last executing test programs: 25.014027645s ago: executing program 3 (id=196): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x408c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 25.013892987s ago: executing program 3 (id=197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3b9600000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4a00330040000000080211000001080211000001"], 0x68}}, 0x14) 24.944044198s ago: executing program 3 (id=198): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "800006", 0x0, 0x0, 0x0, @empty, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 24.034248756s ago: executing program 3 (id=208): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 23.80304125s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x1000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x3, 0xff, 0x81, 0x1000057e, 0xfffffffffbfffffd, 0x4002004c4, 0xfffffffffffffffa, 0x3, 0x8, 0x10, 0x1, 0x2, 0x0, 0x8, 0xfffffffffffff001], 0x10000, 0x2100}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000280), &(0x7f0000000300)=@udp6=r0, 0x2}, 0x20) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 23.604151027s ago: executing program 3 (id=220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="0a6ea58d6228d8465b159e2424b8ff9911fe6cdb30318d43e279513641a27c8f0d56cb29f637becc8ed81426b052082f45a42ee732bddce4a1477de081b96cb0539b43715c711bcdd4d9a54d21d5c3af77bf119e795c6e2403df71c1f891", 0x5e}, {0x0}], 0x2}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="2c64dcfd565187c8e8883f67b4606814737200187533479f3d5c5ec9adab2d4ee332548dde6ea466c28fb80a1f3ea76ada878e80998a86d3a04e76ace0989bd17e926fdae343379b78adb20ac460d9fcd9823aef6a3b2690718839ca6458c2ac3a10e5ca9d7c7032c162c0d7ce5516bea644d4fb3ad96cf351a98fc742a5bafde59d4e61512fa6830f73aac1a5f218b64dfe6043d8183572b00f50baf6e64bcf65fe92dff7a1540d29c01844f84d7541d894925ee7cbf65f93f3b42b165084b4c5d116f1355f3d5b78cf83b3", 0xcc}, {&(0x7f0000000540)="16cec1b810a9e1c32a428daeccf6c969609d73", 0x13}, {&(0x7f0000000640)="a40b4ce0b0df126d382d83f05aa590c7c3fb1236c5a4b30fa190f67324915f3509dfe298690453e2ada615fa19ae0cd795caae77527c10077a948aa827a5c2ab5a3cec714532be9783e36c1e18e887c280286f0e5b06e9e8d5f3a1edf397f1897086f7748b31bb7348f44fbf1a95183fa6abd2a42739199793fd7718d4c76016979eb4a757ca8539d01e", 0x8a}, {&(0x7f0000000700)="8f7b0867bc7c21cbad3fd55c2717350437637219845511fa916b725c46532afe42bc553b9c2b1a2b5e4cf4a49478cd0d6bbf0f334eb405c32959b779737ed09d94ce17be105b3e830c02cdf097f4ab369e25925ef0dac24030813b76f3bcfc7943453a91a7c2fdb0c0744b1b2bfa4612e8177092b848ca587b9853ff22def39dd13745f3d45c52e009a8a0994c094b672c4576d1ecfac9f9173a4b4e7ddedf9b2259d6ab26a4c99375598a5e42538a62", 0xb0}, {&(0x7f00000007c0)="bf38b111a33528c491235ca398cba66130a6a49fb9be927037bdc7743d6f6c53a25a114b77328a089366dfe051f442d870c8a1ef0eb9c99a7b17a7a2d580f40713e7189939320dc645165531252ac342cb028b891e13173fc2294441488527a563e6fc533bbf6ee6adead553ae1053b21f278f8d0045569f7deea2abf4c61a9c7628f4ae983c5fe0ba093e96a589748c11613fd40e2355f6e4b091ff", 0x9c}, {&(0x7f0000000880)="ca04e8fce02dec", 0x7}, {&(0x7f00000008c0)="d7a8de7ee28ca5993f0ceced07df83c0784aaf21b72333616cf72139d26678041830560d774aa077ec1c5ee97c3d404a9e2b759c0687654369df5be0718d2271af8fca2e2b80aeba3a576aa60d303279d6837c8a705920fb64334368a2ad0f538b2e7a7b04d29b6b0bacd52d3dd7f241e086b60cf1eb16609262573c006b7f8a67fec55a18c2807cb8f73f155bd42470daccf4d2bc5fdf9494c5b37a6a4ba27e666328a0b4c6976e6dbb", 0xaa}], 0x7}}], 0x1, 0x404e854) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 23.589600136s ago: executing program 32 (id=220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="0a6ea58d6228d8465b159e2424b8ff9911fe6cdb30318d43e279513641a27c8f0d56cb29f637becc8ed81426b052082f45a42ee732bddce4a1477de081b96cb0539b43715c711bcdd4d9a54d21d5c3af77bf119e795c6e2403df71c1f891", 0x5e}, {0x0}], 0x2}}], 0x1, 0x20044840) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="2c64dcfd565187c8e8883f67b4606814737200187533479f3d5c5ec9adab2d4ee332548dde6ea466c28fb80a1f3ea76ada878e80998a86d3a04e76ace0989bd17e926fdae343379b78adb20ac460d9fcd9823aef6a3b2690718839ca6458c2ac3a10e5ca9d7c7032c162c0d7ce5516bea644d4fb3ad96cf351a98fc742a5bafde59d4e61512fa6830f73aac1a5f218b64dfe6043d8183572b00f50baf6e64bcf65fe92dff7a1540d29c01844f84d7541d894925ee7cbf65f93f3b42b165084b4c5d116f1355f3d5b78cf83b3", 0xcc}, {&(0x7f0000000540)="16cec1b810a9e1c32a428daeccf6c969609d73", 0x13}, {&(0x7f0000000640)="a40b4ce0b0df126d382d83f05aa590c7c3fb1236c5a4b30fa190f67324915f3509dfe298690453e2ada615fa19ae0cd795caae77527c10077a948aa827a5c2ab5a3cec714532be9783e36c1e18e887c280286f0e5b06e9e8d5f3a1edf397f1897086f7748b31bb7348f44fbf1a95183fa6abd2a42739199793fd7718d4c76016979eb4a757ca8539d01e", 0x8a}, {&(0x7f0000000700)="8f7b0867bc7c21cbad3fd55c2717350437637219845511fa916b725c46532afe42bc553b9c2b1a2b5e4cf4a49478cd0d6bbf0f334eb405c32959b779737ed09d94ce17be105b3e830c02cdf097f4ab369e25925ef0dac24030813b76f3bcfc7943453a91a7c2fdb0c0744b1b2bfa4612e8177092b848ca587b9853ff22def39dd13745f3d45c52e009a8a0994c094b672c4576d1ecfac9f9173a4b4e7ddedf9b2259d6ab26a4c99375598a5e42538a62", 0xb0}, {&(0x7f00000007c0)="bf38b111a33528c491235ca398cba66130a6a49fb9be927037bdc7743d6f6c53a25a114b77328a089366dfe051f442d870c8a1ef0eb9c99a7b17a7a2d580f40713e7189939320dc645165531252ac342cb028b891e13173fc2294441488527a563e6fc533bbf6ee6adead553ae1053b21f278f8d0045569f7deea2abf4c61a9c7628f4ae983c5fe0ba093e96a589748c11613fd40e2355f6e4b091ff", 0x9c}, {&(0x7f0000000880)="ca04e8fce02dec", 0x7}, {&(0x7f00000008c0)="d7a8de7ee28ca5993f0ceced07df83c0784aaf21b72333616cf72139d26678041830560d774aa077ec1c5ee97c3d404a9e2b759c0687654369df5be0718d2271af8fca2e2b80aeba3a576aa60d303279d6837c8a705920fb64334368a2ad0f538b2e7a7b04d29b6b0bacd52d3dd7f241e086b60cf1eb16609262573c006b7f8a67fec55a18c2807cb8f73f155bd42470daccf4d2bc5fdf9494c5b37a6a4ba27e666328a0b4c6976e6dbb", 0xaa}], 0x7}}], 0x1, 0x404e854) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.89371732s ago: executing program 1 (id=417): r0 = socket(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf85}, 0x1c) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2", 0xf}], 0x1}}], 0x1, 0x24044015) 2.893460536s ago: executing program 1 (id=419): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.753442111s ago: executing program 0 (id=422): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 2.753265399s ago: executing program 0 (id=423): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x5, &(0x7f0000000040)={0x15, 0xa, 0x1e0000}) 2.70439189s ago: executing program 0 (id=424): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) 2.403819603s ago: executing program 4 (id=426): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001640)={0xfc, {"fce3ad0eed0d07f91b50091887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f353163030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b3107200773090acd3b78130daa61d8e8040040005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a91e0dad47f36fd9f73c152a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e1c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df11847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e30400f7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddba02635478d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f79400000000ddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df04b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e785419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd502ac8044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88e4facfd4c735a20307c737afa2d60399473296b831dbd933d93990f00064279b10ea0c5833f41f157ea2302993dbe97fb1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea10c00a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeee964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e42df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed62480ec43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e069160f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df076f0ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f87296ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef869c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1066) 