last executing test programs: 24.771697981s ago: executing program 4 (id=316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x22, 0x30}, 0xc) (async) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f00000001c0)=0x5, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60006a5300140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000073030000"], 0x0) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x4d9, 0x0, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010100, @broadcast, {[@cipso={0x86, 0x36, 0x0, [{0x7, 0x12, "951708634542e80f536d5fcc8f0579e0"}, {0x1, 0x8, "6d515365830b"}, {0x0, 0x4, "e54a"}, {0x1, 0x12, "3dba7e00df022c11b983fb4de63e8db7"}]}]}}}}}) sendto$packet(r2, &(0x7f0000000280)="f7d26f8ba93a3396c400f61eba454b715cb86fe373ed99ea268f29b9256f33deef2dc0d6bf19ecfdfe9bb467ffaffd7b7e514bb7eb1d903b7b9301406206d6e26aea38a77f843907eef34dea46d5c29fee74babf56cce77d9298cd8b8b511da18c38a64b76c60794d3bd44eb852ba87ec961c8d97db5306541ebe2e2bc30fb3cc87be49286bb4eb536bced53a52edfabbd1392e77605f67a11c88211e0797fc3d8e2525831d67989ccdd1122914b5575f3496e0be961dd64e8cedb5a6fe07f4fd83d0271fd51b3480df8e8406d53707c42ca2783da2fd3c39da4b7", 0xdb, 0x4, &(0x7f0000000380)={0x11, 0xfd, r3, 0x1, 0x80, 0x6, @local}, 0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000001500)={0x1fc, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xb4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x1fc}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) msgctl$IPC_SET(0x0, 0x1, 0x0) (async) r9 = socket$inet6(0xa, 0x400000000001, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(r9, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r9, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = dup(r11) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) 24.51188064s ago: executing program 4 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000011c00028005001d00000000000500010004000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16.070556082s ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000140)={'macsec0\x00', @ifru_hwaddr=@remote}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x300}]]}, 0x38}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) (async) setsockopt(r6, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) (async) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x1f8) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59202"]) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1801) close(0x3) (async) r9 = memfd_create(&(0x7f0000001d80)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef\x98\x87\xb5p\xf7\xd7\xeb\xfb\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r9, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) read(r9, &(0x7f0000000000)=""/269, 0xfffffdef) (async) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r8], 0x0) 15.709529207s ago: executing program 3 (id=352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000140)='EG', 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9}}, 0x50) read$FUSE(r3, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfe63) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000150000000001"], 0x29) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xc0280, 0x0) dup3(r6, r3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r9, 0x0, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r9}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r9, 0x0, 0x2}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000140)={0x48, 0x1, r9, 0x0, 0x10007}) close_range(r7, 0xffffffffffffffff, 0x0) 15.262780554s ago: executing program 4 (id=319): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f00000004c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r1, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) mknod(&(0x7f0000000440)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x1100}, 0x10, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file2\x00', 0x2) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file2\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_acct\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000000080)=0x1, 0x3, 0x1, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) splice(r6, 0x0, r4, 0x0, 0xf3a, 0x0) vmsplice(r3, &(0x7f0000000500)=[{&(0x7f0000000100)="ec", 0x1}], 0x1, 0x4) tee(r3, r8, 0xaf5, 0x8) write$binfmt_elf64(r5, &(0x7f0000003380)=ANY=[], 0x18c6) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) open_tree(r2, &(0x7f0000000580)='./file1/file2\x00', 0x89101) move_mount(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2025, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') 14.889207163s ago: executing program 4 (id=354): getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@sr0, r0, &(0x7f0000000180)='./file0\x00') bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e24, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb15}, 0x1c) r1 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, 0x0, 0x0, 0xe8d3, 0x22b}) sendmmsg$inet_sctp(r1, &(0x7f0000000580)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="eb1615df438662e391a289354b6dd3c5ac57dcb3878acf5b194661991c6db7bbe6c2ba199fd6d7e50fd40b18ddc3cb8dd558239ee4c394d736edd21cca1f3ac18bbf23d6c7835db0abbd3ace40cbe69814baca2bc44d9558da0206ce26654ec17393f2c9157e22d02dad75f719688733a0242c1c4465a761e10479ab3b6fa511031e9005ab3424e0e180ff5dce2fefe90642f5f6c723e136aa141a748666895d3eed67ae56619fd0f90928d91c63777f716c546cf21847dd9deeb8ed483956584aecc94c821c088a030876c92b640b6840a70538e27a9c139658e0c12a58c5d880585cc29507737c296a552c", 0xec}, {&(0x7f0000000400)="f8b884037afa02f8217d365cd45ab0ea4570b47b1cac9905b51564baf7cba576c0dffbfceab7e003f6d5a4ffccf40e56098d6dba2e72178c9487ec0cfcb44ba353911d3bcc85f84a642afdb5b6af558adbb4e3703edb91b8582fb7c922a06b3c175647cb2842c8dad75a021eed0ec1771f0f66e3b32518add0373fdff4b5d571b900415d480010c6835627c89321df22681592e30754387d11f3763d2b72a7307d0b0d4e9d4bfc738832e7c3d17065c3e03210348411cbee5455597c5f42d1dad59bdfcc40fcdd57b658a9356f8c966b7b03f74633fabe8236a0a876e00102e0b7f2242736808e43e4beadbf9db2980ea448e6", 0xf3}], 0x2, &(0x7f0000000540)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x30}], 0x1, 0x10) r2 = accept4(r1, 0x0, &(0x7f00000005c0), 0x180000) openat$iommufd(0xffffff9c, &(0x7f0000000600), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000640)=[@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}], 0x4c) r3 = socket(0x23, 0x4, 0x3) write$P9_RWALK(r1, &(0x7f00000006c0)={0x57, 0x6f, 0x1, {0x6, [{0x10, 0x4, 0x2}, {0x1, 0x2, 0x4}, {0x8, 0x1, 0x7}, {0x0, 0x4, 0x6}, {0x8}, {0x4, 0x2, 0x1}]}}, 0x57) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) shutdown(r4, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000740)=""/113) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f00000007c0)=0x4, 0x4) r5 = socket$inet6(0xa, 0xa, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xb, {0x9, 0x21, 0x435, 0x7, 0x1, {0x22, 0x1e2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xe4, 0xb, 0x3}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0xe, 0x4, 0xc6, 0x40, 0xbc}, 0x33, &(0x7f0000000880)={0x5, 0xf, 0x33, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x1, 0x0, 0x7, 0xbb}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x9, 0x7f, 0x1ff}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x0, 0xf00f, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xde, 0x6, 0x7}]}, 0x7, [{0x8d, &(0x7f00000008c0)=@string={0x8d, 0x3, "aa02b357da416589b8ff195ea79bdaeada774b4a2be45f6a0659c58786e279d0a025ed548f29774f8b4b010592902e8eb01c729e2f6cf7f1a0aac48dcdfb263fabd0ae97900cf8f60b466ea8e96302e1e7f08e6eab11682cb6ce836bfe5215caaff22c2b1707cb8a67fbeb59ceb5a74c39ebf958e9ee5686478df5e133b14a088ec54deac4f482e85bfa66"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x5400}}, {0x2b, &(0x7f00000009c0)=@string={0x2b, 0x3, "809173c23d614ed53b411f7cfd730ec12c2dd1f2681db06115959462bdd031625631a024fa2878089a"}}, {0x87, &(0x7f0000000a00)=@string={0x87, 0x3, "2c1c223d407ec144a6158e910cfcc5f0e04750b030e4405e78f78a8b670e0cad2712bd29fa36c63e9cfa847057ddf6cbac1e2ccd8b5e3190a99862bf54dcb2f7a60060a7cc5e2167c82276b9c18bd3e07ea22c226cde936a608c5cd04709c476176ba229958e0708aedd686f982447bddb43240436082408a993413532dd8ae121b9864f55"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3c01}}, {0xf, &(0x7f0000000b40)=@string={0xf, 0x3, "37a29317aebeb079164d15bf36"}}]}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000c00)) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x4b3, 0x3103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x88, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xb8d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x310, 0x9, 0x8, 0x7, 0x10, 0x5}, 0x2a, &(0x7f0000000cc0)={0x5, 0xf, 0x2a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x3, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0xd, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "eced241a1a10c6852cc39828d6e534b6"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2409}}, {0xd7, &(0x7f0000000d40)=@string={0xd7, 0x3, "5e7268ffbaa330bef819f643318d41542cb26074d082ecbffb0d29b6d3dbd49ba2afaad3deef27adab815546b10c7d072cb4d516afd2694b80dc5e5a8a46887d8894bb62dbd99b0ee2c3b0680578d7f0e2deaf82684c3b17a244d13b6197a07a14b5bec82baf6c80adc6a5a59c6e78a51e2d3d7c32fafe855019ae5c98b4a73a338bd7f5af0575b34335767b8fa63f04488eed2af7772f13e0d0267072e90be9b7826d6eb55207c0db8cd56708bdd902e45fa3229a9b4e70f57d2423a1e492d54acfe37572c199e31f612c87f8664bec486c931fb4"}}]}) getsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000e80), &(0x7f0000000ec0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000f00)={0x0, 0xde, "310f488f4316ed2ceb4777c5373eb1db8dcd901c44a59d038c50a20b62bdfa1f5966ab80b2b9e93bac000fcddd4cab3abf904f7b6df5244cb208ae657c37e625fc63e9d652bde7897657d653476dc09b48327586672db11e100affec85c09e464e0ee4f209f93158494016b5e99602f92dda406ea1f47fa997241bd2e306abf764080ab8656439a5eeaaabddd0baf0af1ff803db192d5986df275ff326a5a3c836fc11980a88e3e9a866d3a4b2b99aff61104c703ff76cda2af52a3d8028f27f7b59b54dfa586080d25a1d7bbfb0e5f0d8e7c605754bb8dd12516c12573b"}, &(0x7f0000001000)=0xe6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001040)={r6, 0x4}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000010c0)={0x0, 0x93, "31f791a38e5c6bf58e6555ffb25e4447d389b9d15f0bcea1232cd6f5a7dd56a17169352c6335d6c13cd3dfd9f764c4953f49d35e2a5f8135dd074e6a7e886871b027b18d073561c6f0086912bb5ff7ff0991c35e12f986fd1a4bb0c3f5ddf6dcaddebe9c1736b3c19c7071b0998ec151638378e1c6c8ab704b72db953bbd041e09faf7818706f981666ef8337caa4e89a0c6d0"}, &(0x7f0000001180)=0x9b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000011c0)={r7, 0x8}, 0x8) r8 = accept4$tipc(r1, &(0x7f0000001200)=@id, &(0x7f0000001240)=0x10, 0x0) recvmsg(r8, &(0x7f0000001380)={&(0x7f0000001280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001340)=""/21, 0x15}, 0x23) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f00000013c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KDSKBMODE(r9, 0x4b45, &(0x7f0000001400)) 14.690628878s ago: executing program 3 (id=355): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) io_setup(0x8, &(0x7f00000002c0)) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000004}, 0x0) (rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (rerun: 64) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000300)=""/219) (async, rerun: 32) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "0c959905"}]}}, 0x0}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0xe40, 0x5e, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x8, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109025d000101000000090400000002060000052406000005240000000d240f010000000004000000001524120000a317a88b045e4f01a607c0ffcb7e312a072414faffffff052407"], 0x0) 14.371980403s ago: executing program 3 (id=357): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64002300001c00028005001d00000000000500010004000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 14.013726347s ago: executing program 4 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r3, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0), 0x8) accept4(r3, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) (async) eventfd(0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) listen(r3, 0x100101) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0), 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) (async) 5.486674149s ago: executing program 1 (id=389): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="580aa9e5dc96deae95f9fd5c25e305314a00ffff", @ANYRES16=r1, @ANYBLOB="00032cbd7000ffdbdf25060000000800040000000000140001800800030064010102060005004e23000005000500090000000800020006000000080002000100000008000200010000000500050004000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket(0x10, 0x80002, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000001200)='net/rt_acct\x00') read$FUSE(r2, &(0x7f0000004fc0)={0x2020}, 0x2020) (async) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0x5efeac1414aa}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) (async) prctl$PR_SET_MM_MAP(0x35, 0xe, 0x0, 0x9cfe2206cad4610) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x200000000000803, 0x2) (async) r6 = epoll_create1(0x0) (async, rerun: 64) r7 = syz_open_dev$rtc(&(0x7f0000001800), 0x0, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001840)) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000000000)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @private}, 0xc4}) (async) semget$private(0x0, 0x7, 0x0) (async) semop(0x0, &(0x7f0000000040)=[{0x4, 0xffff}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x4, 0x5}, {0x4}], 0x2) (async) semctl$GETNCNT(0x0, 0x4, 0xf, 0x0) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000280)={0x0, 0x32314247, 0x3, @stepwise={0x4, 0xf, 0x1c42, 0x1, 0x7c4, 0x3}}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) add_key(&(0x7f0000000200)='cifs.spnego\x00', 0x0, &(0x7f00000021c0)="305c9a50a7bffde182ff6f51667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e490635d54cdf31020000901dea116540cbc8004fd8fe45b91e8fe700"/78, 0x4e, 0xfffffffffffffffe) r9 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$P9_RGETATTR(r9, &(0x7f0000002300)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}}, 0xa0) (async) ppoll(&(0x7f00000001c0)=[{r9}], 0x1, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) (async, rerun: 64) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f00000000c0)=0x1) (async, rerun: 64) fallocate(r3, 0x71, 0x5, 0xfff) 5.380666599s ago: executing program 2 (id=390): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@deltaction={0xb0, 0x31, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0xb0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x19c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x178, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa9, 0x1e, 0x3, 0x4, 0x0, 0x1, 0xabd, 0x3}}, {0xa, 0x2, [0x3, 0x401, 0x3]}}, {{0x1c, 0x1, {0x10, 0x9, 0x8, 0x25e, 0x0, 0x9, 0x9, 0x2}}, {0x8, 0x2, [0x5, 0x81]}}, {{0x1c, 0x1, {0x9, 0x9, 0x8, 0x4, 0x2, 0x4, 0x9999, 0x4}}, {0xc, 0x2, [0x3, 0x9, 0x0, 0x600]}}, {{0x1c, 0x1, {0x7, 0x0, 0x9, 0x3, 0x0, 0x10001, 0x9, 0x9}}, {0x16, 0x2, [0x5, 0x7fff, 0x9, 0xc, 0xc6, 0x6, 0x9, 0x800, 0x7ff]}}, {{0x1c, 0x1, {0x7e, 0x8, 0x1ff, 0x38, 0x0, 0x3f5, 0x5, 0x6}}, {0x10, 0x2, [0x3ff, 0x6855, 0x6, 0x0, 0x2, 0x5]}}, {{0x1c, 0x1, {0x5, 0x0, 0x2, 0xff, 0x3, 0x100, 0x7, 0x1}}, {0x6, 0x2, [0x1]}}, {{0x1c, 0x1, {0x49, 0x5, 0x0, 0x7, 0x1, 0x6, 0x101, 0x7}}, {0x12, 0x2, [0x1f6, 0x9, 0x1000, 0x4, 0x9, 0x0, 0x4]}}, {{0x1c, 0x1, {0x80, 0x0, 0x9, 0x9, 0x1, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x2, 0x300, 0xbc8]}}, {{0x1c, 0x1, {0x6, 0x4, 0x2, 0x10000, 0x1, 0x81f, 0x9e24, 0x2}}, {0x8, 0x2, [0x42a1, 0x9]}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) uname(&(0x7f0000000380)=""/209) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="100001800400048008000100600001"], 0x28}, 0x1, 0x1000000000000000}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r5, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r6 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x5, 0x29b937, 0x3c0d67}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1ebf2}]}}]}, 0x3c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.29378483s ago: executing program 1 (id=392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=ANY=[@ANYBLOB="580000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000004c0d00002400128009000100626f6e64000000001400028008000a000000000008000b00", @ANYBLOB="14002b"], 0x58}}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c060000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x11, 0x2, 0x208, [0x2, 0x0, 0x0, 0xd56, 0x20000660, 0x100004], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="7c1796a877170b8b7f990ad22e3b24d22767053b9ad9430bdac448ef8894a8aae8cc089555e3d17e815ddf261c63ae1e55f25cebce1d91fc547aa7e649c72c78fba9e6b09d4aec75896ef42aa5510343c924cf842b881619e88f74467f13b224bd29ccd56cac15d5a2bea441ea58cf068e4fa3fd1180215f5ad0ba1670faad04748c84e4f11451a91503d52b4c3dff30ead76f4ee36d4a948ea7bcdd7b0c83c0d15bf1ec46fb284eb82a82c45d78e46586aa62d64064238afed38474669f85eaa9969b091abff1fc5ef14a49714c62434710a128541f7dd01b6aabd04f844bc6680ac40db6239eb1af4496", @ANYBLOB="9d711e9620ebf2dc201de04e72267a0d13cb08ec6e0a2aec2700cb85f35503992e8637b973cc14974af3fc872bedaf5b42d47671983a155f7774996144fea10e9f28fb014a8d44320ee40e4c25ed881741c36c0c2048ca326bca8e41d7ff5c7042714dd27f18ea66847d1644bc69203908d155771b509ff45471bc163869e2058ddc48fb3952b5dde6d7fcce1b73b4606309f0", @ANYRES8=r2, @ANYRES64=r1, @ANYRES32=r3, @ANYBLOB="987de26912acafdcd6f1aed4ec48480798cc2bbc444c2fc9ea6d5fc838f905c17fb2bd8a1d9399a43d7fe3194f050531bc68e786150f3899048679a52a30e6d1b0bfc18311fb38a1e26708fdfadc229af4f90166cb7e950be9562df239f1d4dd6757b15cf7ea383da28228f9eb8d93cd908356ce7b02cf42e9a2c4762f1ea4ab9c36d3810989f6", @ANYRES16=r1]}, 0x29c) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x8880) sendmmsg$alg(r6, &(0x7f0000004f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x1, 0x0) bind(r6, &(0x7f0000000140)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000001c0)=[{0x5, 0x4, 0xce, 0x5}]}) inotify_init() setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000100)={0xc1a, 0x6, 0xf, 0x1, 0xfffffffffffffff9}) 5.155605579s ago: executing program 2 (id=393): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000023001c00028005001d00000000000500010004000000050015"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.034221213s ago: executing program 2 (id=394): creat(&(0x7f0000000340)='./cgroup\x00', 0x80) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000000f0fe00000008000000770463270a59cdbe422afbe4ec3060e563162e482a403b736608546e27b34f629cfb83e47272fd2d1903d5e99284c90e8756316c9442f0157624ea51a06c07a595a8fbd77db1378fad055cda1a95b75659f723494a00d9315f1b52ad3cc7746d8d84da3759", @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000200000000000000000000000070000004404730001000000"], 0x40}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000240)='./cgroup\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, &(0x7f0000000080)=""/101, 0x65, &(0x7f0000000240)={&(0x7f0000000040)={'sha384\x00'}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f3b3868030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff34}}, 0x1006) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120104ac206e2a4ae6f40041436120410e5150e8d50000000002f98a5c475309ff0100c403bf8f01001186eee20000cbd1e3add550e528101ab2904c47fb360bea77db9206d8e3066bfe58403efd07e4aa76a5a213ec9c46988bab2a3fa608f01082d15962e5ae9657e9c54d209a3a6495241731a6c0fedc2bcac0dbae360193cb47e8caeb369ab82036d5b328124f"], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000000c0)) socket$caif_stream(0x25, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000080)) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) openat$cgroup_ro(r7, &(0x7f0000000200)='pids.current\x00', 0x275a, 