290 [ 278.918967][ T8401] dev_get_stats+0xad/0xa00 [ 278.918995][ T8401] rtnl_fill_stats+0x47/0x880 [ 278.919028][ T8401] rtnl_fill_ifinfo+0x18da/0x2270 [ 278.919058][ T8401] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 278.919088][ T8401] rtmsg_ifinfo+0x91/0x1b0 [ 278.919117][ T8401] register_netdevice+0x1774/0x1b00 [ 278.919146][ T8401] ppp_dev_configure+0x883/0xb10 [ 278.919176][ T8401] ppp_ioctl+0x797/0x1cd0 [ 278.919206][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.919237][ T8401] do_syscall_64+0xf3/0x230 [ 278.919264][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.919290][ T8401] } [ 278.919298][ T8401] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 278.919325][ T8401] ... acquired at: [ 278.919333][ T8401] lock_acquire+0x1ed/0x550 [ 278.919364][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.919385][ T8401] ppp_ioctl+0x15f8/0x1cd0 [ 278.919414][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.919445][ T8401] do_syscall_64+0xf3/0x230 [ 278.919471][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.919496][ T8401] [ 278.919502][ T8401] [ 278.919502][ T8401] the dependencies between the lock to be acquired [ 278.919510][ T8401] and SOFTIRQ-READ-irq-unsafe lock: [ 278.919531][ T8401] -> (&pch->downl){+.+.}-{2:2} { [ 278.919573][ T8401] HARDIRQ-ON-W at: [ 278.919587][ T8401] lock_acquire+0x1ed/0x550 [ 278.919619][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.919642][ T8401] ppp_unregister_channel+0x7c/0x300 [ 278.919669][ T8401] ppp_asynctty_close+0xf8/0x190 [ 278.919701][ T8401] tty_ldisc_kill+0xa3/0x1a0 [ 278.919724][ T8401] tty_ldisc_release+0x1a1/0x200 [ 278.919747][ T8401] tty_release_struct+0x2b/0xe0 [ 278.919770][ T8401] tty_release+0xd06/0x12c0 [ 278.919792][ T8401] __fput+0x23f/0x880 [ 278.919819][ T8401] __x64_sys_close+0x7f/0x110 [ 278.919848][ T8401] do_syscall_64+0xf3/0x230 [ 278.919875][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.919904][ T8401] SOFTIRQ-ON-W at: [ 278.919919][ T8401] lock_acquire+0x1ed/0x550 [ 278.919952][ T8401] _raw_spin_lock+0x2e/0x40 [ 278.919975][ T8401] ppp_input+0x18b/0xa10 [ 278.920001][ T8401] pppoe_rcv_core+0x117/0x310 [ 278.920027][ T8401] __release_sock+0x243/0x350 [ 278.920061][ T8401] release_sock+0x61/0x1f0 [ 278.920086][ T8401] pppoe_sendmsg+0xd5/0x750 [ 278.920113][ T8401] __sock_sendmsg+0x221/0x270 [ 278.920136][ T8401] ____sys_sendmsg+0x52a/0x7e0 [ 278.920167][ T8401] __sys_sendmmsg+0x3ab/0x730 [ 278.920198][ T8401] __x64_sys_sendmmsg+0xa0/0xb0 [ 278.920230][ T8401] do_syscall_64+0xf3/0x230 [ 278.920258][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.920285][ T8401] INITIAL USE at: [ 278.920300][ T8401] lock_acquire+0x1ed/0x550 [ 278.920333][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.920356][ T8401] ppp_unregister_channel+0x7c/0x300 [ 278.920385][ T8401] ppp_asynctty_close+0xf8/0x190 [ 278.920417][ T8401] tty_ldisc_kill+0xa3/0x1a0 [ 278.920441][ T8401] tty_ldisc_release+0x1a1/0x200 [ 278.920465][ T8401] tty_release_struct+0x2b/0xe0 [ 278.920489][ T8401] tty_release+0xd06/0x12c0 [ 278.920512][ T8401] __fput+0x23f/0x880 [ 278.920540][ T8401] __x64_sys_close+0x7f/0x110 [ 278.920574][ T8401] do_syscall_64+0xf3/0x230 [ 278.920602][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.920630][ T8401] } [ 278.920638][ T8401] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 278.920666][ T8401] ... acquired at: [ 278.920674][ T8401] lock_acquire+0x1ed/0x550 [ 278.920705][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.920729][ T8401] ppp_connect_channel+0x194/0x650 [ 278.920760][ T8401] ppp_ioctl+0xdd4/0x1cd0 [ 278.920788][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.920819][ T8401] do_syscall_64+0xf3/0x230 [ 278.920846][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.920872][ T8401] [ 278.920878][ T8401] [ 278.920878][ T8401] stack backtrace: [ 278.920889][ T8401] CPU: 0 UID: 0 PID: 8401 Comm: syz.1.528 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 278.920917][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.920942][ T8401] Call Trace: [ 278.920955][ T8401] [ 278.920964][ T8401] dump_stack_lvl+0x241/0x360 [ 278.920995][ T8401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.921025][ T8401] ? __pfx__printk+0x10/0x10 [ 278.921055][ T8401] ? print_shortest_lock_dependencies+0xf2/0x160 [ 278.921092][ T8401] validate_chain+0x4ebd/0x5920 [ 278.921140][ T8401] ? __pfx_validate_chain+0x10/0x10 [ 278.921163][ T8401] ? stack_depot_save_flags+0x29/0x830 [ 278.921203][ T8401] ? register_lock_class+0x102/0x980 [ 278.921239][ T8401] ? __pfx_register_lock_class+0x10/0x10 [ 278.921291][ T8401] ? mark_lock+0x9a/0x360 [ 278.921314][ T8401] __lock_acquire+0x1384/0x2050 [ 278.921356][ T8401] lock_acquire+0x1ed/0x550 [ 278.921388][ T8401] ? ppp_connect_channel+0x194/0x650 [ 278.921426][ T8401] ? __pfx_lock_acquire+0x10/0x10 [ 278.921461][ T8401] ? ppp_connect_channel+0x194/0x650 [ 278.921494][ T8401] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 