1.973008335s ago: executing program 1 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x0, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x93, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0x10000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xd, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x6, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x8000000, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.793835815s ago: executing program 1 (id=428): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x18, 0x41, 0xe5, 0x0, 0x0, 0x4}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.632001827s ago: executing program 2 (id=430): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x0) ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000300)={0x501, "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"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x1200) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2046, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x2d, 0x1, 0xc000000, 0x0, 0xfffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) unshare(0x22020600) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000002c0)=0x200, 0xffffffffffffff8e) 1.545771291s ago: executing program 2 (id=431): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 1.440053809s ago: executing program 2 (id=432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8003200030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6", 0xa1) 1.439870605s ago: executing program 0 (id=433): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1.28366008s ago: executing program 0 (id=434): syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050", @ANYRES8=r0], 0x3c}}, 0x0) 1.223729413s ago: executing program 0 (id=435): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x1, 0x4}, 0x47}, 0x10) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) r5 = dup2(r4, r4) read$char_usb(r5, 0x0, 0x0) 1.22334462s ago: executing program 4 (id=436): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, 0x0) 793.930588ms ago: executing program 4 (id=437): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x120, 0x0, 0x2}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 793.648262ms ago: executing program 4 (id=438): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0xffff, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x1, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f74, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x6, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x3ff, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r2, &(0x7f0000000040)=""/117, 0x75) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000740)="440f20c03505000020440f22c0fb01c966bad104ed00000f23c00f21f866b846008ed00f23f80f01cbb8010000000f01c146a7b9670900000f3236660fc6b8730f0000c9b98f020000b8b9000000ba000000000f30460f01c8", 0x59}], 0x1, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, 0x0, 0x4000, 0x20, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000940)=""/215) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000000c0)=0x8000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 622.710123ms ago: executing program 4 (id=439): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$video(&(0x7f0000000180), 0x7, 0x0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000380)={0x0, 0x2, 0xd}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000003c0)={0x800, "df2a5c57a180982619c8d9e1e4152dc8fa505385b09c3a39f395b6df27d5e710", 0x3, 0x10, 0x8, 0x9, 0x4, 0x0, 0x1, 0x81}) 622.519553ms ago: executing program 4 (id=440): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x2) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, &(0x7f00000000c0)=',\x00\x00\x00\x00\x00\x00\x00') 534.045347ms ago: executing program 2 (id=441): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0}) 7.450687ms ago: executing program 1 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000640)="000a1800000d600000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 7.099299ms ago: executing program 2 (id=443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2000010}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x4, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0xffffffff, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x28e, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x100000, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1}, {0x4}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {0x7}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10) 2.637225ms ago: executing program 1 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000070000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000640)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 0s ago: executing program 2 (id=445): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x9, 0x6, 'E\\C', 0x8000, 0x0, 0x0, @empty, @private2, [@hopopts={0x89}], "98efd03a7e60b623"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:5968' (ED25519) to the list of known hosts. [ 72.347052][ T5655] cgroup: Unknown subsys name 'net' [ 72.470306][ T5655] cgroup: Unknown subsys name 'cpuset' [ 72.475825][ T5655] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.451626][ T5655] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.907971][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.910584][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.000451][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.008120][ T5753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.013778][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.014882][ T5759] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.017189][ T5753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.020700][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.021269][ T5753] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.024023][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.024578][ T5762] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.025340][ T5762] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.026595][ T5760] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.028095][ T5763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.030821][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.036249][ T5763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.038393][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.038702][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.038993][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.040170][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.043057][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.056746][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.631277][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.634111][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.636619][ T5745] bridge_slave_0: entered allmulticast mode [ 77.639844][ T5745] bridge_slave_0: entered promiscuous mode [ 77.662626][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.665339][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.668174][ T5745] bridge_slave_1: entered allmulticast mode [ 77.671283][ T5745] bridge_slave_1: entered promiscuous mode [ 77.721263][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.737191][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.740329][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.743389][ T5752] bridge_slave_0: entered allmulticast mode [ 77.747599][ T5752] bridge_slave_0: entered promiscuous mode [ 77.752221][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.755168][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.759386][ T5752] bridge_slave_1: entered allmulticast mode [ 77.763823][ T5752] bridge_slave_1: entered promiscuous mode [ 77.778345][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.781557][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.784459][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.787679][ T5751] bridge_slave_0: entered allmulticast mode [ 77.791696][ T5751] bridge_slave_0: entered promiscuous mode [ 77.796648][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.799367][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.802121][ T5751] bridge_slave_1: entered allmulticast mode [ 77.805308][ T5751] bridge_slave_1: entered promiscuous mode [ 77.864857][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.870019][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.891668][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.902663][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.904960][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.907355][ T5746] bridge_slave_0: entered allmulticast mode [ 77.910598][ T5746] bridge_slave_0: entered promiscuous mode [ 77.926028][ T5745] team0: Port device team_slave_0 added [ 77.930708][ T5745] team0: Port device team_slave_1 added [ 77.935382][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.939586][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.942209][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.945069][ T5746] bridge_slave_1: entered allmulticast mode [ 77.948806][ T5746] bridge_slave_1: entered promiscuous mode [ 77.994006][ T5752] team0: Port device team_slave_0 added [ 78.002246][ T5751] team0: Port device team_slave_0 added [ 78.010147][ T5751] team0: Port device team_slave_1 added [ 78.013024][ T5752] team0: Port device team_slave_1 added [ 78.015328][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.017618][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.025132][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.030586][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.034846][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.051264][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.053482][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.061454][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.097160][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.099447][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.107686][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.111292][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.113850][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.121541][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.128436][ T5746] team0: Port device team_slave_0 added [ 78.139981][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.142059][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.149456][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.158898][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.161564][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.171367][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.176928][ T5746] team0: Port device team_slave_1 added [ 78.206342][ T5745] hsr_slave_0: entered promiscuous mode [ 78.209636][ T5745] hsr_slave_1: entered promiscuous mode [ 78.213163][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.215270][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.222941][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.227276][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.229453][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.237271][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.263808][ T5751] hsr_slave_0: entered promiscuous mode [ 78.267058][ T5751] hsr_slave_1: entered promiscuous mode [ 78.269951][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 78.272357][ T5751] Cannot create hsr debugfs directory [ 78.312739][ T5752] hsr_slave_0: entered promiscuous mode [ 78.316033][ T5752] hsr_slave_1: entered promiscuous mode [ 78.318186][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 78.319918][ T5752] Cannot create hsr debugfs directory [ 78.339273][ T5746] hsr_slave_0: entered promiscuous mode [ 78.341428][ T5746] hsr_slave_1: entered promiscuous mode [ 78.344455][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 78.346996][ T5746] Cannot create hsr debugfs directory [ 78.643570][ T5745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.650728][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.653627][ T5745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.657941][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.661043][ T5745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.667332][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.671130][ T5745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.678395][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.729857][ T5751] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.736891][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.744073][ T5751] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.752510][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.755390][ T5751] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.759700][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.774163][ T5751] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.779867][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.829638][ T5752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.835061][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.852105][ T5752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.857674][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.862758][ T5752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.868420][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.874399][ T5752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.878806][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.908985][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.915453][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.920810][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.927601][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.931358][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.934477][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.939290][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.942359][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.947216][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.962993][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.969408][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.971714][ T455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.982123][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.984577][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.000484][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.038925][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.053248][ T5745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.061123][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.064024][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.078783][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.081152][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.106941][ T5760] Bluetooth: hci1: command tx timeout [ 79.108430][ T5101] Bluetooth: hci0: command tx timeout [ 79.108455][ T5753] Bluetooth: hci3: command tx timeout [ 79.109287][ T5758] Bluetooth: hci2: command tx timeout [ 79.130458][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.155664][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.160614][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.171199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.173465][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.191602][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.193914][ T455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.203309][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.215388][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.217629][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.224313][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.226573][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.377263][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.412513][ T5745] veth0_vlan: entered promiscuous mode [ 79.421149][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.424926][ T5745] veth1_vlan: entered promiscuous mode [ 79.450898][ T5745] veth0_macvtap: entered promiscuous mode [ 79.455311][ T5745] veth1_macvtap: entered promiscuous mode [ 79.469021][ T5751] veth0_vlan: entered promiscuous mode [ 79.481438][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.489682][ T5751] veth1_vlan: entered promiscuous mode [ 79.494061][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.504273][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.511189][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.513444][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.516504][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.521970][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.527615][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.553641][ T5751] veth0_macvtap: entered promiscuous mode [ 79.564780][ T5751] veth1_macvtap: entered promiscuous mode [ 79.598473][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.599719][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.601158][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.617339][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.632776][ T5752] veth0_vlan: entered promiscuous mode [ 79.641418][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.644087][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.648848][ T5746] veth0_vlan: entered promiscuous mode [ 79.657229][ T5752] veth1_vlan: entered promiscuous mode [ 79.657621][ T497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.660331][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.662016][ T497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.667461][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.688750][ T5746] veth1_vlan: entered promiscuous mode [ 79.725391][ T5745] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.725492][ T5752] veth0_macvtap: entered promiscuous mode [ 79.748726][ T5752] veth1_macvtap: entered promiscuous mode [ 79.752648][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.757764][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.779856][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.782223][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.783953][ T5746] veth0_macvtap: entered promiscuous mode [ 79.788890][ T5746] veth1_macvtap: entered promiscuous mode [ 79.792664][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.797621][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.813996][ T497] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.819572][ T497] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.823575][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.831550][ T497] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.834715][ T497] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.852011][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.885477][ T497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.897155][ T497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.900658][ T497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.912914][ T497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.919236][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.923446][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.945092][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.948325][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.962047][ T497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.964604][ T497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.001185][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.005301][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.148130][ T5909] kvm: user requested TSC rate below hardware speed [ 80.426095][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 80.586549][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 80.589795][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.593285][ T9] usb 8-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 80.597442][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.607444][ T9] usb 8-1: config 0 descriptor?? [ 80.618512][ T9] uvcvideo 8-1:0.0: Found UVC 148.00 device (05a9:2630) [ 80.625608][ T9] uvcvideo 8-1:0.0: No valid video chain found. [ 80.821844][ T5893] usb 8-1: USB disconnect, device number 2 [ 80.903570][ T5945] syzkaller0: entered promiscuous mode [ 80.905397][ T5945] syzkaller0: entered allmulticast mode [ 81.028232][ T1341] cfg80211: failed to load regulatory.db [ 81.186069][ T5758] Bluetooth: hci0: command tx timeout [ 81.186857][ T5101] Bluetooth: hci3: command tx timeout [ 81.187362][ T5760] Bluetooth: hci2: command tx timeout [ 81.187383][ T5760] Bluetooth: hci1: command tx timeout [ 81.715563][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.144799][ T6012] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 82.147026][ T6012] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.150800][ T6012] vhci_hcd vhci_hcd.0: Device attached [ 82.169453][ T6012] Bluetooth: MGMT ver 1.23 [ 82.174601][ T6013] vhci_hcd: connection closed [ 82.175574][ T60] vhci_hcd vhci_hcd.0: stop threads [ 82.180756][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.181307][ T60] vhci_hcd vhci_hcd.0: release socket [ 82.185033][ T60] vhci_hcd vhci_hcd.0: disconnect device [ 82.335798][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 82.338720][ T39] usb 6-1: config index 0 descriptor too short (expected 12333, got 45) [ 82.341538][ T39] usb 6-1: config 55 has too many interfaces: 49, using maximum allowed: 32 [ 82.344792][ T39] usb 6-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config [ 82.349188][ T39] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 49 [ 82.352239][ T39] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 82.355256][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.564766][ T39] usb 6-1: string descriptor 0 read error: -71 [ 82.567557][ T39] usb 6-1: USB disconnect, device number 2 [ 82.665829][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 82.709907][ T6023] syzkaller0: entered promiscuous mode [ 82.711652][ T6023] syzkaller0: entered allmulticast mode [ 82.818413][ T5893] usb 8-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 82.823143][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.826373][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 82.830328][ T5893] usb 8-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 82.833264][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.839173][ T5893] usb 8-1: config 0 descriptor?? [ 82.844326][ T5893] usb-storage 8-1:0.0: USB Mass Storage device detected [ 82.853717][ T5893] usb-storage 8-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 83.046900][ T5892] usb 8-1: USB disconnect, device number 3 [ 83.117233][ T6034] syzkaller0: entered promiscuous mode [ 83.118999][ T6034] syzkaller0: entered allmulticast mode [ 83.266752][ T5101] Bluetooth: hci3: command tx timeout [ 83.266796][ T5758] Bluetooth: hci0: command tx timeout [ 83.275835][ T5758] Bluetooth: hci1: command tx timeout [ 83.275851][ T5101] Bluetooth: hci2: command tx timeout [ 83.394590][ T6040] syz.0.58 uses obsolete (PF_INET,SOCK_PACKET) [ 83.715816][ T1341] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 83.865835][ T5893] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.867472][ T1341] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 83.870999][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.874564][ T1341] usb 5-1: config 0 descriptor?? [ 83.878527][ T1341] asix 5-1:0.0: probe with driver asix failed with error -22 [ 83.895829][ T5892] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.045786][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 84.047122][ T5893] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.048642][ T5892] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 84.050909][ T5893] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 84.053562][ T5892] usb 7-1: config 1 has no interface number 0 [ 84.058059][ T5893] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.059047][ T5892] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 84.061748][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.066174][ T5892] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 84.068927][ T5893] usb 8-1: Product: syz [ 84.072494][ T5892] usb 7-1: config 1 interface 105 has no altsetting 0 [ 84.073733][ T5893] usb 8-1: Manufacturer: syz [ 84.077510][ T5893] usb 8-1: SerialNumber: syz [ 84.077524][ T5892] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 84.081807][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 84.084626][ T5892] usb 7-1: Product: syz [ 84.084813][ T5893] cdc_mbim 8-1:1.0: skipping garbage [ 84.086246][ T5892] usb 7-1: Manufacturer: syz [ 84.089516][ T5892] usb 7-1: SerialNumber: syz [ 84.093329][ T6054] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.096504][ T6054] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.284917][ T6052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 84.299964][ T6046] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 84.506860][ T6054] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.509988][ T6054] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 84.890150][ T6052] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 84.892570][ T5893] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 84.898237][ T5893] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 84.903320][ T5893] wwan wwan0: port wwan0mbim0 attached [ 84.910517][ T5893] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 7a:98:04:65:13:3a [ 85.097710][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 85.100659][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 85.103816][ C1] cdc_mbim 8-1:1.0: nonzero urb status received: -71 [ 85.106578][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - 0 bytes [ 85.109594][ C1] cdc_mbim 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 85.116776][ T50] usb 8-1: USB disconnect, device number 4 [ 85.123799][ T5892] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.126416][ T6088] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 85.129820][ T50] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 85.138423][ T5892] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 85.172145][ T5892] aqc111 7-1:1.105 eth2: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:cc:8b:1e:01:dd [ 85.183395][ T5892] usb 7-1: USB disconnect, device number 2 [ 85.190424][ T5892] aqc111 7-1:1.105 eth2: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 85.214845][ T50] wwan wwan0: port wwan0mbim0 disconnected [ 85.287093][ T5892] aqc111 7-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.292368][ T5892] aqc111 7-1:1.105 eth2 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 85.296684][ T5892] aqc111 7-1:1.105 eth2 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 85.346279][ T5101] Bluetooth: hci1: command tx timeout [ 85.346321][ T5758] Bluetooth: hci3: command tx timeout [ 85.346593][ T5753] Bluetooth: hci0: command tx timeout [ 85.346612][ T5753] Bluetooth: hci2: command tx timeout [ 85.661408][ T6105] syzkaller0: entered promiscuous mode [ 85.663148][ T6105] syzkaller0: entered allmulticast mode [ 85.743198][ T6109] syz_tun: entered allmulticast mode [ 85.746740][ T6108] syz_tun: left allmulticast mode [ 85.987389][ T6123] syzkaller0: entered promiscuous mode [ 85.989127][ T6123] syzkaller0: entered allmulticast mode [ 86.229443][ T6130] input: syz0 as /devices/virtual/input/input5 [ 86.273358][ T6130] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 86.297884][ T6134] syzkaller0: entered promiscuous mode [ 86.299693][ T6134] syzkaller0: entered allmulticast mode [ 86.415356][ T6140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.95'. [ 86.419364][ T6140] netlink: 44 bytes leftover after parsing attributes in process `syz.2.95'. [ 86.502808][ T5892] usb 5-1: USB disconnect, device number 2 [ 86.542409][ T6154] input: syz0 as /devices/virtual/input/input6 [ 86.573302][ T6154] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 86.632790][ T6159] process 'syz.2.101' launched './file0' with NULL argv: empty string added [ 86.896521][ T6181] input: syz0 as /devices/virtual/input/input7 [ 86.917418][ T6179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.926773][ T6181] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 87.067338][ T6188] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 87.132323][ T5894] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.139824][ T5894] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 87.255872][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 87.261371][ T6203] syzkaller0: entered promiscuous mode [ 87.263118][ T6203] syzkaller0: entered allmulticast mode [ 87.405777][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 87.408949][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 87.412533][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.415543][ T5892] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.419279][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 87.423038][ T5892] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 87.426437][ T5892] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 87.429179][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.435474][ T5892] usb 7-1: config 0 descriptor?? [ 87.437155][ T5758] Bluetooth: hci0: command 0x0401 tx timeout [ 87.455255][ T5758] Bluetooth: hci4: urb ffff88802642c600 submission failed (90) [ 87.648548][ T5892] usb 7-1: USB disconnect, device number 3 [ 88.785837][ T859] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.965809][ T859] usb 7-1: Using ep0 maxpacket: 32 [ 88.972914][ T859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.985647][ T859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.992665][ T859] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 89.002355][ T859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.007853][ T859] usb 7-1: config 0 descriptor?? [ 89.026470][ T859] hub 7-1:0.0: USB hub found [ 89.213118][ T859] hub 7-1:0.0: 1 port detected [ 89.617525][ T859] usb 7-1: USB disconnect, device number 4 [ 89.895804][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 89.981890][ T6218] syz.0.128 (6218) used greatest stack depth: 18984 bytes left [ 89.992985][ T6304] input: syz1 as /devices/virtual/input/input8 [ 90.028352][ T5894] usb 6-1: device descriptor read/64, error -71 [ 90.285913][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 90.326103][ T845] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.425826][ T5894] usb 6-1: device descriptor read/64, error -71 [ 90.477840][ T845] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.482407][ T845] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.486557][ T845] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.490188][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.497267][ T6313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 90.505172][ T845] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 90.526693][ T5893] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.548842][ T5894] usb usb6-port1: attempt power cycle [ 