0x0) memfd_create(&(0x7f0000000ac0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\a\x00;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\xb7/\xa5\xa7\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84,\xd3\x06\xaeO \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x00\x04\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2Cw\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x0) 4.953147337s ago: executing program 1 (id=395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) r3 = io_uring_setup(0x4c79, &(0x7f0000000300)={0x0, 0x58db, 0x800, 0x0, 0x348}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cryptd(adiantum(xts-serpent-avx,tea-generic,cryptd(sha256)))'}, 0x58) kcmp(r1, r2, 0x3, r0, r3) r5 = io_uring_setup(0x354a, &(0x7f0000000140)) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000200)=[{0x1, 0x2, {0x1, 0x1}, {}, 0x2, 0xfe}, {0x0, 0x0, {0x1, 0xe, 0x2}, {0x0, 0x0, 0x1}, 0x2, 0xff}, {0x2, 0x3, {0x2, 0xff, 0x1}, {0x2, 0xf0, 0x4}, 0xfe, 0x2}, {0x2, 0x2, {0x2, 0xf0}, {0x1, 0xff, 0x1}, 0xff}, {0x1, 0x1, {0x3, 0xf0, 0x2}, {0x1, 0x0, 0x2}, 0xff}, {0x0, 0x1, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x2}, 0x1, 0x2}, {0x1, 0x2, {0x1, 0x0, 0x2}, {0x1, 0x1}, 0xfd, 0xfd}], 0xe0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r11 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r11, 0x0, 0x0, 0x0) 4.434538727s ago: executing program 1 (id=396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x88480) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000000380)) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x41) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x2ea6de6b5b1c8d0c, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0xf, 0xe}}}, 0x24}}, 0x11) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x40, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf, 0x0) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) socket$rxrpc(0x21, 0x2, 0xa) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.619629717s ago: executing program 0 (id=397): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x200000000000011, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x3, 0x4, 0x3, "65baa340a9aa32d5926874088d23ee3f04d217707d91afe216b882276598a584afc94b6ffc7d17e295c8e8dbedc44129c5db89db6c0532632f83c9f7fba494f174cd5c7d5c4273dfdc47f02155f07c6c260d3edb0cd7631a4a0fac739ee0d3b10b610bb305a56977da7797224208a2aa830a9f58454e426213c5e3e72f65a0e620886850d9c85fe84ffa1cac459c985329b1f523df168107e22c003e38c9c0aeb60db023a14432f4efb8f47ef01ae245cd7a94f2dc8b04779e2c5b9041f8defec0f29d1983e241b084b8dd1364606a6563c10dd207f188"}, 0xe7) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000203000000000000000000000000000005000500020000000900020073797a32000000000c0007800800064000000000050004"], 0x58}}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_io_uring_setup(0x3b67, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)=0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {}, {0x85, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) syz_io_uring_setup(0x48bf, &(0x7f0000000280), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (rerun: 32) syz_io_uring_submit(r11, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r7, 0xb15, 0x0, 0x0, 0x0, 0x0) (async) write$binfmt_misc(r6, &(0x7f0000000380), 0x4) write$binfmt_script(r6, 0x0, 0xe) (async, rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="000017bb", @ANYRES16=0x0, @ANYBLOB="000000000000000000001000000018000180140002006e657464657673696d30000000000000080004"], 0x34}}, 0x8080) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast}, {@in=@private, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x8, {0xfffffffffffffffc, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) (rerun: 32) 3.489404889s ago: executing program 0 (id=398): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x48d, 0xce50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_clone3(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_dev$radio(&(0x7f00000001c0), 0x2, 0x2) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') read$FUSE(r3, &(0x7f0000003100)={0x2020}, 0x2042) read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r5 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x400}]}, 0x34}}, 0x0) r9 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f0000000580)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x9, 0x40, 0xcf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "9b"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000, 0x8001, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x20}, [@acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x43, 0x7f, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x1, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x9, 0xe, 0x73, 0xff, 0xa7}, 0x21, &(0x7f0000000180)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x6, 0xfa, 0x3, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x3, 0x7ff}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x3, 0x0, 0x8}]}, 0x7, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x1c09}}, {0xd3, &(0x7f00000006c0)=@string={0xd3, 0x3, "c909589e4423eeea0ec682db464920e7f863deca7b1d2735f3534d8d8d1748f3d3fe3b2075bba82dc639568acf48b7f5debf9223ff2bae478bc15f5bcb942518d770291ba716d4c89f50c32c116a206704a02d1e50b1363009e748abb6f4e9f80f9446a3e0939ef2cbbf93958ac5612fc330fd3d3c346f71ab90bb86de757664ff3434b9e48c46891f2f90d16512a9a077c57d99c73ae4b17986720a2798370026fbe951aa46e565d7e1c6f5b704b773bb4415a53e7dc9fd26bcad08327fa40b4ed24f9c38fe8b7ea0315985ba571c68fa"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41d}}, {0xb6, &(0x7f0000000840)=@string={0xb6, 0x3, "be8e9d9b3041ca62be13896e354d334d7ff4e1893d9d55965180de4a897c616993a666b7a31fa71b4d6893b300c043de1c8da99a4792bb680995b6caf7d1c72482029f8a88772768d6d0682a3972b48a64253aa05323fbeac345980a20f4af2a5ada92445481e23b81a248815a60e0e740ddbccea57f7ae106687d888c9d98589dbabffb1110464bd500818a4514a785854a892d0ec80e88a3dd7bbec254cf543b3b49d1a4000125a69d8bb896fe927244ec542b"}}]}) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000f103"]) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x7, {0x7, 0x0, "4047bcd11c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x9}}}}]}}]}}, 0x0) syz_usb_control_io(r11, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0xc2, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xf3, 0x91, 0x5, 0x40, 0x4}, 0xb7, &(0x7f00000002c0)={0x5, 0xf, 0xb7, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0xfff, 0x0, 0x7, [0xc000, 0x1fe0000, 0xff0000, 0x0, 0xc1b0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x7f, 0x63, 0xc3d, 0x8}, @generic={0x6e, 0x10, 0xa, "b30b348bbe842f96c886c677ef50334977f27c1020efaf9b3d594c605db9a90cd8e2a27a098a44ebb4abf2b45e3b2d62901bc51cd320934ea85a4718724a9d037a24ae3c9634f1aa41382f98b0ec68c2ddaf2f566b1770cc6998c4cb1fc8b15f65a083ffc76f05a7def751"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x4, 0x0, 0xa}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xff, 0x0, 0x72fc, 0x74}]}, 0x4, [{0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}, {0x6f, &(0x7f0000000380)=@string={0x6f, 0x3, "b9f762226ba41029a97853f9f602bd610263dbcaebdd47e4a9d882416d83f1bdbe700f32c797310b09a891b7de89aad063adfa3972f180468c558e9f701ea83c1ae4af096236435a27c6bb0b8f04cd908f746f4ec37e1cd0988fa5cf70d7e6ac767f90868a937a374ba060721e"}}, {0xd3, &(0x7f0000000400)=@string={0xd3, 0x3, "84b6c3e04a0f3acdecfed1c0e0ccf292f4eca3b21b31cfe1b6b2203fb6e9fca7975d398181fb2d9d6aedf273d0cdf7d824986227f1b96e5ee1d41b8e864268a7f22ec9be043a3d0d525b789606c65356e87ddc313ee77f74be5c6a59527c6af2ecd63c23440879b3cf85969f113a6e93d0e79529606b5defb95afb71e47d986b9c02ba36c0860a84f73969e2774e0eb5471c4e08c121d7a8ea66d281e9511ae50c58795cfde0a25d54a857b2d667b55c3bd2d90cb56bc434eb43133dbb541cf0b30dfc39f3603d160a4321bbb8a2ab62c6"}}]}) 1.893370613s ago: executing program 2 (id=399): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0x11, 0x80002, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) prlimit64(r2, 0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @empty}, 0x80, 0x0}, 0x8884) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x7f, &(0x7f0000006680)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000f0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) userfaultfd(0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(r8, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000000)) r10 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) 1.107683732s ago: executing program 1 (id=400): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000400)=ANY=[@ANYRES64=r1], 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) r3 = semget(0x1, 0x0, 0x3) semop(r3, &(0x7f0000000000), 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r4, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000400)={0xc}) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000ac0)={0x1, 0x0, [{0x0, 0x3a, &(0x7f0000000200)=""/58}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000000c0)=0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) 915.968504ms ago: executing program 2 (id=401): r0 = creat(&(0x7f0000000300)='./file0\x00', 0x363) preadv(r0, &(0x7f0000001e00)=[{&(0x7f0000000980)=""/245, 0xf5}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000a80)=""/243, 0xf3}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/194, 0xc2}, {0xfffffffffffffffd}, {&(0x7f0000001c80)=""/239, 0xef}, {&(0x7f0000001d80)=""/128, 0x80}], 0x8, 0x8, 0x7fff) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') write$sequencer(r0, &(0x7f0000000180)=[@t={0x85, 0x4, 0x81, 0x5}, @generic={0xa}, @echo=0x100, @n={0x1, 0xd6, @generic=0x2, 0x6}, @v={0x93, 0xe, 0x90, 0x12, @MIDI_NOTEON=@special, 0xe, 0x9}, @v={0x93, 0x6, 0x90, 0x1b, @MIDI_NOTEON=@note=0x18, 0x0, 0xb}], 0x21) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x0, @sco={0x1f, @none}, @l2={0x1f, 0xffff, @any, 0x1, 0x2}, @llc={0x1a, 0x207, 0x14, 0x4, 0x8, 0x1, @multicast}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)='netdevsim0\x00', 0x5d16, 0xd, 0x8000}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x7, 0x80, 0x7, 0x8, {{0x3b, 0x4, 0x0, 0x3e, 0xec, 0x68, 0x0, 0xf9, 0x29, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0x10, 0x7a, 0x0, 0x5, [0x4, 0x0, 0x2]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x34, 0xd0, 0x3, 0x5, [{@remote, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}}, {@loopback, 0x40}, {@remote, 0x8}, {@multicast2, 0x7}, {@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x3c, 0xbb, 0x3, 0x6, [{@rand_addr=0x64010101, 0x700}, {@broadcast, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@broadcast, 0x51e4}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0xfffffff7}]}, @timestamp_prespec={0x44, 0x14, 0x80, 0x3, 0x1, [{@remote, 0x101}, {@empty, 0x1}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x4f, 0x3, 0x1, [{@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x71a8}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xc2}, {@empty, 0x6}, {@loopback, 0x6}, {@empty}]}]}}}}}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/raw6\x00') syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) (async) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) (async) syz_clone3(&(0x7f0000000480)={0x42000200, &(0x7f0000000280), &(0x7f0000000240), &(0x7f0000000300), {0x19}, &(0x7f0000000340)=""/157, 0x9d, &(0x7f00000001c0)=""/31, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x59, 0x0) (async) r6 = dup(r4) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8000, 0x100000000}) (async) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) (async) userfaultfd(0x801) (async) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 725.985521ms ago: executing program 4 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r3, 0x100101) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0), 0x8) accept4(r3, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f0000000100)=""/47, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)) (async) eventfd(0x0) (async) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r2) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendto$inet6(r3, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) listen(r3, 0x100101) (async) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000000c0), 0x8) (async) accept4(r3, 0x0, 0x0, 0x0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000380)={0x0, r2}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x53, 0xb5, 0x8, 0x46d, 0x896, 0x3a11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc0, 0xda, 0xfa}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x2c}}, 0x0) (async) 713.337ms ago: executing program 1 (id=402): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)='EG', 0x2, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 655.260833ms ago: executing program 0 (id=403): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x143003, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) socket$inet6(0xa, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[0x4, 0x80, 0xffff, 0x964f, 0x9, 0x7ff, 0x6, 0x2]}) socket$inet6(0xa, 0x6, 0x0) (async) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r3], 0x40}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) r6 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES64=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES64=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 654.510623ms ago: executing program 2 (id=404): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x2130, 0x4) madvise(&(0x7f0000885000/0x4000)=nil, 0x4000, 0x80000000e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000060008000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c000280050001002f00"], 0x7c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) vmsplice(r2, 0x0, 0x0, 0x0) mmap(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x1000000, 0x4008032, 0xffffffffffffffff, 0x4d4fe000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000002700)={0x1, 'virt_wifi0\x00'}, 0x18) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x178, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x178}, 0x1, 0x0, 0x0, 0x4}, 0x4) 585.372163ms ago: executing program 3 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d08000b000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0x103}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) 223.698244ms ago: executing program 0 (id=405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 124.165691ms ago: executing program 3 (id=406): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='highspeed\x00', 0xa) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000280)=ANY=[], 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x8209, 0x4, 0x0, 0x80c, 0x8, 0x5916}, &(0x7f0000000080)=0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120001000000000904"], 0x0) r4 = mq_open(&(0x7f00000001c0)='\xb8\xbd\xb5/', 0x40, 0x48, 0x0) read(r4, &(0x7f00000012c0)=""/210, 0xd2) open(&(0x7f0000000280)='./file0\x00', 0x40, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r5, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xe, 0xffff}}, [@TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x77, 0x7, 0x1ff, 0x0, 0x2, 0x8, 0xfffff4cc, 0x4}}, {0xc, 0x2, [0x101, 0x6, 0x6, 0x8ca]}}, {{0x1c, 0x1, {0x6f, 0xb, 0x0, 0x8000, 0x0, 0xe, 0x263db27, 0x5}}, {0xe, 0x2, [0xfffc, 0x200, 0x3, 0x0, 0x2]}}, {{0x1c, 0x1, {0x2, 0x84, 0xfffc, 0x7, 0x1, 0x3685000, 0x9, 0x4}}, {0xc, 0x2, [0x3, 0x8, 0x2e, 0xf6]}}, {{0x1c, 0x1, {0xd, 0x4, 0x6, 0x1c0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x8, 0x5, 0x3, 0x6, 0x1]}}, {{0x1c, 0x1, {0x1, 0x2, 0x2, 0x0, 0x2, 0x1, 0x6, 0x5}}, {0xe, 0x2, [0xf0f9, 0x101, 0xffff, 0xddf, 0xff]}}]}]}, 0xfc}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0xffff1000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r7, 0xc018aec0, &(0x7f0000000040)={0x26e8}) 69.135574ms ago: executing program 0 (id=407): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x9d702000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x9d702000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f00003ca000/0x3000)=nil, 0x3000) 0s ago: executing program 0 (id=408): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="78000000110001002bbd7000fddbdf2507000000", @ANYRES32=r2], 0x78}}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00f5b75eb8725f79d8aa00ac"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000080)=0x25) ioctl$PPPIOCSFLAGS1(r7, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004e80)='+', 0x1}], 0x1}}], 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000040)='configfs\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f0000000080)=0x1, 0x189, 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x1) pipe2(&(0x7f00000003c0), 0x80800) kernel console output (not intermixed with test programs): 2.208657][ T5714] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.227055][ T25] usb 1-1: config 0 descriptor?? [ 112.254153][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.261393][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.262271][ T25] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 112.325699][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.332909][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.349837][ T5287] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 112.357550][ T5290] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 112.448844][ T5714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 112.520348][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 112.536344][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 112.551913][ T5290] usb 5-1: Using ep0 maxpacket: 32 [ 112.551921][ T25] gspca_vc032x: reg_r err -71 [ 112.551978][ T25] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 112.570853][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 112.590385][ T5714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.597955][ T5290] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 112.614465][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.634279][ T5287] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.645844][ T25] usb 1-1: USB disconnect, device number 12 [ 112.649658][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.680537][ T5290] usb 5-1: config 0 descriptor?? [ 112.728331][ T5290] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 112.742295][ T5287] usb 4-1: Product: syz [ 112.746523][ T5287] usb 4-1: Manufacturer: syz [ 112.751413][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 112.789512][ T5287] usb 4-1: SerialNumber: syz [ 112.806750][ T5714] veth0_vlan: entered promiscuous mode [ 112.833871][ T5714] veth1_vlan: entered promiscuous mode [ 112.846861][ T5287] usb 4-1: config 0 descriptor?? [ 112.862365][ T5287] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.894307][ T5287] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 112.920195][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 112.931852][ T8] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 112.958226][ T5714] veth0_macvtap: entered promiscuous mode [ 112.965896][ T8] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 112.982432][ T8] usb 3-1: config 0 has no interface number 0 [ 112.992399][ T5714] veth1_macvtap: entered promiscuous mode [ 113.008834][ T8] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.019536][ T5237] Bluetooth: hci2: command tx timeout [ 113.048031][ T8] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.056737][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.071573][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.081607][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.092292][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.100324][ T8] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 113.102672][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 113.127677][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.134338][ T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 113.138521][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.155827][ T8] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 