278.921526][ T8401] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 278.921556][ T8401] ? ppp_connect_channel+0x194/0x650 [ 278.921601][ T8401] _raw_spin_lock_bh+0x35/0x50 [ 278.921625][ T8401] ? ppp_connect_channel+0x194/0x650 [ 278.921658][ T8401] ppp_connect_channel+0x194/0x650 [ 278.921692][ T8401] ? __might_fault+0xaa/0x120 [ 278.921729][ T8401] ppp_ioctl+0xdd4/0x1cd0 [ 278.921764][ T8401] ? __pfx_ppp_ioctl+0x10/0x10 [ 278.921799][ T8401] ? __fget_files+0x3f3/0x470 [ 278.921826][ T8401] ? __pfx_ppp_ioctl+0x10/0x10 [ 278.921859][ T8401] __se_sys_ioctl+0xf9/0x170 [ 278.921892][ T8401] do_syscall_64+0xf3/0x230 [ 278.921922][ T8401] ? clear_bhb_loop+0x35/0x90 [ 278.921952][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.921980][ T8401] RIP: 0033:0x7f0e37f7def9 [ 278.922001][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.922022][ T8401] RSP: 002b:00007f0e38ce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.922049][ T8401] RAX: ffffffffffffffda RBX: 00007f0e38135f80 RCX: 00007f0e37f7def9 [ 278.922068][ T8401] RDX: 0000000020000300 RSI: 000000004004743a RDI: 0000000000000008 [ 278.922085][ T8401] RBP: 00007f0e37ff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 278.922101][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.922116][ T8401] R13: 0000000000000000 R14: 00007f0e38135f80 R15: 00007f0e3825fa28 [ 278.922139][ T8401] [ 279.045228][ T5222] ir_toy 5-1:8.165: required endpoints not found [ 279.047138][ T5222] usb 5-1: USB disconnect, device number 26 [ 279.084633][ T3288] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 279.084703][ T3288] cp210x 2-1:0.0: querying part number failed [ 279.087833][ T3288] usb 2-1: cp210x converter now attached to ttyUSB0 [ 279.089769][ T3288] usb 2-1: USB disconnect, device number 19 [ 279.091388][ T3288] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.091632][ T3288] cp210x 2-1:0.0: device disconnected [ 279.109664][ T5277] gspca_sq905c: sq905c_read: usb_control_msg failed (-110) [ 281.081570][ T5277] sq905c 1-1:0.0: Reading version command failed [ 281.081650][ T5277] sq905c 1-1:0.0: probe with driver sq905c failed with error -110 [ 281.171682][ T9] usb 1-1: USB disconnect, device number 24 [ 281.512788][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.590589][ T5224] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 281.598476][ T5224] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 281.631528][ T5224] usb 4-1: USB disconnect, device number 29 [ 281.652607][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.701391][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.801876][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.974247][ T52] bridge_slave_1: left allmulticast mode [ 281.981098][ T52] bridge_slave_1: left promiscuous mode [ 281.987723][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.997681][ T52] bridge_slave_0: left allmulticast mode [ 282.004188][ T52] bridge_slave_0: left promiscuous mode [ 282.010292][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.143792][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.155245][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.167723][ T52] bond0 (unregistering): Released all slaves [ 282.357750][ T52] hsr_slave_0: left promiscuous mode [ 282.366053][ T52] hsr_slave_1: left promiscuous mode [ 282.371911][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.379372][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.387114][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.395576][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.407799][ T52] veth1_macvtap: left promiscuous mode [ 282.414217][ T52] veth0_macvtap: left promiscuous mode [ 282.420048][ T52] veth1_vlan: left promiscuous mode [ 282.425345][ T52] veth0_vlan: left promiscuous mode [ 282.604163][ T52] team0 (unregistering): Port device team_slave_1 removed [ 282.633755][ T52] team0 (unregistering): Port device team_slave_0 removed [ 282.954582][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.012883][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.034091][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.084879][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.152152][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.203146][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.263244][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.305730][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.393586][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.463378][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.526028][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.603272][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.697017][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.753148][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.813450][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.856388][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.960105][ T52] bridge_slave_1: left allmulticast mode [ 