90.695820][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 90.698698][ T5893] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 90.701306][ T5893] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.704527][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.705934][ T5895] usb 8-1: USB disconnect, device number 5 [ 90.707396][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.885836][ T5894] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 90.916485][ T5894] usb 6-1: device descriptor read/8, error -71 [ 91.155846][ T5894] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 91.186282][ T5894] usb 6-1: device descriptor read/8, error -71 [ 91.306484][ T5894] usb usb6-port1: unable to enumerate USB device [ 91.466170][ T6346] syzkaller0: entered promiscuous mode [ 91.468614][ T6346] syzkaller0: entered allmulticast mode [ 91.958845][ T6377] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 91.962071][ T6377] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 92.226378][ T6391] 9pnet_fd: Insufficient options for proto=fd [ 92.245920][ T2317] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 92.291207][ T6393] syzkaller0: entered promiscuous mode [ 92.292996][ T6393] syzkaller0: entered allmulticast mode [ 92.405835][ T2317] usb 8-1: Using ep0 maxpacket: 8 [ 92.410929][ T2317] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 92.415856][ T2317] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 92.420680][ T2317] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 92.424363][ T2317] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26623, setting to 1024 [ 92.428312][ T2317] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 116 [ 92.431182][ T2317] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 92.434282][ T2317] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.439736][ T2317] usb 8-1: config 0 descriptor?? [ 92.442367][ T6381] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.445351][ T6381] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.448402][ T6381] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 92.659818][ T5893] usb 8-1: USB disconnect, device number 6 [ 93.304513][ T5895] usb 5-1: USB disconnect, device number 3 [ 94.162837][ T40] audit: type=1326 audit(1780058436.967:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6416 comm="syz.2.193" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aef7c code=0x0 [ 94.357383][ T6427] warning: `syz.3.197' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.555798][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.631853][ T6432] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 94.648857][ T6432] kvm: pic: non byte read [ 94.652480][ T6432] kvm: pic: level sensitive irq not supported [ 94.652846][ T6432] kvm: pic: non byte read [ 94.657823][ T6432] kvm: pic: level sensitive irq not supported [ 94.658133][ T6432] kvm: pic: non byte read [ 94.662801][ T6432] kvm: pic: level sensitive irq not supported [ 94.663143][ T6432] kvm: pic: non byte read [ 94.686843][ T9] usb 5-1: device descriptor read/64, error -71 [ 94.935826][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 95.085947][ T9] usb 5-1: device descriptor read/64, error -71 [ 95.166148][ T6453] input: syz0 as /devices/virtual/input/input9 [ 95.188909][ T6453] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 95.206394][ T9] usb usb5-port1: attempt power cycle [ 95.218932][ T6456] kvm: pic: non byte read [ 95.220600][ T6456] kvm: pic: non byte read [ 95.222201][ T6456] kvm: pic: non byte read [ 95.223790][ T6456] kvm: pic: non byte read [ 95.225606][ T6456] kvm: pic: non byte read [ 95.227394][ T6456] kvm: pic: non byte read [ 95.267189][ T6456] kvm: pic: non byte write [ 95.272680][ T6456] kvm: pic: level sensitive irq not supported [ 95.274646][ T6456] kvm: pic: level sensitive irq not supported [ 95.279307][ T6456] kvm: pic: level sensitive irq not supported [ 95.284522][ T6456] kvm: pic: level sensitive irq not supported [ 95.288427][ T6458] syzkaller0: entered promiscuous mode [ 95.289126][ T6456] kvm: pic: level sensitive irq not supported [ 95.290362][ T6458] syzkaller0: entered allmulticast mode [ 95.299362][ T6456] kvm: pic: level sensitive irq not supported [ 95.483785][ T6470] syzkaller0: entered promiscuous mode [ 95.488505][ T6470] syzkaller0: entered allmulticast mode [ 95.557227][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.587563][ T9] usb 5-1: device descriptor read/8, error -71 [ 95.703038][ T78] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.826694][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.831425][ T78] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.832072][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.839847][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.840469][ T6488] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.843912][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.848470][ T9] usb 5-1: device descriptor read/8, error -71 [ 95.850829][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.854465][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.897454][ T78] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.966034][ T9] usb usb5-port1: unable to enumerate USB device [ 95.969729][ T78] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.039180][ T6495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 96.120865][ T78] bridge_slave_1: left allmulticast mode [ 96.122676][ T78] bridge_slave_1: left promiscuous mode [ 96.125542][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.131207][ T78] bridge_slave_0: left allmulticast mode [ 96.133231][ T78] bridge_slave_0: left promiscuous mode [ 96.134984][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.291014][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.296697][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.301520][ T78] bond0 (unregistering): Released all slaves [ 96.465303][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.470412][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.473018][ T6489] bridge_slave_0: entered allmulticast mode [ 96.475678][ T6489] bridge_slave_0: entered promiscuous mode [ 96.479584][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.485898][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.488965][ T6489] bridge_slave_1: entered allmulticast mode [ 96.492794][ T6489] bridge_slave_1: entered promiscuous mode [ 96.504606][ T5455] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.537672][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.553267][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.570210][ T6489] team0: Port device team_slave_0 added [ 96.573436][ T6489] team0: Port device team_slave_1 added [ 96.588609][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.590726][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.601761][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.617379][ T78] hsr_slave_0: left promiscuous mode [ 96.619484][ T78] hsr_slave_1: left promiscuous mode [ 96.621548][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.623998][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.627436][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.629773][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.638703][ T78] veth1_macvtap: left promiscuous mode [ 96.641154][ T78] veth0_macvtap: left promiscuous mode [ 96.642916][ T78] veth1_vlan: left promiscuous mode [ 96.644920][ T78] veth0_vlan: left promiscuous mode [ 96.789411][ T78] team0 (unregistering): Port device team_slave_1 removed [ 96.797428][ T78] team0 (unregistering): Port device team_slave_0 removed [ 96.885600][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.889746][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.898036][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.906918][ T5455] 8021q: adding VLAN 0 to HW filter on device