113.167548][ T8] usb 3-1: Product: syz [ 113.174982][ T8] usb 3-1: config 0 descriptor?? [ 113.186975][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.225061][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.237091][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.248604][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.262310][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.274263][ T5714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.288719][ T5714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.306081][ T5714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.324404][ T5714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.336559][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.356770][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.365872][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.377608][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.386555][ T25] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 113.395971][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.405276][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.421709][ T25] usb 1-1: config 0 descriptor?? [ 113.504807][ T5287] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 113.514587][ T5287] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 113.552654][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.570456][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.632747][ T2561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.655466][ T2561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.811207][ T8] usb 3-1: USB disconnect, device number 14 [ 113.845709][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.873038][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.912653][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 113.930081][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 113.968813][ T25] usb 1-1: USB disconnect, device number 13 [ 114.065429][ T4670] bcm5974 5-1:0.0: could not read from device [ 114.103849][ T4670] bcm5974 5-1:0.0: could not read from device [ 114.119818][ T5290] usb 5-1: USB disconnect, device number 10 [ 114.131383][ T5869] fuse: Unknown parameter '0x0000000000000004' [ 114.155871][ T5287] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 114.168110][ T5287] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 114.186740][ T5287] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 114.335669][ T5932] fuse: Bad value for 'fd' [ 114.404840][ T5287] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 114.413663][ T5287] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 114.428613][ T5287] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 114.471767][ T5287] usb 4-1: USB disconnect, device number 17 [ 114.491040][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 114.525662][ T5941] bridge_slave_0: left allmulticast mode [ 114.536691][ T5941] bridge_slave_0: left promiscuous mode [ 114.637759][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.713935][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.869596][ T25] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 114.940124][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.989499][ T5287] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 115.053639][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.070220][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 115.091826][ T25] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 115.106490][ T25] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.110457][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 115.122121][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 115.134631][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.147446][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 115.149747][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.161247][ T9] usb 5-1: config 0 has no interface number 0 [ 115.176091][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.178802][ T25] usb 1-1: Product: syz [ 115.192873][ T25] usb 1-1: Manufacturer: syz [ 115.197629][ T25] usb 1-1: SerialNumber: syz [ 115.208440][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.223692][ T5287] usb 3-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00 [ 115.235947][ T9] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 115.239868][ T5949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 115.255454][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.259049][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.163'. [ 115.265628][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.284908][ T5976] netlink: 'syz.3.163': attribute type 20 has an invalid length. [ 115.287373][ T9] usb 5-1: Product: syz [ 115.297928][ T9] usb 5-1: Manufacturer: syz [ 115.313082][ T5287] usb 3-1: config 0 descriptor?? [ 115.321890][ T9] usb 5-1: SerialNumber: syz [ 115.329987][ T5288] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 115.346614][ T9] usb 5-1: config 0 descriptor?? [ 115.357089][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 115.498587][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.515446][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 115.532690][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 115.544255][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.557723][ T5288] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.568369][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.593233][ T5288] usb 2-1: config 0 descriptor?? [ 115.597964][ T5290] usb 1-1: USB disconnect, device number 14 [ 115.746193][ T5956] netlink: 296 bytes leftover after parsing attributes in process `syz.2.158'. [ 115.763153][ T5956] unsupported nlmsg_type 40 [ 115.827693][ T5288] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 115.838709][ T5287] appletouch 3-1:0.0: Geyser mode initialized. [ 115.847196][ T5287] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 115.893622][ T5288] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.994210][ T5238] udevd[5238]: Error opening device "/dev/input/event4": Input/output error [ 116.015742][ T5238] udevd[5238]: Unable to EVIOCGABS device "/dev/input/event4" [ 116.038428][ T5238] udevd[5238]: Unable to EVIOCGABS device "/dev/input/event4" [ 116.067650][ T1166] usb 3-1: USB disconnect, device number 15 [ 116.103419][ T1166] appletouch 3-1:0.0: input: appletouch disconnected [ 116.240792][ T5287] usb 2-1: USB disconnect, device number 17 [ 116.419587][ T5288] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 116.584725][ T5288] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.600191][ T5288] usb 1-1: not running at top speed; connect to a high speed hub [ 116.620266][ T5288] usb 1-1: config 81 has an invalid interface number: 159 but max is 0 [ 116.641471][ T5288] usb 1-1: config 81 has no interface number 0 [ 116.664283][ T5288] usb 1-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 116.677788][ T5288] usb 1-1: config 81 interface 159 has no altsetting 0 [ 116.700987][ T5288] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 116.724927][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.748972][ T5288] usb 1-1: Product: syz [ 116.760245][ T5287] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 116.768023][ T5288] usb 1-1: Manufacturer: syz [ 116.768049][ T5288] usb 1-1: SerialNumber: syz [ 116.772311][ T5997] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.772962][ T9] gspca_topro: Sensor cx0342 [ 116.950347][ T5287] usb 2-1: device descriptor read/64, error -71 [ 117.016357][ T8] usb 5-1: USB disconnect, device number 11 [ 117.084237][ T5288] kobil_sct 1-1:81.159: KOBIL USB smart card terminal converter detected [ 117.106464][ T6018] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 117.108394][ T5288] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 117.132483][ T5288] usb 1-1: USB disconnect, device number 15 [ 117.159663][ T5288] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 117.177887][ T5288] kobil_sct 1-1:81.159: device disconnected [ 117.220149][ T5287] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 117.260354][ T6020] netlink: 'syz.3.170': attribute type 17 has an invalid length. [ 117.370494][ T6018] syz.3.170 (6018) used greatest stack depth: 19472 bytes left [ 117.399634][ T5287] usb 2-1: device descriptor read/64, error -71 [ 117.535335][ T5287] usb usb2-port1: attempt power cycle [ 117.849615][ T5288] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 117.889577][ T5287] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 117.910160][ T5287] usb 2-1: device descriptor read/8, error -71 [ 117.940121][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 117.999553][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 118.000472][ T5288] usb 4-1: Using ep0 maxpacket: 16 [ 118.014933][ T5288] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 118.026585][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 118.034246][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 118.047584][ T5288] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 118.056739][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.064990][ T5288] usb 4-1: Product: syz [ 118.069183][ T5288] usb 4-1: Manufacturer: syz [ 118.073973][ T5288] usb 4-1: SerialNumber: syz [ 118.080626][ T5288] usb 4-1: config 0 descriptor?? [ 118.091107][ T5288] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 118.100583][ T5288] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 118.113629][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.123429][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.131853][ T8] usb 3-1: Product: syz [ 118.136682][ T8] usb 3-1: Manufacturer: syz [ 118.141766][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 118.149610][ T8] usb 3-1: SerialNumber: syz [ 118.159731][ T5287] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 118.168255][ T8] usb 3-1: config 0 descriptor?? [ 118.178802][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.189974][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 118.189982][ T9] usb 1-1: can't read configurations, error -61 [ 118.204527][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.215876][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.227054][ T5287] usb 2-1: device descriptor read/8, error -71 [ 118.227311][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 118.242530][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.253181][ T25] usb 5-1: config 0 descriptor?? [ 118.329640][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 118.349960][ T5287] usb usb2-port1: unable to enumerate USB device [ 118.502631][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.510427][ T9] usb 1-1: can't read configurations, error -61 [ 118.517037][ T9] usb usb1-port1: attempt power cycle [ 118.585509][ T8] usb 3-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 118.685014][ T6040] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 118.699054][ T5288] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 118.713836][ T5288] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 118.870447][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 118.905085][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 118.917048][ T9] usb 1-1: can't read configurations, error -61 [ 118.933835][ T8] usb 3-1: failed to fetch extended address, random address set [ 118.969464][ T8] usb 3-1: atusb_probe: initialization failed, error = -524 [ 119.024565][ T8] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 119.048874][ T8] usb 3-1: USB disconnect, device number 16 [ 119.065877][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 119.116059][ T6047] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 119.137763][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 119.146187][ T9] usb 1-1: can't read configurations, error -61 [ 119.161503][ T9] usb usb1-port1: unable to enumerate USB device [ 119.285800][ T6049] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20003 [ 119.337665][ T6031] fuse: Unknown parameter '0x0000000000000004' [ 119.348855][ T5288] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 119.357453][ T5288] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 119.366323][ T5288] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 119.585070][ T5288] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 119.603549][ T5288] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 119.628657][ T5288] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 119.656309][ T5288] usb 4-1: USB disconnect, device number 18 [ 119.791018][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 120.900154][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 120.995826][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 121.012336][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 121.027377][ T25] usb 5-1: USB disconnect, device number 12 [ 121.069680][ T8] usb 3-1: device descriptor read/64, error -71 [ 121.350169][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 121.519478][ T8] usb 3-1: device descriptor read/64, error -71 [ 121.559542][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 121.570354][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 121.629892][ T8] usb usb3-port1: attempt power cycle [ 121.739507][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 121.746267][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 121.758873][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.773621][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.783128][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.791351][ T25] usb 5-1: Product: syz [ 121.796134][ T25] usb 5-1: Manufacturer: syz [ 121.801259][ T25] usb 5-1: SerialNumber: syz [ 121.810431][ T25] usb 5-1: config 0 descriptor?? [ 121.820807][ T25] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 121.831230][ T25] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 121.853882][ T1166] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 121.969540][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 121.989507][ T1166] usb 4-1: device descriptor read/64, error -71 [ 122.001823][ T8] usb 3-1: device descriptor read/8, error -71 [ 122.138175][ T6115] kvm: emulating exchange as write [ 122.229502][ T5288] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 122.252845][ T1166] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 122.260584][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 122.281199][ T8] usb 3-1: device descriptor read/8, error -71 [ 122.385736][ T5288] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 122.399474][ T1166] usb 4-1: device descriptor read/64, error -71 [ 122.402036][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.406362][ T8] usb usb3-port1: unable to enumerate USB device [ 122.425560][ T25] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 122.432289][ T5288] usb 1-1: config 0 descriptor?? [ 122.444951][ T25] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 122.509851][ T1166] usb usb4-port1: attempt power cycle [ 122.860309][ T1166] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 122.890337][ T1166] usb 4-1: device descriptor read/8, error -71 [ 123.067785][ T6096] fuse: Unknown parameter '0x0000000000000004' [ 123.077276][ T25] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 123.085430][ T25] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 123.093183][ T25] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 123.107343][ T5288] usb 1-1: Cannot read MAC address [ 123.113706][ T5288] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 123.128508][ T5288] usb 1-1: USB disconnect, device number 20 [ 123.140095][ T1166] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 123.171458][ T1166] usb 4-1: device descriptor read/8, error -71 [ 123.179753][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 123.283888][ T1166] usb usb4-port1: unable to enumerate USB device [ 123.313839][ T25] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 123.320765][ T25] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 123.327781][ T25] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 123.340957][ T25] usb 5-1: USB disconnect, device number 13 [ 123.362062][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 123.376271][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 123.390313][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 123.400392][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 123.414273][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 123.423441][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.435317][ T8] usb 2-1: config 0 descriptor?? [ 123.868109][ T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 123.949927][ T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 123.996777][ T6130] IPv6: addrconf: prefix option has invalid lifetime [ 124.003684][ T6130] IPv6: addrconf: prefix option has invalid lifetime [ 124.040376][ T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 124.282121][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 124.305186][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 124.341844][ T9] usb 2-1: USB disconnect, device number 22 [ 124.349530][ T25] usb 1-1: config 142 has an invalid interface number: 157 but max is 0 [ 124.357924][ T25] usb 1-1: config 142 has no interface number 0 [ 124.364291][ T25] usb 1-1: config 142 interface 157 altsetting 16 bulk endpoint 0x3 has invalid maxpacket 1023 [ 124.374823][ T25] usb 1-1: config 142 interface 157 altsetting 16 bulk endpoint 0xC has invalid maxpacket 1023 [ 124.385648][ T25] usb 1-1: config 142 interface 157 has no altsetting 0 [ 124.414093][ T6136] xt_connbytes: Forcing CT accounting to be enabled [ 124.454823][ T25] usb 1-1: New USB device found, idVendor=10c4, idProduct=806f, bcdDevice=4e.34 [ 124.463986][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.472160][ T25] usb 1-1: Product: syz [ 124.476360][ T25] usb 1-1: Manufacturer: syz [ 124.481032][ T25] usb 1-1: SerialNumber: syz [ 124.488031][ T6136] Cannot find add_set index 0 as target [ 124.523598][ T6128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.531364][ T6128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 124.677484][ T6141] process 'syz.3.209' launched '/dev/fd/3' with NULL argv: empty string added [ 124.789890][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.794196][ T6128] geneve2: entered promiscuous mode [ 124.815870][ T6128] geneve2: entered allmulticast mode [ 124.878022][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.004455][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 125.076934][ T6148] tipc: Started in network mode [ 125.091091][ T6148] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 125.100001][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.121950][ T6148] tipc: Enabled bearer , priority 10 [ 125.137340][ T6148] tipc: Resetting bearer [ 125.194824][ T6148] tipc: Disabling bearer [ 125.298035][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.317909][ T6144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.436429][ T6144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.482026][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.492860][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.506424][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.521173][ T9] usb 5-1: config 0 descriptor?? [ 125.805645][ T9] usb 5-1: can't set config #0, error -71 [ 125.813904][ T9] usb 5-1: USB disconnect, device number 14 [ 125.969468][ T5290] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 126.165261][ T5290] usb 2-1: Using ep0 maxpacket: 8 [ 126.208079][ T5290] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 126.220651][ T5290] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 126.244626][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.278224][ T5290] usb 2-1: Product: syz [ 126.289396][ T5290] usb 2-1: Manufacturer: syz [ 126.289653][ T5298] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 