283.965810][ T52] bridge_slave_1: left promiscuous mode [ 283.977887][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.986588][ T52] bridge_slave_0: left allmulticast mode [ 283.994596][ T52] bridge_slave_0: left promiscuous mode [ 284.000501][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.011840][ T52] bridge_slave_1: left allmulticast mode [ 284.017522][ T52] bridge_slave_1: left promiscuous mode [ 284.024268][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.034964][ T52] bridge_slave_0: left allmulticast mode [ 284.041632][ T52] bridge_slave_0: left promiscuous mode [ 284.047339][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.060554][ T52] bridge_slave_0: left allmulticast mode [ 284.066238][ T52] bridge_slave_0: left promiscuous mode [ 284.072604][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.083532][ T52] bridge_slave_1: left allmulticast mode [ 284.089381][ T52] bridge_slave_1: left promiscuous mode [ 284.095072][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.105392][ T52] bridge_slave_0: left allmulticast mode [ 284.113327][ T52] bridge_slave_0: left promiscuous mode [ 284.121592][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.309256][ T52] geneve0 (unregistering): left allmulticast mode [ 284.575247][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.585810][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.596012][ T52] bond0 (unregistering): Released all slaves [ 284.609445][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.621468][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.631863][ T52] bond0 (unregistering): Released all slaves [ 284.645534][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.656279][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.666679][ T52] bond0 (unregistering): Released all slaves [ 284.679792][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.692705][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.702607][ T52] bond0 (unregistering): Released all slaves [ 285.249702][ T52] hsr_slave_0: left promiscuous mode [ 285.256424][ T52] hsr_slave_1: left promiscuous mode [ 285.264939][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.272494][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.280226][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.287734][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.297835][ T52] hsr_slave_0: left promiscuous mode [ 285.303940][ T52] hsr_slave_1: left promiscuous mode [ 285.311089][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.318568][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.326199][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.334264][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.344316][ T52] hsr_slave_0: left promiscuous mode [ 285.351121][ T52] hsr_slave_1: left promiscuous mode [ 285.356893][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.367984][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.375775][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.383488][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.394022][ T52] hsr_slave_0: left promiscuous mode [ 285.399867][ T52] hsr_slave_1: left promiscuous mode [ 285.405589][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.413329][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.421128][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.428551][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.441771][ T52] veth1_macvtap: left promiscuous mode [ 285.447258][ T52] veth0_macvtap: left promiscuous mode [ 285.452859][ T52] veth1_vlan: left promiscuous mode [ 285.458201][ T52] veth0_vlan: left promiscuous mode [ 285.464129][ T52] veth1_macvtap: left promiscuous mode [ 285.469714][ T52] veth0_macvtap: left promiscuous mode [ 285.475243][ T52] veth1_vlan: left promiscuous mode [ 285.480590][ T52] veth0_vlan: left promiscuous mode [ 285.486505][ T52] veth1_macvtap: left promiscuous mode [ 285.492052][ T52] veth0_macvtap: left promiscuous mode [ 285.497601][ T52] veth1_vlan: left promiscuous mode [ 285.502983][ T52] veth0_vlan: left promiscuous mode [ 285.509707][ T52] veth1_macvtap: left promiscuous mode [ 285.515189][ T52] veth0_macvtap: left promiscuous mode [ 285.520965][ T52] veth1_vlan: left promiscuous mode [ 285.526227][ T52] veth0_vlan: left promiscuous mode [ 285.764750][ T52] team0 (unregistering): Port device team_slave_1 removed [ 285.787528][ T52] team0 (unregistering): Port device team_slave_0 removed [ 285.969851][ T52] team0 (unregistering): Port device team_slave_1 removed [ 285.995428][ T52] team0 (unregistering): Port device team_slave_0 removed [ 286.181552][ T52] team0 (unregistering): Port device team_slave_1 removed [ 286.207342][ T52] team0 (unregistering): Port device team_slave_0 removed [ 286.393479][ T52] team0 (unregistering): Port device team_slave_1 removed [ 286.417684][ T52] team0 (unregistering): Port device team_slave_0 removed [ 287.371144][ T52] IPVS: stop unused estimator thread 0...