eth3 [ 96.924569][ T6489] hsr_slave_0: entered promiscuous mode [ 96.926823][ T6489] hsr_slave_1: entered promiscuous mode [ 96.928826][ T6489] debugfs: 'hsr0' already exists in 'hsr' [ 96.930517][ T6489] Cannot create hsr debugfs directory [ 97.048699][ T6489] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.054723][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.057749][ T6489] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.062577][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.065345][ T6489] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.071827][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.074635][ T6489] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.079095][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.094111][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.096726][ T6489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.099437][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.101721][ T6489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.138326][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.145512][ T5455] 8021q: adding VLAN 0 to HW filter on device eth4 [ 97.156900][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.160979][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.172187][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.180319][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.182544][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.187696][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.190085][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.298398][ T5455] 8021q: adding VLAN 0 to HW filter on device eth5 [ 97.357905][ T6578] capability: warning: `syz.0.236' uses deprecated v2 capabilities in a way that may be insecure [ 97.430980][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.586742][ T6489] veth0_vlan: entered promiscuous mode [ 97.598145][ T6489] veth1_vlan: entered promiscuous mode [ 97.615320][ T6489] veth0_macvtap: entered promiscuous mode [ 97.620246][ T6489] veth1_macvtap: entered promiscuous mode [ 97.661983][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.672713][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.679340][ T455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.682815][ T455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.688174][ T455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.691692][ T455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.750074][ T455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.752691][ T455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.773359][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.778580][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.885831][ T5895] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 97.906376][ T5101] Bluetooth: hci3: command tx timeout [ 98.038825][ T5895] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c9.98 [ 98.042494][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.048214][ T5895] usb 5-1: config 0 descriptor?? [ 98.052593][ T5895] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 98.056879][ T5895] ftdi_sio ttyUSB0: unknown device type: 0xc998 [ 98.063772][ T6616] syzkaller0: entered promiscuous mode [ 98.065498][ T6616] syzkaller0: entered allmulticast mode [ 99.025880][ T9] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 99.179572][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 99.182806][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.182838][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.182858][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.182878][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.183922][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 99.200799][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.204097][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.207919][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.211295][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.215402][ T9] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 99.218417][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 99.221741][ T9] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.225277][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 99.230028][ T9] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 99.237029][ T9] usb 9-1: string descriptor 0 read error: -22 [ 99.239022][ T9] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 99.241878][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.252616][ T9] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 99.482123][ T6636] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 99.484871][ T6636] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 99.489105][ T6636] vhci_hcd vhci_hcd.0: Device attached [ 99.509640][ T6637] vhci_hcd: connection closed [ 99.509869][ T497] vhci_hcd vhci_hcd.2: stop threads [ 99.512847][ T497] vhci_hcd vhci_hcd.2: release socket [ 99.514470][ T497] vhci_hcd vhci_hcd.2: disconnect device [ 99.985996][ T5101] Bluetooth: hci3: command tx timeout [ 100.447229][ T6660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 100.449925][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.454157][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 100.470273][ T6661] vhci_hcd: connection closed [ 100.471251][ T497] vhci_hcd vhci_hcd.2: stop threads [ 100.475222][ T497] vhci_hcd vhci_hcd.2: release socket [ 100.477540][ T497] vhci_hcd vhci_hcd.2: disconnect device [ 100.671646][ T2317] usb 5-1: USB disconnect, device number 8 [ 100.681917][ T2317] ftdi_sio 5-1:0.0: device disconnected [ 101.026032][ T2317] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 101.175941][ T2317] usb 5-1: Using ep0 maxpacket: 16 [ 101.179832][ T2317] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.184053][ T2317] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 101.188118][ T2317] usb 5-1: config 1 interface 1 has no altsetting 0 [ 101.194110][ T2317] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 101.197942][ T2317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.201097][ T2317] usb 5-1: Product: syz [ 101.202496][ T2317] usb 5-1: Manufacturer: syz [ 101.203943][ T2317] usb 5-1: SerialNumber: syz [ 101.245826][ T6055] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 101.335785][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 101.398201][ T6055] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 101.402696][ T6055] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 101.407197][ T6055] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 101.415447][ T2317] usb 5-1: selecting invalid altsetting 0 [ 101.416373][ T6055] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.417936][ T2317] usb 5-1: found format II with max.bitrate = 9, frame size=42788 [ 101.421448][ T6055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.421466][ T6055] usb 7-1: Product: syz [ 101.421477][ T6055] usb 7-1: Manufacturer: syz [ 101.421489][ T6055] usb 7-1: SerialNumber: syz [ 101.435287][ T2317] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 101.437985][ T2317] usb 5-1: selecting invalid altsetting 0 [ 101.440360][ T2317] usb 5-1: 0:2 : does not exist [ 101.469942][ T2317] usb 5-1: USB disconnect, device number 9 [ 101.493307][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.502689][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 101.507256][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 101.509883][ T5895] usb 9-1: USB disconnect, device number 2 [ 101.511176][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 101.520334][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.531332][ T6674] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 101.541316][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.627457][ T6670] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 