126.294018][ T5290] usb 2-1: SerialNumber: syz [ 126.337034][ T5290] usb 2-1: config 0 descriptor?? [ 126.367628][ T5290] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 126.501939][ T5298] usb 5-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 126.539583][ T5298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.608911][ T5298] usb 5-1: config 0 descriptor?? [ 126.994826][ T25] cp210x 1-1:142.157: cp210x converter detected [ 127.002113][ T25] cp210x 1-1:142.157: failed to get vendor val 0x370b size 1: -71 [ 127.034299][ T25] cp210x 1-1:142.157: querying part number failed [ 127.070179][ T5298] aquacomputer_d5next 0003:0C70:F010.0008: item fetching failed at offset 2/5 [ 127.086256][ T25] usb 1-1: cp210x converter now attached to ttyUSB0 [ 127.095230][ T6128] delete_channel: no stack [ 127.130011][ T5298] aquacomputer_d5next 0003:0C70:F010.0008: probe with driver aquacomputer_d5next failed with error -22 [ 127.141849][ T25] usb 1-1: USB disconnect, device number 21 [ 127.179156][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.214472][ T25] cp210x 1-1:142.157: device disconnected [ 127.248891][ T5298] usb 5-1: USB disconnect, device number 15 [ 127.277417][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 127.315947][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 127.354897][ T6172] netlink: 104 bytes leftover after parsing attributes in process `syz.3.217'. [ 127.508079][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 127.560162][ T1166] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 127.690080][ T1166] usb 3-1: device descriptor read/64, error -71 [ 127.719540][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 127.819935][ T5287] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 127.865381][ T6182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.223'. [ 127.871788][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.887446][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.896726][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.917119][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 127.936898][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.951568][ T1166] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 127.964207][ T9] usb 4-1: Product: syz [ 127.968626][ T9] usb 4-1: Manufacturer: syz [ 127.976313][ T9] usb 4-1: SerialNumber: syz [ 127.986354][ T9] usb 4-1: config 0 descriptor?? [ 127.991571][ T5287] usb 1-1: Using ep0 maxpacket: 32 [ 128.000464][ T5287] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.013006][ T5287] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.027367][ T9] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 128.034720][ T9] usb 4-1: No valid video chain found. [ 128.045471][ T5287] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.057300][ T5287] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 128.068305][ T5287] usb 1-1: Product: syz [ 128.073064][ T5287] usb 1-1: Manufacturer: syz [ 128.092432][ T5287] hub 1-1:4.0: USB hub found [ 128.100865][ T1166] usb 3-1: device descriptor read/64, error -71 [ 128.194723][ T6188] netlink: 64 bytes leftover after parsing attributes in process `syz.4.225'. [ 128.210937][ T1166] usb usb3-port1: attempt power cycle [ 128.227203][ T3241] usb 4-1: USB disconnect, device number 23 [ 128.504127][ T6191] [U] vÔ3¸Âfù¾"WçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 128.506031][ T5287] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 128.516679][ T6191] [U] J"—e:ÀÆ" [ 128.553063][ T1166] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 128.581107][ T1166] usb 3-1: device descriptor read/8, error -71 [ 128.632755][ T5290] gspca_zc3xx: reg_r err -71 [ 128.689739][ T5298] usb 1-1: USB disconnect, device number 22 [ 128.825306][ T1166] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 128.851065][ T1166] usb 3-1: device descriptor read/8, error -71 [ 128.969824][ T1166] usb usb3-port1: unable to enumerate USB device [ 129.257392][ T5290] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 129.264242][ T5290] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 129.270080][ T6212] Cannot find add_set index 0 as target [ 129.288043][ T5290] usb 2-1: USB disconnect, device number 23 [ 129.322822][ T6212] usb usb8: usbfs: process 6212 (syz.3.234) did not claim interface 0 before use [ 129.341682][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 129.341701][ T29] audit: type=1326 audit(1727613810.473:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6211 comm="syz.3.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x0 [ 129.429617][ T3241] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 129.593015][ T3241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.610534][ T3241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.629692][ T3241] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 129.644303][ T3241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.663441][ T3241] usb 5-1: config 0 descriptor?? [ 129.751900][ T1166] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 129.929961][ T1166] usb 2-1: Using ep0 maxpacket: 8 [ 129.939738][ T1166] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 129.949105][ T1166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.958697][ T1166] usb 2-1: Product: syz [ 129.965143][ T1166] usb 2-1: Manufacturer: syz [ 129.974510][ T1166] usb 2-1: SerialNumber: syz [ 129.986293][ T3241] usbhid 5-1:0.0: can't add hid device: -71 [ 129.993725][ T1166] usb 2-1: config 0 descriptor?? [ 130.006746][ T3241] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 130.027949][ T3241] usb 5-1: USB disconnect, device number 16 [ 130.095943][ T6239] binder_alloc: binder_alloc_mmap_handler: 6238 20ffd000-21000000 already mapped failed -16 [ 130.130928][ T6240] binder: BINDER_SET_CONTEXT_MGR already set [ 130.137024][ T6240] binder: 6238:6240 ioctl 4018620d 20000040 returned -16 [ 130.142417][ T6239] binder_alloc: binder_alloc_mmap_handler: 6238 20ffd000-21000000 already mapped failed -16 [ 130.186399][ T6240] binder: BINDER_SET_CONTEXT_MGR already set [ 130.215446][ T6239] binder_alloc: binder_alloc_mmap_handler: 6238 20ffd000-21000000 already mapped failed -16 [ 130.226912][ T1166] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.262112][ T6240] binder: 6238:6240 ioctl 4018620d 20000040 returned -16 [ 130.714881][ T6261] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 130.863895][ T6269] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 131.072715][ T1166] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 131.109600][ T1166] usb 2-1: USB disconnect, device number 24 [ 131.169848][ T3241] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 131.301877][ T6285] netlink: 'syz.2.249': attribute type 11 has an invalid length. [ 131.345028][ T3241] usb 4-1: config 1 has an invalid descriptor of length 170, skipping remainder of the config [ 131.354607][ T6283] netlink: 172 bytes leftover after parsing attributes in process `syz.4.250'. [ 131.365650][ T3241] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.386877][ T6283] netlink: 172 bytes leftover after parsing attributes in process `syz.4.250'. [ 131.387285][ T6280] ptrace attach of ""[6286] was attempted by "./syz-executor exec"[6280] [ 131.409528][ T3241] usb 4-1: config 1 has no interface number 0 [ 131.420899][ T3241] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.449810][ T3241] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 131.497215][ T3241] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.519452][ T3241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.527512][ T3241] usb 4-1: Product: syz [ 131.545536][ T3241] usb 4-1: Manufacturer: syz [ 131.557518][ T3241] usb 4-1: SerialNumber: syz [ 131.660728][ T29] audit: type=1326 audit(1727613812.793:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 131.686593][ T6292] Cannot find add_set index 0 as target [ 131.714457][ T29] audit: type=1326 audit(1727613812.793:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 131.770504][ T29] audit: type=1326 audit(1727613812.823:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 131.795159][ T6292] xt_NFQUEUE: number of total queues is 0 [ 131.843705][ T6269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.247'. [ 131.858130][ T29] audit: type=1326 audit(1727613812.823:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 131.907724][ T29] audit: type=1326 audit(1727613812.823:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 131.969479][ T29] audit: type=1326 audit(1727613812.823:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 132.018885][ T29] audit: type=1326 audit(1727613812.823:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 132.069542][ T5298] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 132.077224][ T29] audit: type=1326 audit(1727613812.823:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 132.152948][ T29] audit: type=1326 audit(1727613812.823:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.2.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f109557dff9 code=0x7ffc0000 [ 132.284026][ T5298] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.318225][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 132.369842][ T5298] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 132.425585][ T5298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.455516][ T5298] usb 2-1: config 0 descriptor?? [ 132.562393][ T3241] cdc_ncm 4-1:1.1: SET_NTB_FORMAT failed [ 132.592733][ T3241] cdc_ncm 4-1:1.1: bind() failure [ 132.613429][ T3241] usb 4-1: USB disconnect, device number 24 [ 132.693966][ T5298] Bluetooth: Can't get state to change to load ram patch err [ 132.712658][ T5298] Bluetooth: Loading patch file failed [ 132.727039][ T5298] ath3k 2-1:0.0: probe with driver ath3k failed with error -32 [ 133.113518][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.120019][ T3241] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 133.127735][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.299478][ T3241] usb 1-1: device descriptor read/64, error -71 [ 133.471025][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 133.540581][ T5298] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 133.590656][ T3241] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 133.707766][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 133.729947][ T5298] usb 3-1: Using ep0 maxpacket: 16 [ 133.740426][ T3241] usb 1-1: device descriptor read/64, error -71 [ 133.771014][ T5298] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 133.780047][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.800037][ T5298] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.825664][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.844129][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 133.844903][ T5298] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.867586][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.886430][ T3241] usb usb1-port1: attempt power cycle [ 133.906762][ T5298] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 133.915683][ T5298] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.927005][ T9] usb 4-1: config 0 descriptor?? [ 133.933863][ T5298] usb 3-1: config 0 has no interface number 0 [ 133.946192][ T5298] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 133.959069][ T5298] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 133.971742][ T5298] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.989891][ T5298] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.003738][ T5298] usb 3-1: config 0 interface 125 has no altsetting 0 [ 134.011174][ T5298] usb 3-1: config 0 interface 125 has no altsetting 2 [ 134.022843][ T5298] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 134.035698][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.046789][ T5298] usb 3-1: Product: syz [ 134.055530][ T5298] usb 3-1: Manufacturer: syz [ 134.063393][ T5298] usb 3-1: SerialNumber: syz [ 134.080822][ T5298] usb 3-1: config 0 descriptor?? [ 134.091714][ T5298] usb 3-1: selecting invalid altsetting 2 [ 134.179530][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.259637][ T3241] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 134.297741][ T3241] usb 1-1: device descriptor read/8, error -71 [ 134.359572][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 134.377262][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.390141][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.406375][ T25] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 134.417267][ T9] wacom 0003:056A:0013.0009: Unknown device_type for 'HID 056a:0013'. Assuming pen. [ 134.417773][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.441062][ T9] wacom 0003:056A:0013.0009: hidraw0: USB HID v0.00 Device [HID 056a:0013] on usb-dummy_hcd.3-1/input0 [ 134.442126][ T25] usb 5-1: config 0 descriptor?? [ 134.462625][ T25] usb 5-1: bad CDC descriptors [ 134.513597][ T9] input: Wacom Graphire3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0013.0009/input/input12 [ 134.558760][ T3241] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 134.614005][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.639229][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.663877][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.672080][ T1166] usb 2-1: USB disconnect, device number 25 [ 134.708688][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.808051][ T25] usb 5-1: USB disconnect, device number 17 [ 134.817201][ T3241] usb 1-1: device not accepting address 26, error -71 [ 134.833430][ T3241] usb usb1-port1: unable to enumerate USB device [ 134.889979][ T1166] usb 4-1: USB disconnect, device number 25 [ 135.138102][ C1] usb 3-1: async_complete: urb error -71 [ 135.150358][ T5298] get_1284_register: usb error -71 [ 135.177119][ T5298] uss720 3-1:0.125: probe with driver uss720 failed with error -71 [ 135.227698][ T5298] usb 3-1: USB disconnect, device number 25 [ 135.639875][ T6338] syz.3.265 (6338) used greatest stack depth: 18584 bytes left [ 135.839960][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 135.839980][ T29] audit: type=1804 audit(1727613816.963:144): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.268" name="/newroot/55/file0" dev="fuse" ino=1 res=1 errno=0 [ 136.609519][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 136.779656][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 136.791856][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.812974][ T3241] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 136.819410][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.849474][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.889411][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.920361][ T9] usb 2-1: config 0 descriptor?? [ 136.941472][ T9] hub 2-1:0.0: USB hub found [ 136.999822][ T3241] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.019748][ T3241] usb 3-1: not running at top speed; connect to a high speed hub [ 137.047375][ T3241] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.063577][ T3241] usb 3-1: string descriptor 0 read error: -22 [ 137.073604][ T3241] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= 2.73 [ 137.089249][ T3241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.107897][ T3241] usb 3-1: config 0 descriptor?? [ 137.121803][ T29] audit: type=1326 audit(1727613818.253:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.0.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f874577dff9 code=0x0 [ 137.133729][ T3241] gspca_main: spca501-2.14.0 probing 0497:c001 [ 137.143569][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.154662][ T9] hub 2-1:0.0: 2 ports detected [ 137.321210][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.378173][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.533982][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.672704][ T3241] gspca_spca501: reg write: error -110 [ 137.685361][ T3241] spca501 3-1:0.0: Reg write failed for 0x02,0x07,0x05 [ 137.714341][ T3241] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 137.760783][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 137.770217][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 137.779511][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 137.792860][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 137.801075][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 137.810080][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 137.928799][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.998297][ T1166] usb 3-1: USB disconnect, device number 26 [ 138.063533][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.208536][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.406599][ T29] audit: type=1800 audit(1727613819.533:146): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="/" dev="fuse" ino=1 res=0 errno=0 [ 138.456899][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 138.478383][ T67] bridge_slave_1: left allmulticast mode [ 138.484904][ T67] bridge_slave_1: left promiscuous mode [ 138.498415][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.518140][ T67] bridge_slave_0: left allmulticast mode [ 138.523993][ T67] bridge_slave_0: left promiscuous mode [ 138.537509][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.548905][ T9] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 138.556158][ T9] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 138.569214][ T9] usbhid 2-1:0.0: can't add hid device: -32 [ 138.580022][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 139.021694][ T25] usb 2-1: USB disconnect, device number 26 [ 139.179480][ T5298] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 139.360237][ T5298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.383732][ T5298] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 139.398434][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 139.423603][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 139.442515][ T5298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.458485][ T5298] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 139.468074][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.476544][ T5298] usb 3-1: Product: syz [ 139.481281][ T5298] usb 3-1: Manufacturer: syz [ 139.487029][ T5298] usb 3-1: SerialNumber: syz [ 139.492886][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.495515][ T5298] usb 3-1: config 0 descriptor?? [ 139.517900][ T6397] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.534658][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.560117][ T67] bond0 (unregistering): Released all slaves [ 139.619705][ T5298] rc_core: IR keymap rc-xbox-dvd not found [ 139.628952][ T5298] Registered IR keymap rc-empty [ 139.648600][ T5298] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 139.683513][ T5298] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 139.808630][ T5298] usb 3-1: USB disconnect, device number 27 [ 139.814740][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 139.900816][ T5239] Bluetooth: hci1: command tx timeout [ 140.056188][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.064568][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.073723][ T6373] bridge_slave_0: entered allmulticast mode [ 140.081774][ T6373] bridge_slave_0: entered promiscuous mode [ 140.100255][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.108698][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.119044][ T6373] bridge_slave_1: entered allmulticast mode [ 140.126784][ T6373] bridge_slave_1: entered promiscuous mode [ 140.195148][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.213887][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.249523][ T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 140.277981][ T67] hsr_slave_0: left promiscuous mode [ 140.285268][ T67] hsr_slave_1: left promiscuous mode [ 140.298259][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.307865][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.319086][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.327073][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.355484][ T67] veth1_macvtap: left promiscuous mode [ 140.367345][ T67] veth0_macvtap: left promiscuous mode [ 140.373194][ T67] veth1_vlan: left promiscuous mode [ 140.378795][ T67] veth0_vlan: left promiscuous mode [ 140.451791][ T25] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 140.473718][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.498112][ T25] usb 4-1: Product: syz [ 140.515446][ T25] usb 4-1: Manufacturer: syz [ 140.530016][ T25] usb 4-1: SerialNumber: syz [ 140.550752][ T25] usb 4-1: config 0 descriptor?? [ 140.776452][ T29] audit: type=1326 audit(1727613821.903:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 140.841389][ T29] audit: type=1326 audit(1727613821.903:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 140.923925][ T29] audit: type=1326 audit(1727613821.903:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 140.987997][ T29] audit: type=1326 audit(1727613821.903:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.035578][ T29] audit: type=1326 audit(1727613821.903:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.087871][ T29] audit: type=1326 audit(1727613821.903:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.126517][ T29] audit: type=1326 audit(1727613821.903:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.155957][ T29] audit: type=1326 audit(1727613821.903:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.191847][ T29] audit: type=1326 audit(1727613821.903:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.217930][ T29] audit: type=1326 audit(1727613821.903:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.257384][ T5287] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 141.265286][ T29] audit: type=1326 audit(1727613821.903:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.295355][ T29] audit: type=1326 audit(1727613821.903:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5f857dff9 code=0x7ffc0000 [ 141.319726][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.287'. [ 141.429942][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 141.447998][ T5287] usb 3-1: unable to get BOS descriptor or descriptor too short [ 141.477868][ T5287] usb 3-1: config 1 has an invalid interface number: 26 but max is 1 [ 141.488593][ T5287] usb 3-1: config 1 has an invalid interface number: 89 but max is 1 [ 141.503316][ T5287] usb 3-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 141.516554][ T5287] usb 3-1: config 1 has no interface number 0 [ 141.526478][ T5287] usb 3-1: config 1 has no interface number 1 [ 141.537389][ T5287] usb 3-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 141.553814][ T5287] usb 3-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 141.568355][ T5287] usb 3-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 141.592947][ T5287] usb 3-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 141.606883][ T5287] usb 3-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 141.626806][ T5287] usb 3-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.647778][ T5287] usb 3-1: config 1 interface 26 has no altsetting 0 [ 141.655077][ T5287] usb 3-1: config 1 interface 89 has no altsetting 0 [ 141.671013][ T5287] usb 3-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 141.686363][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.698871][ T5287] usb 3-1: Product: syz [ 141.709732][ T5287] usb 3-1: Manufacturer: syz [ 141.714558][ T5287] usb 3-1: SerialNumber: syz [ 141.730944][ T6439] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.739214][ T6439] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.843376][ T67] team0 (unregistering): Port device team_slave_1 removed [ 141.928335][ T67] team0 (unregistering): Port device team_slave_0 removed [ 141.965434][ T6443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.988238][ T5239] Bluetooth: hci1: command tx timeout [ 142.813410][ T6373] team0: Port device team_slave_0 added [ 142.883741][ T6441] vxlan0: entered promiscuous mode [ 142.983759][ T6373] team0: Port device team_slave_1 added [ 143.013938][ T5287] usb 3-1: unknown interface protocol 0x7d, assuming v1 [ 143.027702][ T5287] usb 3-1: 26:2 : does not exist [ 143.062578][ T5287] usb 3-1: unknown interface protocol 0x13, assuming v1 [ 143.074643][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 143.075158][ T5287] usb 3-1: 89:2 : does not exist [ 143.137963][ T5287] usb 3-1: USB disconnect, device number 28 [ 143.164084][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.181812][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.239380][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.261366][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.268364][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.329537][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.354598][ T5253] udevd[5253]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.620564][ T5287] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 143.710492][ T6373] hsr_slave_0: entered promiscuous mode [ 143.717059][ T6373] hsr_slave_1: entered promiscuous mode [ 143.730383][ T6373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.749158][ T6373] Cannot create hsr debugfs directory [ 143.780745][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 144.067629][ T5237] Bluetooth: hci1: command tx timeout [ 144.076283][ T25] usb 4-1: USB disconnect, device number 26 [ 144.077209][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.100735][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.112126][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.119461][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.120894][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.161774][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.169693][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.177079][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.184507][ T5287] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.235503][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.291287][ T5287] usb 2-1: config 0 descriptor?? [ 144.394792][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.499529][ T5288] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 144.535731][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.662927][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.673646][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 144.685071][ T5288] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 144.723518][ T5288] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 144.750982][ T5288] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 144.764525][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.781451][ T5288] usb 3-1: Product: syz [ 144.785696][ T5288] usb 3-1: Manufacturer: syz [ 144.791210][ T5288] usb 3-1: SerialNumber: syz [ 144.797267][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.829148][ T6470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.918136][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.935950][ T6470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.021255][ T5288] usb 3-1: Invalid connection information received from device [ 145.147875][ T6475] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.224987][ T9] usb 3-1: USB disconnect, device number 29 [ 145.377061][ T67] bridge_slave_1: left allmulticast mode [ 145.383742][ T67] bridge_slave_1: left promiscuous mode [ 145.396013][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.405572][ T67] bridge_slave_0: left allmulticast mode [ 145.415702][ T67] bridge_slave_0: left promiscuous mode [ 145.421856][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.958164][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.977954][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.004729][ T67] bond0 (unregistering): Released all slaves [ 146.106118][ T6488] usb usb8: usbfs: process 6488 (syz.3.296) did not claim interface 1 before use [ 146.140581][ T5240] Bluetooth: hci1: command tx timeout [ 146.165141][ T6373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 146.219697][ T5240] Bluetooth: hci0: command tx timeout [ 146.293771][ T5287] usbhid 2-1:0.0: can't add hid device: -71 [ 146.317031][ T5287] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 146.335460][ T6457] chnl_net:caif_netlink_parms(): no params data found [ 146.345022][ T5287] usb 2-1: USB disconnect, device number 27 [ 146.450442][ T6373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 146.613445][ T6373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.644798][ T6373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.714582][ T5287] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 146.775791][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.783791][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.792212][ T6457] bridge_slave_0: entered allmulticast mode [ 146.800739][ T6457] bridge_slave_0: entered promiscuous mode [ 146.813728][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.821055][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.828316][ T6457] bridge_slave_1: entered allmulticast mode [ 146.840713][ T6457] bridge_slave_1: entered promiscuous mode [ 146.896864][ T5287] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 146.918653][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.944848][ T5287] usb 2-1: config 0 descriptor?? [ 146.961072][ T5287] cp210x 2-1:0.0: cp210x converter detected [ 146.967245][ T67] hsr_slave_0: left promiscuous mode [ 146.979871][ T67] hsr_slave_1: left promiscuous mode [ 146.986395][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.994541][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.003112][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.011015][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.037419][ T67] veth1_macvtap: left promiscuous mode [ 147.043321][ T67] veth0_macvtap: left promiscuous mode [ 147.048981][ T67] veth1_vlan: left promiscuous mode [ 147.054422][ T67] veth0_vlan: left promiscuous mode [ 147.267568][ T5287] usb 2-1: cp210x converter now attached to ttyUSB0 [ 147.474397][ T5287] usb 2-1: USB disconnect, device number 28 [ 147.496246][ T5287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 147.514868][ T5287] cp210x 2-1:0.0: device disconnected [ 147.597751][ T67] team0 (unregistering): Port device team_slave_1 removed [ 147.639437][ T67] team0 (unregistering): Port device team_slave_0 removed [ 148.088524][ T6457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.098919][ T6506] fuse: Bad value for 'fd' [ 148.211643][ T6457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.297246][ T6457] team0: Port device team_slave_0 added [ 148.305679][ T6457] team0: Port device team_slave_1 added [ 148.309719][ T5240] Bluetooth: hci0: command tx timeout [ 148.343273][ T5298] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 148.345757][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.374740][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.406332][ T6457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.422941][ T6457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.431211][ T6457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.457995][ T6457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.489475][ T3241] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 148.549778][ T5298] usb 2-1: Using ep0 maxpacket: 16 [ 148.559093][ T5298] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 148.568879][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.580428][ T5298] usb 2-1: Product: syz [ 148.584682][ T5298] usb 2-1: Manufacturer: syz [ 148.592799][ T5298] usb 2-1: SerialNumber: syz [ 148.600821][ T6457] hsr_slave_0: entered promiscuous mode [ 148.608643][ T5298] usb 2-1: config 0 descriptor?? [ 148.614791][ T6457] hsr_slave_1: entered promiscuous mode [ 148.623595][ T5298] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 148.627593][ T6457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.630391][ T5298] pctv452e: pctv452e_power_ctrl: 1 [ 148.630391][ T5298] [ 148.643822][ T6457] Cannot create hsr debugfs directory [ 148.645314][ T5298] usb 2-1: selecting invalid altsetting 3 [ 148.657327][ T5298] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 148.657327][ T5298] [ 148.669653][ T5298] dvb-usb: bulk message failed: -22 (5/0) [ 148.689504][ T3241] usb 3-1: Using ep0 maxpacket: 16 [ 148.702876][ T3241] usb 3-1: config 1 interface 0 altsetting 247 bulk endpoint 0x82 has invalid maxpacket 16 [ 148.716107][ T3241] usb 3-1: config 1 interface 0 has no altsetting 0 [ 148.725966][ T5298] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.737064][ T5298] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 148.747221][ T3241] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 148.759468][ T5298] usb 2-1: media controller created [ 148.764861][ T3241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.779469][ T3241] usb 3-1: Product: á° [ 148.789690][ T3241] usb 3-1: Manufacturer: à° [ 148.799094][ T5298] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.809412][ T3241] usb 3-1: SerialNumber: syz [ 148.822257][ T6511] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 148.905892][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.966191][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.994694][ T5298] DVB: Unable to find symbol stb0899_attach() [ 149.023296][ T5298] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 149.172313][ T5298] rc_core: IR keymap rc-dib0700-rc5 not found [ 149.182829][ T5298] Registered IR keymap rc-empty [ 149.188750][ T5298] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 149.214330][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.221576][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.232454][ T5298] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input16 [ 149.266625][ T5298] dvb-usb: schedule remote query interval to 100 msecs. [ 149.280674][ T3241] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 247 proto 3 vid 0x0525 pid 0xA4A8 [ 149.299753][ T5298] pctv452e: pctv452e_power_ctrl: 0 [ 149.299753][ T5298] [ 149.320391][ T5298] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 149.335773][ T6526] warning: `syz.3.304' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.343480][ T3241] usb 3-1: USB disconnect, device number 30 [ 149.380969][ T3241] usblp0: removed [ 149.421263][ T25] dvb-usb: bulk message failed: -22 (4/0) [ 149.431363][ T25] dvb-usb: error -22 while querying for an remote control event. [ 149.462775][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.469999][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.509712][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 149.560584][ T5298] dvb-usb: bulk message failed: -22 (4/0) [ 149.566457][ T5298] dvb-usb: error -22 while querying for an remote control event. [ 149.680821][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 149.704421][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 149.720663][ T5298] dvb-usb: bulk message failed: -22 (4/0) [ 149.721858][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.746472][ T5298] dvb-usb: error -22 while querying for an remote control event. [ 149.756127][ T9] usb 4-1: Product: syz [ 149.783630][ T9] usb 4-1: Manufacturer: syz [ 149.794710][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.806591][ T9] usb 4-1: SerialNumber: syz [ 149.822605][ T9] usb 4-1: config 0 descriptor?? [ 149.851233][ T9] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 149.880001][ T5298] dvb-usb: bulk message failed: -22 (4/0) [ 149.907793][ T5298] dvb-usb: error -22 while querying for an remote control event. [ 149.909793][ T1166] usb 2-1: USB disconnect, device number 29 [ 150.010372][ T1166] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 150.043689][ T6373] veth0_vlan: entered promiscuous mode [ 150.053432][ T9] pwc: Warning: more than 1 configuration available. [ 150.070301][ T9] pwc: Failed to set LED on/off time (-71) [ 150.093269][ T9] pwc: send_video_command error -71 [ 150.098540][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 150.108964][ T6373] veth1_vlan: entered promiscuous mode [ 150.125041][ T9] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 150.136783][ T6457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.159867][ T9] usb 4-1: USB disconnect, device number 27 [ 150.168756][ T6457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.183329][ T6457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.203878][ T6457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.232767][ T6373] veth0_macvtap: entered promiscuous mode [ 150.246356][ T6373] veth1_macvtap: entered promiscuous mode [ 150.286044][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.298008][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.308906][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.321352][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.333171][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.357523][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.374032][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.390522][ T5240] Bluetooth: hci0: command tx timeout [ 150.409541][ T6373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.420322][ T6373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.431979][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.445576][ T6373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.454703][ T6373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.463840][ T6373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.474822][ T6373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.725226][ T6457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.763199][ T6556] dccp_v6_rcv: dropped packet with invalid checksum [ 150.782015][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.794693][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.888151][ T6457] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.917966][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.937313][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.944051][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.951867][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.986783][ T6565] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 151.005624][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.013220][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.029615][ T5290] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 151.258048][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 246, changing to 11 [ 151.272764][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.291766][ T6457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.302851][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 151.332986][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 151.382997][ T5290] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 151.392869][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.408832][ T6578] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 151.426941][ T5290] usb 2-1: Product: syz [ 151.439920][ T5290] usb 2-1: Manufacturer: syz [ 151.467309][ T5290] usb 2-1: SerialNumber: syz [ 151.482506][ T5290] usb 2-1: config 0 descriptor?? [ 151.497228][ T6457] veth0_vlan: entered promiscuous mode [ 151.553557][ T6457] veth1_vlan: entered promiscuous mode [ 151.609673][ T3241] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 151.653766][ T6457] veth0_macvtap: entered promiscuous mode [ 151.678797][ T6457] veth1_macvtap: entered promiscuous mode [ 151.717203][ T5290] adutux 2-1:0.0: Could not retrieve serial number [ 151.723023][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.745111][ T5290] adutux 2-1:0.0: probe with driver adutux failed with error -5 [ 151.767809][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.780477][ T3241] usb 4-1: Using ep0 maxpacket: 32 [ 151.819531][ T3241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 151.830500][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.859402][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.875380][ T3241] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 151.887321][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.908185][ T3241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.927049][ T3241] usb 4-1: Product: syz [ 151.931530][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.942207][ T3241] usb 4-1: Manufacturer: syz [ 151.946867][ T3241] usb 4-1: SerialNumber: syz [ 151.961488][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.985739][ T3241] usb 4-1: config 0 descriptor?? [ 152.021052][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.026140][ T6601] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 152.049723][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.069508][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.096326][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.124576][ T6457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.145836][ T6457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.174826][ T6457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.223482][ T6457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.233016][ T6457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.244080][ T6457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.253507][ T6457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.443124][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.459824][ T5240] Bluetooth: hci0: command tx timeout [ 152.558977][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.585257][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.613622][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.649622][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 152.736571][ T5290] usb 4-1: USB disconnect, device number 28 [ 152.740011][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.793483][ T2561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.811204][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 152.826489][ T2561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.833962][ T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.857409][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.873567][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.887068][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.915282][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 152.927843][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.937010][ T8] usb 3-1: Product: syz [ 152.944911][ T8] usb 3-1: Manufacturer: syz [ 152.950228][ T8] usb 3-1: SerialNumber: syz [ 152.973219][ T6614] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 152.998009][ T8] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 153.039531][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 153.048959][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 153.058129][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 153.066901][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 153.082031][ T8] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 153.111880][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 153.120166][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 153.159500][ T8] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 153.220667][ T8] usb 3-1: USB disconnect, device number 31 [ 153.351359][ T12] bridge_slave_1: left allmulticast mode [ 153.357087][ T12] bridge_slave_1: left promiscuous mode [ 153.379696][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.392229][ T12] bridge_slave_0: left allmulticast mode [ 153.397947][ T12] bridge_slave_0: left promiscuous mode [ 153.421152][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.786744][ T8] usb 2-1: USB disconnect, device number 30 [ 154.129588][ T5298] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 154.271689][ T8] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 154.309505][ T5298] usb 3-1: Using ep0 maxpacket: 8 [ 154.319823][ T5298] usb 3-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 154.329080][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.342175][ T5298] usb 3-1: Product: syz [ 154.346377][ T5298] usb 3-1: Manufacturer: syz [ 154.354409][ T5298] usb 3-1: SerialNumber: syz [ 154.361047][ T5298] usb 3-1: config 0 descriptor?? [ 154.368958][ T5298] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 154.439144][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.467010][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.469538][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 154.494678][ T12] bond0 (unregistering): Released all slaves [ 154.514307][ T8] usb 2-1: config 0 has no interfaces? [ 154.542309][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.566791][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.614882][ T8] usb 2-1: config 0 descriptor?? [ 154.658966][ T5298] gspca_sonixj: reg_r err -71 [ 154.690158][ T5298] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 154.732282][ T5298] usb 3-1: USB disconnect, device number 32 [ 154.857431][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.897981][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.948198][ T8] usb 2-1: USB disconnect, device number 31 [ 155.187096][ T5239] Bluetooth: hci1: command tx timeout [ 155.245666][ T12] hsr_slave_0: left promiscuous mode [ 155.265048][ T12] hsr_slave_1: left promiscuous mode [ 155.287074][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.297407][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.299525][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 155.320347][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.338141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.382971][ T12] veth1_macvtap: left promiscuous mode [ 155.388580][ T12] veth0_macvtap: left promiscuous mode [ 155.419866][ T12] veth1_vlan: left promiscuous mode [ 155.429886][ T12] veth0_vlan: left promiscuous mode [ 155.449579][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 155.479638][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 155.490184][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 155.525934][ T9] usb 3-1: config 0 has no interface number 0 [ 155.546728][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.578306][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.606829][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 155.624044][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.638173][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 155.652309][ T8] usb 2-1: config 0 interface 0 has no altsetting 1 [ 155.676570][ T8] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice= 0.00 [ 155.689520][ T9] usb 3-1: Product: syz [ 155.693755][ T9] usb 3-1: SerialNumber: syz [ 155.711674][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.726779][ T9] usb 3-1: config 0 descriptor?? [ 155.736367][ T8] usb 2-1: SerialNumber: syz [ 155.746845][ T9] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 155.762256][ T8] usb 2-1: config 0 descriptor?? [ 155.769976][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input17 [ 155.795972][ T8] ttusbir 2-1:0.0: cannot find expected altsetting [ 156.004338][ T6673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.034485][ T9] usb 2-1: USB disconnect, device number 32 [ 156.042574][ T6673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.069044][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 156.071806][ T25] usb 3-1: USB disconnect, device number 33 [ 156.076524][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 156.128676][ T25] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 156.448577][ T12] team0 (unregistering): Port device team_slave_1 removed [ 156.494026][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.234115][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 157.260827][ T5239] Bluetooth: hci1: command tx timeout [ 157.263002][ T5240] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 157.276285][ T5240] Bluetooth: hci4: Injecting HCI hardware error event [ 157.285469][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 157.295882][ T5240] Bluetooth: hci4: hardware error 0x00 [ 157.351645][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 157.377569][ T6714] tipc: Failed to remove unknown binding: 66,1,1/0:2750252103/2750252105 [ 157.427748][ T6714] tipc: Failed to remove unknown binding: 66,1,1/0:2750252103/2750252105 [ 157.469427][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 157.487594][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.519556][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 157.528907][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.538500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.556550][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.573602][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.600683][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.604475][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.631627][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.654182][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.661108][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.690147][ T6621] bridge_slave_0: entered allmulticast mode [ 157.696747][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 157.707124][ T6621] bridge_slave_0: entered promiscuous mode [ 157.713416][ T25] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 157.713450][ T25] usb 2-1: Manufacturer: syz [ 157.717227][ T25] usb 2-1: config 0 descriptor?? [ 157.736425][ T9] usb 3-1: Product: syz [ 157.741128][ T9] usb 3-1: Manufacturer: syz [ 157.759237][ T9] usb 3-1: SerialNumber: syz [ 157.775536][ T25] usbhid 2-1:0.0: can't add hid device: -22 [ 157.785238][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 157.797991][ T9] usb 3-1: config 0 descriptor?? [ 157.806195][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.839016][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.849591][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.857043][ T6621] bridge_slave_1: entered allmulticast mode [ 157.881241][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 157.895424][ T6621] bridge_slave_1: entered promiscuous mode [ 157.989131][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.010243][ T3241] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 158.011887][ T8] usb 2-1: USB disconnect, device number 33 [ 158.095133][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.164486][ T6621] team0: Port device team_slave_0 added [ 158.178089][ T6621] team0: Port device team_slave_1 added [ 158.187053][ T3241] usb 1-1: Using ep0 maxpacket: 8 [ 158.196610][ T3241] usb 1-1: no configurations [ 158.217291][ T3241] usb 1-1: can't read configurations, error -22 [ 158.266444][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.274338][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.303145][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.310709][ T25] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 158.327841][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.335010][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.363306][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.380744][ T3241] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 158.412313][ T6621] hsr_slave_0: entered promiscuous mode [ 158.418726][ T6621] hsr_slave_1: entered promiscuous mode [ 158.425585][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.434111][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 158.440522][ T6621] Cannot create hsr debugfs directory [ 158.452659][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 158.469738][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 158.477487][ T25] usb 4-1: New USB device found, idVendor=042c, idProduct=7505, bcdDevice=32.a8 [ 158.495250][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.516097][ T25] usb 4-1: config 0 descriptor?? [ 158.549596][ T3241] usb 1-1: Using ep0 maxpacket: 8 [ 158.567386][ T3241] usb 1-1: no configurations [ 158.572747][ T3241] usb 1-1: can't read configurations, error -22 [ 158.579945][ T3241] usb usb1-port1: attempt power cycle [ 158.793980][ T5287] usb 4-1: USB disconnect, device number 29 [ 158.919446][ T3241] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 158.937952][ T6746] kvm: kvm [6744]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xc640 [ 158.950206][ T3241] usb 1-1: Using ep0 maxpacket: 8 [ 158.963473][ T6746] kvm: kvm [6744]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0xa740 [ 158.964909][ T3241] usb 1-1: no configurations [ 158.995353][ T3241] usb 1-1: can't read configurations, error -22 [ 159.160707][ T3241] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 159.183680][ T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 159.201769][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 159.203752][ T3241] usb 1-1: Using ep0 maxpacket: 8 [ 159.229798][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 159.232913][ T3241] usb 1-1: no configurations [ 159.265518][ T3241] usb 1-1: can't read configurations, error -22 [ 159.278130][ T3241] usb usb1-port1: unable to enumerate USB device [ 159.299210][ T6621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 159.322510][ T6621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 159.340707][ T5239] Bluetooth: hci1: command tx timeout [ 159.347430][ T5240] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 159.351435][ T6621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.437960][ T6621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 159.759693][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.850996][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.921106][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.928334][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.976517][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.983758][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.073647][ T6775] tty tty4: ldisc open failed (-12), clearing slot 3 [ 160.222083][ T6621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.245294][ T6621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.303400][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 160.310295][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.334660][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 160.356917][ T9] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 160.357980][ T6621] veth0_vlan: entered promiscuous mode [ 160.379208][ T6621] veth1_vlan: entered promiscuous mode [ 160.434107][ T6621] veth0_macvtap: entered promiscuous mode [ 160.444271][ T6621] veth1_macvtap: entered promiscuous mode [ 160.477534][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.500026][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.526626][ T3241] usb 3-1: USB disconnect, device number 34 [ 160.537369][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.567893][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.595569][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.613896][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.647529][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.659664][ T5298] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 160.714147][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.740689][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.771142][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.822799][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.844725][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.869963][ T5298] usb 2-1: Using ep0 maxpacket: 32 [ 160.888076][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.900800][ T5298] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.915272][ T5298] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.943886][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.966618][ T5298] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 160.986398][ T5298] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 161.003947][ T6621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.019575][ T5298] usb 2-1: Product: syz [ 161.023813][ T5298] usb 2-1: Manufacturer: syz [ 161.039412][ T6621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.048274][ T6621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.080018][ T5298] hub 2-1:4.0: USB hub found [ 161.095950][ T6621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.341750][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.403327][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.419816][ T5240] Bluetooth: hci1: command tx timeout [ 161.469133][ T5298] hub 2-1:4.0: 2 ports detected [ 161.484639][ T5298] hub 2-1:4.0: insufficient power available to use all downstream ports [ 161.485924][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.545768][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.609546][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 161.756964][ T29] audit: type=1800 audit(1727613842.883:159): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.352" name="/" dev="fuse" ino=1 res=0 errno=0 [ 161.779219][ T29] audit: type=1800 audit(1727613842.903:160): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.352" name="/" dev="fuse" ino=1 res=0 errno=0 [ 161.784183][ T5287] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 161.824359][ T6812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.833492][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 161.843826][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.868678][ T9] usb 1-1: config 0 descriptor?? [ 161.878073][ T9] usb 1-1: Invalid firmware size=18. [ 161.991615][ T5287] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 162.005918][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.020360][ T5287] usb 3-1: config 0 descriptor?? [ 162.034962][ T5287] cp210x 3-1:0.0: cp210x converter detected [ 162.106754][ T9] usb 1-1: USB disconnect, device number 31 [ 162.308428][ T5287] usb 3-1: cp210x converter now attached to ttyUSB0 [ 162.379443][ T5298] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 162.385868][ T5298] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 162.462519][ T5298] usb 2-1: USB disconnect, device number 34 [ 162.525459][ T25] usb 3-1: USB disconnect, device number 35 [ 162.579618][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 162.587850][ T25] cp210x 3-1:0.0: device disconnected [ 162.688645][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.980732][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.180077][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.451115][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.492347][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.501527][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.521736][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.525390][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.530873][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.540945][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.545230][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.552769][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.568240][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 163.576149][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.591089][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 163.600229][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 163.649429][ T5288] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 163.839916][ T5288] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 163.859493][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.910673][ T5288] usb 2-1: config 0 descriptor?? [ 164.127236][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.184476][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 164.240899][ T5242] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 164.332637][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.419694][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 164.429676][ T5242] usb 1-1: no configurations [ 164.434389][ T5242] usb 1-1: can't read configurations, error -22 [ 164.451692][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.494330][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 164.545551][ T25] usb 2-1: USB disconnect, device number 35 [ 164.580600][ T5242] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 164.615223][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.659737][ T6873] chnl_net:caif_netlink_parms(): no params data found [ 164.759494][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 164.786223][ T5242] usb 1-1: no configurations [ 164.806255][ T5242] usb 1-1: can't read configurations, error -22 [ 164.840532][ T5242] usb usb1-port1: attempt power cycle [ 164.943118][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.961938][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.969241][ T6873] bridge_slave_0: entered allmulticast mode [ 164.986412][ T6873] bridge_slave_0: entered promiscuous mode [ 164.994978][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.009784][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.022836][ T6875] bridge_slave_0: entered allmulticast mode [ 165.039137][ T6875] bridge_slave_0: entered promiscuous mode [ 165.072588][ T6928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 165.199986][ T5242] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 165.224879][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.233062][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 165.238922][ T5242] usb 1-1: no configurations [ 165.246282][ T5242] usb 1-1: can't read configurations, error -22 [ 165.253015][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.265997][ T6873] bridge_slave_1: entered allmulticast mode [ 165.284871][ T6945] pty pty23: ldisc open failed (-12), clearing slot 23 [ 165.287099][ T6873] bridge_slave_1: entered promiscuous mode [ 165.319823][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.327339][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.358057][ T6875] bridge_slave_1: entered allmulticast mode [ 165.384381][ T6875] bridge_slave_1: entered promiscuous mode [ 165.400095][ T5242] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 165.414153][ T11] bridge_slave_1: left allmulticast mode [ 165.421902][ T11] bridge_slave_1: left promiscuous mode [ 165.427666][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.477949][ T5242] usb 1-1: Using ep0 maxpacket: 8 [ 165.478967][ T11] bridge_slave_0: left allmulticast mode [ 165.485193][ T5242] usb 1-1: no configurations [ 165.495922][ T5242] usb 1-1: can't read configurations, error -22 [ 165.499942][ T11] bridge_slave_0: left promiscuous mode [ 165.505389][ T5242] usb usb1-port1: unable to enumerate USB device [ 165.520067][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.567357][ T11] bridge_slave_1: left allmulticast mode [ 165.573586][ T11] bridge_slave_1: left promiscuous mode [ 165.574749][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 165.580872][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.598945][ T11] bridge_slave_0: left allmulticast mode [ 165.608602][ T11] bridge_slave_0: left promiscuous mode [ 165.621503][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.664781][ T5243] Bluetooth: hci1: command tx timeout [ 165.671760][ T5243] Bluetooth: hci3: command tx timeout [ 166.342187][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.353926][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.365285][ T11] bond0 (unregistering): Released all slaves [ 166.383607][ T11] bond1 (unregistering): Released all slaves [ 166.504686][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.516313][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.528509][ T11] bond0 (unregistering): Released all slaves [ 166.790812][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.889976][ T6964] veth1_macvtap: left promiscuous mode [ 166.906952][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.919163][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.947379][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.966255][ T6968] veth1_macvtap: entered promiscuous mode [ 166.974227][ T6968] macsec0: entered allmulticast mode [ 166.986292][ T6968] veth1_macvtap: entered allmulticast mode [ 167.017443][ T6962] netlink: 1080 bytes leftover after parsing attributes in process `syz.2.373'. [ 167.416965][ T6873] team0: Port device team_slave_0 added [ 167.470731][ T6873] team0: Port device team_slave_1 added [ 167.495502][ T6875] team0: Port device team_slave_0 added [ 167.610573][ T6875] team0: Port device team_slave_1 added [ 167.697082][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.705818][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.737946][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.749505][ T5240] Bluetooth: hci3: command tx timeout [ 167.754960][ T5240] Bluetooth: hci1: command tx timeout [ 167.767952][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.775586][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.801820][ T5298] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 167.809998][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.958069][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.965613][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.996453][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.008200][ T5298] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 168.017562][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.019617][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 20, changing to 8 [ 168.037320][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.037377][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.064243][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1196, setting to 1024 [ 168.112324][ T5298] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 168.138540][ T5298] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 168.149183][ T5298] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 168.157801][ T5298] usb 3-1: Manufacturer: syz [ 168.169752][ T6873] hsr_slave_0: entered promiscuous mode [ 168.176524][ T5298] usb 3-1: config 0 descriptor?? [ 168.186002][ T6992] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 168.200771][ T6873] hsr_slave_1: entered promiscuous mode [ 168.220534][ T6873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.228185][ T6873] Cannot create hsr debugfs directory [ 168.279980][ T3241] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 168.340215][ T11] hsr_slave_0: left promiscuous mode [ 168.347974][ T11] hsr_slave_1: left promiscuous mode [ 168.365108][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.377789][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.390172][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.397656][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.417392][ T11] hsr_slave_0: left promiscuous mode [ 168.424335][ T11] hsr_slave_1: left promiscuous mode [ 168.448945][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.457179][ T3241] usb 1-1: Using ep0 maxpacket: 32 [ 168.472111][ T3241] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 168.482919][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.501783][ T3241] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 168.520087][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.527835][ T3241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.545763][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.557400][ T3241] usb 1-1: Product: syz [ 168.579044][ T3241] usb 1-1: Manufacturer: syz [ 168.590273][ T3241] usb 1-1: SerialNumber: syz [ 168.608341][ T3241] usb 1-1: config 0 descriptor?? [ 168.620999][ T7000] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 168.632977][ T3241] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.649976][ T11] veth1_macvtap: left promiscuous mode [ 168.666692][ T11] veth0_macvtap: left promiscuous mode [ 168.685445][ T11] veth1_vlan: left promiscuous mode [ 168.697280][ T11] veth0_vlan: left promiscuous mode [ 168.715195][ T11] veth1_macvtap: left promiscuous mode [ 168.721580][ T11] veth0_macvtap: left promiscuous mode [ 168.729016][ T11] veth1_vlan: left promiscuous mode [ 168.751006][ T11] veth0_vlan: left promiscuous mode [ 168.853063][ T7000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.520772][ T11] team0 (unregistering): Port device team_slave_1 removed [ 169.572363][ T11] team0 (unregistering): Port device team_slave_0 removed [ 169.819677][ T5240] Bluetooth: hci1: command tx timeout [ 169.825294][ T5240] Bluetooth: hci3: command tx timeout [ 170.358956][ T5298] usbhid 3-1:0.0: can't add hid device: -71 [ 170.365214][ T5298] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 170.401143][ T5298] usb 3-1: USB disconnect, device number 36 [ 170.601121][ T11] team0 (unregistering): Port device team_slave_1 removed [ 170.671501][ T11] team0 (unregistering): Port device team_slave_0 removed [ 170.819244][ T7022] binfmt_misc: register: failed to install interpreter file ./file0 [ 171.213818][ T6875] hsr_slave_0: entered promiscuous mode [ 171.220614][ T6875] hsr_slave_1: entered promiscuous mode [ 171.287029][ T7024] hsr_slave_0: left promiscuous mode [ 171.331093][ T7024] hsr_slave_1: left promiscuous mode [ 171.364623][ T5287] usb 1-1: USB disconnect, device number 36 [ 171.716909][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 171.735312][ T7043] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 171.757890][ T7043] netlink: 'syz.1.392': attribute type 6 has an invalid length. [ 171.767517][ T7043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.392'. [ 171.789574][ T7045] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 171.824945][ T29] audit: type=1326 audit(1727613852.953:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6dad7dff9 code=0x7ffc0000 [ 171.868422][ T29] audit: type=1326 audit(1727613852.983:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7042 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6dad7dff9 code=0x7ffc0000 [ 171.909998][ T5243] Bluetooth: hci1: command tx timeout [ 171.915571][ T5240] Bluetooth: hci3: command tx timeout [ 171.919791][ T5287] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 172.134555][ T5287] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.134600][ T5287] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.134640][ T5287] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.134669][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.154128][ T7041] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.157204][ T5287] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.321247][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 172.450183][ T9] usb 3-1: device descriptor read/64, error -71 [ 172.662499][ T5298] usb 1-1: USB disconnect, device number 37 [ 172.739655][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 172.799487][ T5288] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 172.889533][ T9] usb 3-1: device descriptor read/64, error -71 [ 172.963338][ T6875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.986741][ T6875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.013231][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.030074][ T9] usb usb3-port1: attempt power cycle [ 173.030665][ T6875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.043680][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.053732][ T5288] usb 2-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 173.063174][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.066250][ T6875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.091494][ T5288] usb 2-1: config 0 descriptor?? [ 173.130117][ T6873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.149587][ T6873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.160581][ T6873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.178371][ T6873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.361754][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.383324][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 173.425250][ T9] usb 3-1: device descriptor read/8, error -71 [ 173.435740][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.473550][ T2576] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.480815][ T2576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.496099][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.503325][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.532134][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.618153][ T6873] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.644959][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.652192][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.698891][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 173.708166][ T2576] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.715361][ T2576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.729933][ T25] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 173.760007][ T9] usb 3-1: device descriptor read/8, error -71 [ 173.764407][ T6875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.873497][ T9] usb usb3-port1: unable to enumerate USB device [ 173.928098][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.941526][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.960202][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.008459][ T25] usb 1-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 174.054010][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.062603][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.079023][ T25] usb 1-1: config 0 descriptor?? [ 174.143242][ T6875] veth0_vlan: entered promiscuous mode [ 174.206948][ T6875] veth1_vlan: entered promiscuous mode [ 174.264939][ T6873] veth0_vlan: entered promiscuous mode [ 174.335994][ T6873] veth1_vlan: entered promiscuous mode [ 174.403263][ T6875] veth0_macvtap: entered promiscuous mode [ 174.445399][ T6875] veth1_macvtap: entered promiscuous mode [ 174.532861][ T6873] veth0_macvtap: entered promiscuous mode [ 174.549947][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.589466][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.600505][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.611168][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.641716][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.660137][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.674112][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.694850][ T6873] veth1_macvtap: entered promiscuous mode [ 174.753805][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.769540][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.796226][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.817132][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.841453][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.881208][ T6875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.904283][ T6875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.936204][ T6875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.936627][ T25] asus 0003:048D:CE50.000A: unknown main item tag 0xd [ 174.976625][ T6875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.985922][ T25] asus 0003:048D:CE50.000A: hidraw0: USB HID v0.00 Device [HID 048d:ce50] on usb-dummy_hcd.0-1/input0 [ 175.019642][ T25] asus 0003:048D:CE50.000A: Asus input not registered [ 175.036920][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.069566][ T25] asus 0003:048D:CE50.000A: probe with driver asus failed with error -12 [ 175.102877][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.143316][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.149520][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.185108][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.202499][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.217745][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.241697][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.244371][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.307030][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.335968][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.364100][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.384949][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.410704][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.446572][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.490721][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.553485][ T25] usb 1-1: USB disconnect, device number 38 [ 175.553831][ T6873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.572853][ T6873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.583211][ T6873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.596971][ T6873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.700134][ T5288] usbhid 2-1:0.0: can't add hid device: -71 [ 175.706253][ T5288] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 175.789834][ T5288] usb 2-1: USB disconnect, device number 36 [ 175.819459][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.862065][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.959742][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.995830][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.019820][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.060498][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.154671][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.174909][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.363373][ T7150] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'. [ 176.398368][ T7152] netlink: 168 bytes leftover after parsing attributes in process `syz.3.358'. [ 176.446380][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 176.530494][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 176.554777][ T7158] IPVS: Error connecting to the multicast addr [ 176.669622][ T5287] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 176.879460][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 176.939942][ T5287] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 176.979485][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.101690][ T5287] usb 5-1: Product: syz [ 177.105949][ T5287] usb 5-1: Manufacturer: syz [ 177.141174][ T5287] usb 5-1: SerialNumber: syz [ 177.158592][ T5287] usb 5-1: config 0 descriptor?? [ 177.194222][ T5287] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 177.201845][ T7170] [ 177.204218][ T7170] ===================================================== [ 177.211264][ T7170] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 177.219624][ T7170] 6.11.0-syzkaller-11993-g3efc57369a0c #0 Not tainted [ 177.226402][ T7170] ----------------------------------------------------- [ 177.233347][ T7170] syz.0.408/7170 [HC0[0]:SC0[8]:HE1:SE0] is trying to acquire: [ 177.240913][ T7170] ffff88805f8a21e0 (&pch->downl){+.+.}-{2:2}, at: ppp_connect_channel+0x194/0x650 [ 177.250198][ T7170] [ 177.250198][ T7170] and this task is already holding: [ 177.257573][ T7170] ffff88803083ae10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 177.266848][ T7170] which would create a new lock dependency: [ 177.272766][ T7170] (&ppp->rlock){+...}-{2:2} -> (&pch->downl){+.+.}-{2:2} [ 177.280144][ T7170] [ 177.280144][ T7170] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 177.290040][ T7170] (&pch->upl){++.-}-{2:2} [ 177.290095][ T7170] [ 177.290095][ T7170] ... which became SOFTIRQ-READ-irq-safe at: [ 177.302669][ T7170] lock_acquire+0x1ed/0x550 [ 177.307300][ T7170] _raw_read_lock_bh+0x3d/0x50 [ 177.312186][ T7170] ppp_input_error+0x60/0x1b0 [ 177.316980][ T7170] ppp_sync_process+0x82/0x160 [ 177.321855][ T7170] tasklet_action_common+0x321/0x4d0 [ 177.327267][ T7170] handle_softirqs+0x2c5/0x980 [ 177.332166][ T7170] __irq_exit_rcu+0xf4/0x1c0 [ 177.336874][ T7170] irq_exit_rcu+0x9/0x30 [ 177.341231][ T7170] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 177.346992][ T7170] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.353079][ T7170] __tasklet_schedule_common+0x1fd/0x270 [ 177.358828][ T7170] ppp_sync_receive+0x3fc/0x8f0 [ 177.363793][ T7170] tty_ldisc_receive_buf+0x11f/0x170 [ 177.369193][ T7170] tty_port_default_receive_buf+0x6d/0xa0 [ 177.375040][ T7170] flush_to_ldisc+0x328/0x860 [ 177.379855][ T7170] process_scheduled_works+0xa63/0x1850 [ 177.385643][ T7170] worker_thread+0x870/0xd30 [ 177.390353][ T7170] kthread+0x2f0/0x390 [ 177.394532][ T7170] ret_from_fork+0x4b/0x80 [ 177.399068][ T7170] ret_from_fork_asm+0x1a/0x30 [ 177.403951][ T7170] [ 177.403951][ T7170] to a SOFTIRQ-READ-irq-unsafe lock: [ 177.411419][ T7170] (&pch->downl){+.+.}-{2:2} [ 177.411460][ T7170] [ 177.411460][ T7170] ... which became SOFTIRQ-READ-irq-unsafe at: [ 177.424408][ T7170] ... [ 177.424420][ T7170] lock_acquire+0x1ed/0x550 [ 177.431636][ T7170] _raw_spin_lock+0x2e/0x40 [ 177.436273][ T7170] ppp_input+0x18b/0xa10 [ 177.440641][ T7170] pppoe_rcv_core+0x117/0x310 [ 177.445431][ T7170] __release_sock+0x243/0x350 [ 177.450224][ T7170] release_sock+0x61/0x1f0 [ 177.454779][ T7170] pppoe_sendmsg+0xd5/0x750 [ 177.459433][ T7170] __sock_sendmsg+0x221/0x270 [ 177.464228][ T7170] ____sys_sendmsg+0x52a/0x7e0 [ 177.469111][ T7170] __sys_sendmmsg+0x3ab/0x730 [ 177.473904][ T7170] __x64_sys_sendmmsg+0xa0/0xb0 [ 177.478884][ T7170] do_syscall_64+0xf3/0x230 [ 177.483672][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.489691][ T7170] [ 177.489691][ T7170] other info that might help us debug this: [ 177.489691][ T7170] [ 177.500024][ T7170] Chain exists of: [ 177.500024][ T7170] &pch->upl --> &ppp->rlock --> &pch->downl [ 177.500024][ T7170] [ 177.511893][ T7170] Possible interrupt unsafe locking scenario: [ 177.511893][ T7170] [ 177.520228][ T7170] CPU0 CPU1 [ 177.525611][ T7170] ---- ---- [ 177.530988][ T7170] lock(&pch->downl); [ 177.535082][ T7170] local_irq_disable(); [ 177.541865][ T7170] lock(&pch->upl); [ 177.548322][ T7170] lock(&ppp->rlock); [ 177.554937][ T7170] [ 177.558420][ T7170] lock(&pch->upl); [ 177.562514][ T7170] [ 177.562514][ T7170] *** DEADLOCK *** [ 177.562514][ T7170] [ 177.570668][ T7170] 5 locks held by syz.0.408/7170: [ 177.575706][ T7170] #0: ffffffff8f4b8f68 (ppp_mutex){+.+.}-{3:3}, at: ppp_ioctl+0x112/0x1cd0 [ 177.584481][ T7170] #1: ffff888032651cc0 (&pn->all_ppp_mutex){+.+.}-{3:3}, at: ppp_connect_channel+0x5e/0x650 [ 177.594749][ T7170] #2: ffff88805f8a2248 (&pch->upl){++.-}-{2:2}, at: ppp_connect_channel+0x87/0x650 [ 177.604213][ T7170] #3: ffff88803083ae50 (&ppp->wlock){+...}-{2:2}, at: ppp_connect_channel+0x174/0x650 [ 177.613943][ T7170] #4: ffff88803083ae10 (&ppp->rlock){+...}-{2:2}, at: ppp_connect_channel+0x185/0x650 [ 177.623670][ T7170] [ 177.623670][ T7170] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 177.634544][ T7170] -> (&pch->upl){++.-}-{2:2} { [ 177.639542][ T7170] HARDIRQ-ON-W at: [ 177.643731][ T7170] lock_acquire+0x1ed/0x550 [ 177.650269][ T7170] _raw_write_lock_bh+0x35/0x50 [ 177.657153][ T7170] ppp_disconnect_channel+0x2f/0x2d0 [ 177.664468][ T7170] ppp_unregister_channel+0xb9/0x300 [ 177.671783][ T7170] ppp_sync_close+0xf4/0x160 [ 177.678402][ T7170] tty_ldisc_hangup+0x1c5/0x4d0 [ 177.685284][ T7170] __tty_hangup+0x3fb/0x6b0 [ 177.691996][ T7170] tty_release+0x32a/0x12c0 [ 177.698524][ T7170] __fput+0x23f/0x880 [ 177.704543][ T7170] task_work_run+0x24f/0x310 [ 177.711157][ T7170] syscall_exit_to_user_mode+0x168/0x370 [ 177.718832][ T7170] do_syscall_64+0x100/0x230 [ 177.725441][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.733376][ T7170] HARDIRQ-ON-R at: [ 177.737551][ T7170] lock_acquire+0x1ed/0x550 [ 177.744085][ T7170] _raw_read_lock_bh+0x3d/0x50 [ 177.750881][ T7170] ppp_input_error+0x60/0x1b0 [ 177.757587][ T7170] ppp_sync_process+0x82/0x160 [ 177.764382][ T7170] tasklet_action_common+0x321/0x4d0 [ 177.771706][ T7170] handle_softirqs+0x2c5/0x980 [ 177.779020][ T7170] __irq_exit_rcu+0xf4/0x1c0 [ 177.785642][ T7170] irq_exit_rcu+0x9/0x30 [ 177.791916][ T7170] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 177.799582][ T7170] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.807583][ T7170] __tasklet_schedule_common+0x1fd/0x270 [ 177.815253][ T7170] ppp_sync_receive+0x3fc/0x8f0 [ 177.822138][ T7170] tty_ldisc_receive_buf+0x11f/0x170 [ 177.829625][ T7170] tty_port_default_receive_buf+0x6d/0xa0 [ 177.837372][ T7170] flush_to_ldisc+0x328/0x860 [ 177.844165][ T7170] process_scheduled_works+0xa63/0x1850 [ 177.851745][ T7170] worker_thread+0x870/0xd30 [ 177.858364][ T7170] kthread+0x2f0/0x390 [ 177.864464][ T7170] ret_from_fork+0x4b/0x80 [ 177.870931][ T7170] ret_from_fork_asm+0x1a/0x30 [ 177.877743][ T7170] IN-SOFTIRQ-R at: [ 177.881924][ T7170] lock_acquire+0x1ed/0x550 [ 177.888492][ T7170] _raw_read_lock_bh+0x3d/0x50 [ 177.895294][ T7170] ppp_input_error+0x60/0x1b0 [ 177.902002][ T7170] ppp_sync_process+0x82/0x160 [ 177.908791][ T7170] tasklet_action_common+0x321/0x4d0 [ 177.916124][ T7170] handle_softirqs+0x2c5/0x980 [ 177.922924][ T7170] __irq_exit_rcu+0xf4/0x1c0 [ 177.929548][ T7170] irq_exit_rcu+0x9/0x30 [ 177.935906][ T7170] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 177.943578][ T7170] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 177.951583][ T7170] __tasklet_schedule_common+0x1fd/0x270 [ 177.959248][ T7170] ppp_sync_receive+0x3fc/0x8f0 [ 177.966124][ T7170] tty_ldisc_receive_buf+0x11f/0x170 [ 177.973442][ T7170] tty_port_default_receive_buf+0x6d/0xa0 [ 177.981193][ T7170] flush_to_ldisc+0x328/0x860 [ 177.987897][ T7170] process_scheduled_works+0xa63/0x1850 [ 177.995564][ T7170] worker_thread+0x870/0xd30 [ 178.002196][ T7170] kthread+0x2f0/0x390 [ 178.008284][ T7170] ret_from_fork+0x4b/0x80 [ 178.014738][ T7170] ret_from_fork_asm+0x1a/0x30 [ 178.021535][ T7170] INITIAL USE at: [ 178.025668][ T7170] lock_acquire+0x1ed/0x550 [ 178.032141][ T7170] _raw_write_lock_bh+0x35/0x50 [ 178.039116][ T7170] ppp_disconnect_channel+0x2f/0x2d0 [ 178.046348][ T7170] ppp_unregister_channel+0xb9/0x300 [ 178.053593][ T7170] ppp_sync_close+0xf4/0x160 [ 178.060236][ T7170] tty_ldisc_hangup+0x1c5/0x4d0 [ 178.067033][ T7170] __tty_hangup+0x3fb/0x6b0 [ 178.073489][ T7170] tty_release+0x32a/0x12c0 [ 178.079937][ T7170] __fput+0x23f/0x880 [ 178.085879][ T7170] task_work_run+0x24f/0x310 [ 178.092411][ T7170] syscall_exit_to_user_mode+0x168/0x370 [ 178.100087][ T7170] do_syscall_64+0x100/0x230 [ 178.106694][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.114797][ T7170] INITIAL READ USE at: [ 178.119322][ T7170] lock_acquire+0x1ed/0x550 [ 178.126202][ T7170] _raw_read_lock_bh+0x3d/0x50 [ 178.133356][ T7170] ppp_input_error+0x60/0x1b0 [ 178.140412][ T7170] ppp_sync_process+0x82/0x160 [ 178.147551][ T7170] tasklet_action_common+0x321/0x4d0 [ 178.155213][ T7170] handle_softirqs+0x2c5/0x980 [ 178.162363][ T7170] __irq_exit_rcu+0xf4/0x1c0 [ 178.169366][ T7170] irq_exit_rcu+0x9/0x30 [ 178.175987][ T7170] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 178.183999][ T7170] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.192352][ T7170] __tasklet_schedule_common+0x1fd/0x270 [ 178.200454][ T7170] ppp_sync_receive+0x3fc/0x8f0 [ 178.207776][ T7170] tty_ldisc_receive_buf+0x11f/0x170 [ 178.215440][ T7170] tty_port_default_receive_buf+0x6d/0xa0 [ 178.223538][ T7170] flush_to_ldisc+0x328/0x860 [ 178.230590][ T7170] process_scheduled_works+0xa63/0x1850 [ 178.238514][ T7170] worker_thread+0x870/0xd30 [ 178.245484][ T7170] kthread+0x2f0/0x390 [ 178.251923][ T7170] ret_from_fork+0x4b/0x80 [ 178.258719][ T7170] ret_from_fork_asm+0x1a/0x30 [ 178.265876][ T7170] } [ 178.268571][ T7170] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 178.278080][ T7170] -> (&ppp->wlock){+...}-{2:2} { [ 178.283171][ T7170] HARDIRQ-ON-W at: [ 178.287266][ T7170] lock_acquire+0x1ed/0x550 [ 178.293637][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.300269][ T7170] ppp_get_stats64+0xc3/0x290 [ 178.306813][ T7170] dev_get_stats+0xad/0xa00 [ 178.313184][ T7170] rtnl_fill_stats+0x47/0x880 [ 178.319716][ T7170] rtnl_fill_ifinfo+0x18da/0x2270 [ 178.326592][ T7170] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 178.333811][ T7170] rtmsg_ifinfo+0x91/0x1b0 [ 178.340095][ T7170] register_netdevice+0x1774/0x1b00 [ 178.347150][ T7170] ppp_dev_configure+0x883/0xb10 [ 178.354131][ T7170] ppp_ioctl+0x797/0x1cd0 [ 178.360322][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.366777][ T7170] do_syscall_64+0xf3/0x230 [ 178.373127][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.380881][ T7170] INITIAL USE at: [ 178.384883][ T7170] lock_acquire+0x1ed/0x550 [ 178.391159][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.397707][ T7170] ppp_get_stats64+0xc3/0x290 [ 178.404153][ T7170] dev_get_stats+0xad/0xa00 [ 178.410418][ T7170] rtnl_fill_stats+0x47/0x880 [ 178.416887][ T7170] rtnl_fill_ifinfo+0x18da/0x2270 [ 178.423674][ T7170] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 178.430810][ T7170] rtmsg_ifinfo+0x91/0x1b0 [ 178.436987][ T7170] register_netdevice+0x1774/0x1b00 [ 178.443944][ T7170] ppp_dev_configure+0x883/0xb10 [ 178.450673][ T7170] ppp_ioctl+0x797/0x1cd0 [ 178.456774][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.463142][ T7170] do_syscall_64+0xf3/0x230 [ 178.469408][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.477108][ T7170] } [ 178.479714][ T7170] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 178.488593][ T7170] ... acquired at: [ 178.492501][ T7170] lock_acquire+0x1ed/0x550 [ 178.497211][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.502186][ T7170] ppp_connect_channel+0x174/0x650 [ 178.507512][ T7170] ppp_ioctl+0xdd4/0x1cd0 [ 178.512050][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.516870][ T7170] do_syscall_64+0xf3/0x230 [ 178.521579][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.527680][ T7170] [ 178.530027][ T7170] -> (&ppp->rlock){+...}-{2:2} { [ 178.535050][ T7170] HARDIRQ-ON-W at: [ 178.539056][ T7170] lock_acquire+0x1ed/0x550 [ 178.545255][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.551703][ T7170] ppp_get_stats64+0x33/0x290 [ 178.558074][ T7170] dev_get_stats+0xad/0xa00 [ 178.564258][ T7170] rtnl_fill_stats+0x47/0x880 [ 178.570619][ T7170] rtnl_fill_ifinfo+0x18da/0x2270 [ 178.577320][ T7170] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 178.584375][ T7170] rtmsg_ifinfo+0x91/0x1b0 [ 178.590555][ T7170] register_netdevice+0x1774/0x1b00 [ 178.597427][ T7170] ppp_dev_configure+0x883/0xb10 [ 178.604058][ T7170] ppp_ioctl+0x797/0x1cd0 [ 178.610076][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.616360][ T7170] do_syscall_64+0xf3/0x230 [ 178.622538][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.630118][ T7170] INITIAL USE at: [ 178.634036][ T7170] lock_acquire+0x1ed/0x550 [ 178.640140][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.646497][ T7170] ppp_get_stats64+0x33/0x290 [ 178.652769][ T7170] dev_get_stats+0xad/0xa00 [ 178.658858][ T7170] rtnl_fill_stats+0x47/0x880 [ 178.665125][ T7170] rtnl_fill_ifinfo+0x18da/0x2270 [ 178.671742][ T7170] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 178.678704][ T7170] rtmsg_ifinfo+0x91/0x1b0 [ 178.684704][ T7170] register_netdevice+0x1774/0x1b00 [ 178.691508][ T7170] ppp_dev_configure+0x883/0xb10 [ 178.698062][ T7170] ppp_ioctl+0x797/0x1cd0 [ 178.704016][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.710310][ T7170] do_syscall_64+0xf3/0x230 [ 178.716410][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.723903][ T7170] } [ 178.726430][ T7170] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 178.734957][ T7170] ... acquired at: [ 178.738770][ T7170] lock_acquire+0x1ed/0x550 [ 178.743480][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.748448][ T7170] ppp_ioctl+0x1895/0x1cd0 [ 178.753071][ T7170] __se_sys_ioctl+0xf9/0x170 [ 178.757957][ T7170] do_syscall_64+0xf3/0x230 [ 178.762661][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.768765][ T7170] [ 178.771105][ T7170] [ 178.771105][ T7170] the dependencies between the lock to be acquired [ 178.771120][ T7170] and SOFTIRQ-READ-irq-unsafe lock: [ 178.785109][ T7170] -> (&pch->downl){+.+.}-{2:2} { [ 178.790152][ T7170] HARDIRQ-ON-W at: [ 178.794154][ T7170] lock_acquire+0x1ed/0x550 [ 178.800353][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.806814][ T7170] ppp_unregister_channel+0x7c/0x300 [ 178.813785][ T7170] ppp_sync_close+0xf4/0x160 [ 178.820059][ T7170] tty_ldisc_hangup+0x1c5/0x4d0 [ 178.826586][ T7170] __tty_hangup+0x3fb/0x6b0 [ 178.832768][ T7170] tty_release+0x32a/0x12c0 [ 178.838951][ T7170] __fput+0x23f/0x880 [ 178.844616][ T7170] task_work_run+0x24f/0x310 [ 178.850888][ T7170] syscall_exit_to_user_mode+0x168/0x370 [ 178.858213][ T7170] do_syscall_64+0x100/0x230 [ 178.864577][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.872178][ T7170] SOFTIRQ-ON-W at: [ 178.876189][ T7170] lock_acquire+0x1ed/0x550 [ 178.882393][ T7170] _raw_spin_lock+0x2e/0x40 [ 178.888623][ T7170] ppp_input+0x18b/0xa10 [ 178.894559][ T7170] pppoe_rcv_core+0x117/0x310 [ 178.900926][ T7170] __release_sock+0x243/0x350 [ 178.907290][ T7170] release_sock+0x61/0x1f0 [ 178.913408][ T7170] pppoe_sendmsg+0xd5/0x750 [ 178.919601][ T7170] __sock_sendmsg+0x221/0x270 [ 178.925964][ T7170] ____sys_sendmsg+0x52a/0x7e0 [ 178.932403][ T7170] __sys_sendmmsg+0x3ab/0x730 [ 178.938759][ T7170] __x64_sys_sendmmsg+0xa0/0xb0 [ 178.945293][ T7170] do_syscall_64+0xf3/0x230 [ 178.951477][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.959064][ T7170] INITIAL USE at: [ 178.962990][ T7170] lock_acquire+0x1ed/0x550 [ 178.969185][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 178.975544][ T7170] ppp_unregister_channel+0x7c/0x300 [ 178.982424][ T7170] ppp_sync_close+0xf4/0x160 [ 178.988604][ T7170] tty_ldisc_hangup+0x1c5/0x4d0 [ 178.995044][ T7170] __tty_hangup+0x3fb/0x6b0 [ 179.001132][ T7170] tty_release+0x32a/0x12c0 [ 179.007228][ T7170] __fput+0x23f/0x880 [ 179.012820][ T7170] task_work_run+0x24f/0x310 [ 179.019189][ T7170] syscall_exit_to_user_mode+0x168/0x370 [ 179.026429][ T7170] do_syscall_64+0x100/0x230 [ 179.032611][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.040113][ T7170] } [ 179.042712][ T7170] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 179.052026][ T7170] ... acquired at: [ 179.055844][ T7170] lock_acquire+0x1ed/0x550 [ 179.060647][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 179.065620][ T7170] ppp_connect_channel+0x194/0x650 [ 179.070939][ T7170] ppp_ioctl+0xdd4/0x1cd0 [ 179.075565][ T7170] __se_sys_ioctl+0xf9/0x170 [ 179.080368][ T7170] do_syscall_64+0xf3/0x230 [ 179.085079][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.091184][ T7170] [ 179.093518][ T7170] [ 179.093518][ T7170] stack backtrace: [ 179.099448][ T7170] CPU: 0 UID: 0 PID: 7170 Comm: syz.0.408 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 179.109710][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.119789][ T7170] Call Trace: [ 179.123089][ T7170] [ 179.126037][ T7170] dump_stack_lvl+0x241/0x360 [ 179.130745][ T7170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.135972][ T7170] ? __pfx__printk+0x10/0x10 [ 179.140631][ T7170] ? print_shortest_lock_dependencies+0xf2/0x160 [ 179.147016][ T7170] validate_chain+0x4ebd/0x5920 [ 179.152053][ T7170] ? __pfx_validate_chain+0x10/0x10 [ 179.157305][ T7170] ? stack_depot_save_flags+0x29/0x830 [ 179.162820][ T7170] ? register_lock_class+0x102/0x980 [ 179.168152][ T7170] ? __pfx_register_lock_class+0x10/0x10 [ 179.173858][ T7170] ? mark_lock+0x9a/0x360 [ 179.178221][ T7170] __lock_acquire+0x1384/0x2050 [ 179.183120][ T7170] lock_acquire+0x1ed/0x550 [ 179.187690][ T7170] ? ppp_connect_channel+0x194/0x650 [ 179.193018][ T7170] ? __pfx_lock_acquire+0x10/0x10 [ 179.198082][ T7170] ? ppp_connect_channel+0x194/0x650 [ 179.203417][ T7170] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 179.209274][ T7170] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 179.214692][ T7170] ? ppp_connect_channel+0x194/0x650 [ 179.220027][ T7170] _raw_spin_lock_bh+0x35/0x50 [ 179.224840][ T7170] ? ppp_connect_channel+0x194/0x650 [ 179.230173][ T7170] ppp_connect_channel+0x194/0x650 [ 179.235339][ T7170] ? __might_fault+0xaa/0x120 [ 179.240050][ T7170] ppp_ioctl+0xdd4/0x1cd0 [ 179.244423][ T7170] ? __pfx_ppp_ioctl+0x10/0x10 [ 179.249229][ T7170] ? __fget_files+0x3f3/0x470 [ 179.253941][ T7170] ? __pfx_ppp_ioctl+0x10/0x10 [ 179.258740][ T7170] __se_sys_ioctl+0xf9/0x170 [ 179.263371][ T7170] do_syscall_64+0xf3/0x230 [ 179.267912][ T7170] ? clear_bhb_loop+0x35/0x90 [ 179.272621][ T7170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.278555][ T7170] RIP: 0033:0x7fbb68d7dff9 [ 179.282997][ T7170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.302638][ T7170] RSP: 002b:00007fbb687de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.311094][ T7170] RAX: ffffffffffffffda RBX: 00007fbb68f36058 RCX: 00007fbb68d7dff9 [ 179.319180][ T7170] RDX: 0000000020000300 RSI: 000000004004743a RDI: 0000000000000008 [ 179.327178][ T7170] RBP: 00007fbb68df0296 R08: 0000000000000000 R09: 0000000000000000 [ 179.335178][ T7170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.343259][ T7170] R13: 0000000000000000 R14: 00007fbb68f36058 R15: 00007fbb6905fa28 [ 179.351269][ T7170] [ 179.385302][ T5287] gspca_vc032x: reg_r err -71 [ 179.395243][ T5287] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 179.440391][ T5287] usb 5-1: USB disconnect, device number 18 [ 179.604848][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.714048][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.795081][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.809529][ T5290] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 179.855201][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.922786][ T67] bridge_slave_1: left allmulticast mode [ 179.928488][ T67] bridge_slave_1: left promiscuous mode [ 179.940120][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.961024][ T5290] usb 4-1: Using ep0 maxpacket: 16 [ 179.975513][ T5290] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 179.987382][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.995848][ T5290] usb 4-1: Product: syz [ 180.002057][ T5290] usb 4-1: Manufacturer: syz [ 180.006780][ T5290] usb 4-1: SerialNumber: syz [ 180.013897][ T5290] usb 4-1: config 0 descriptor?? [ 180.025338][ T5290] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 180.044008][ T5290] usb 4-1: Detected FT232B [ 180.186367][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.197458][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.210643][ T67] bond0 (unregistering): Released all slaves [ 180.293317][ T67] tipc: Left network mode [ 180.309421][ T5290] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 180.319689][ T5290] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 180.340121][ T5290] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.381854][ T5290] usb 4-1: USB disconnect, device number 30 [ 180.406694][ T5290] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 180.428213][ T5290] ftdi_sio 4-1:0.0: device disconnected [ 180.521416][ T67] hsr_slave_0: left promiscuous mode [ 180.532825][ T67] hsr_slave_1: left promiscuous mode [ 180.556708][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.576563][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.589980][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.600551][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.612403][ T67] veth1_macvtap: left allmulticast mode [ 180.618098][ T67] veth1_macvtap: left promiscuous mode [ 180.629373][ T67] veth0_macvtap: left promiscuous mode [ 180.634984][ T67] veth1_vlan: left promiscuous mode [ 180.641333][ T67] veth0_vlan: left promiscuous mode [ 180.978711][ T67] team0 (unregistering): Port device team_slave_1 removed [ 181.015872][ T67] team0 (unregistering): Port device team_slave_0 removed