101.741198][ T24] usb 6-1: USB disconnect, device number 7 [ 102.065896][ T5101] Bluetooth: hci3: command tx timeout [ 102.185844][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 102.233192][ T6670] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 102.367960][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.371191][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 102.373887][ T24] usb 5-1: config 1 has no interface number 0 [ 102.375871][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.381708][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40 [ 102.384592][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.387331][ T24] usb 5-1: Product: syz [ 102.388701][ T24] usb 5-1: Manufacturer: syz [ 102.390195][ T24] usb 5-1: SerialNumber: syz [ 102.401198][ T24] cdc_ncm 5-1:1.1: skipping garbage [ 102.402902][ T24] usb 5-1: selecting invalid altsetting 1 [ 102.441075][ T6055] cdc_ncm 7-1:1.0: failed to get mac address [ 102.445701][ T6055] cdc_ncm 7-1:1.0: bind() failure [ 102.455298][ T6055] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 102.456713][ T6055] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 102.465540][ T6055] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 102.477660][ T6055] usb 7-1: USB disconnect, device number 5 [ 102.981000][ T6691] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 102.983517][ T6691] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.988179][ T6691] vhci_hcd vhci_hcd.0: Device attached [ 103.003100][ T6692] vhci_hcd: connection closed [ 103.004248][ T78] vhci_hcd vhci_hcd.2: stop threads [ 103.007288][ T24] cdc_ncm 5-1:1.1: SET_CRC_MODE failed [ 103.008289][ T78] vhci_hcd vhci_hcd.2: release socket [ 103.008307][ T78] vhci_hcd vhci_hcd.2: disconnect device [ 103.031538][ T24] usb 5-1: selecting invalid altsetting 1 [ 103.033435][ T24] cdc_ncm 5-1:1.1: bind() failure [ 103.038762][ T24] usb 5-1: USB disconnect, device number 10 [ 103.487392][ T5893] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 103.562025][ T6713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.281'. [ 103.565470][ T6713] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 103.635785][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 103.640722][ T5893] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.649888][ T5893] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.668152][ T5893] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.671086][ T5893] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.673784][ T5893] usb 9-1: Product: syz [ 103.675096][ T5893] usb 9-1: Manufacturer: syz [ 103.682228][ T5893] hub 9-1:4.0: USB hub found [ 103.883172][ T5893] hub 9-1:4.0: 2 ports detected [ 103.939653][ T6742] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 103.989341][ T6745] can: request_module (can-proto-4) failed. [ 104.083963][ T5893] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 104.088946][ T5893] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 104.118315][ T5893] usb 9-1: USB disconnect, device number 3 [ 104.146404][ T5101] Bluetooth: hci3: command tx timeout [ 104.696592][ T859] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 104.855816][ T859] usb 7-1: Using ep0 maxpacket: 8 [ 104.858758][ T859] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 104.861365][ T859] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 104.865166][ T859] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.869495][ T859] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.872594][ T859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.880146][ T859] usbtmc 7-1:16.0: bulk endpoints not found [ 104.975813][ T1341] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 105.147129][ T1341] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 105.150644][ T1341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.155902][ T1341] usb 9-1: config 0 descriptor?? [ 105.159889][ T1341] asix 9-1:0.0: probe with driver asix failed with error -22 [ 105.924057][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.322'. [ 106.074425][ T6822] input: syz0 as /devices/virtual/input/input10 [ 106.093028][ T6822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 106.285931][ T6831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.329'. [ 107.323425][ T6846] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 107.325468][ T6846] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 107.328208][ T6846] vhci_hcd vhci_hcd.0: Device attached [ 107.346870][ T6847] vhci_hcd: connection closed [ 107.347123][ T13] vhci_hcd vhci_hcd.1: stop threads [ 107.350298][ T13] vhci_hcd vhci_hcd.1: release socket [ 107.351943][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 107.473427][ T845] usb 7-1: USB disconnect, device number 6 [ 107.754992][ T2317] usb 9-1: USB disconnect, device number 4 [ 107.836011][ T859] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 107.967033][ T859] usb 5-1: device descriptor read/64, error -71 [ 108.215866][ T859] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.345830][ T859] usb 5-1: device descriptor read/64, error -71 [ 108.365821][ T58] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 108.457505][ T859] usb usb5-port1: attempt power cycle [ 108.474350][ T6891] input: syz0 as /devices/virtual/input/input11 [ 108.492019][ T6891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer. [ 108.518507][ T58] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 108.521595][ T58] usb 6-1: config 0 has no interface number 0 [ 108.528339][ T58] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 108.532392][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.535601][ T58] usb 6-1: Product: syz [ 108.537448][ T58] usb 6-1: Manufacturer: syz [ 108.539177][ T58] usb 6-1: SerialNumber: syz [ 108.543886][ T58] usb 6-1: config 0 descriptor?? [ 108.795906][ T859] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 108.816583][ T859] usb 5-1: device descriptor read/8, error -71 [ 108.956082][ T58] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 108.959982][ T58] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 108.963775][ T58] asix 6-1:0.251: probe with driver asix failed with error -5 [ 108.970251][ T58] usb 6-1: USB disconnect, device number 8 [ 109.055946][ T859] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 109.076557][ T859] usb 5-1: device descriptor read/8, error -71 [ 109.188118][ T859] usb usb5-port1: unable to enumerate USB device [ 109.286053][ T5893] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 109.435861][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 109.440679][ T5893] usb 7-1: unable to get BOS descriptor or descriptor too short [ 109.443950][ T5893] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 109.446643][ T5893] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 109.449693][ T5893] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 109.452355][ T5893] usb 7-1: config 128 has no interface number 0 [ 109.454271][ T5893] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 109.457892][ T5893] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.461196][ T5893] usb 7-1: config 128 interface 127 has no altsetting 0 [ 109.465060][ T5893] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 109.467911][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.470340][ T5893] usb 7-1: Product: syz [ 109.471780][ T5893] usb 7-1: Manufacturer: syz [ 109.473354][ T5893] usb 7-1: SerialNumber: syz [ 109.491687][ T6921] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 109.493796][ T6921] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 109.496614][ T6921] vhci_hcd vhci_hcd.0: Device attached [ 109.512589][ T6922] vhci_hcd: connection closed [ 109.513428][ T497] vhci_hcd vhci_hcd.1: stop threads [ 109.518720][ T497] vhci_hcd vhci_hcd.1: release socket [ 109.520757][ T497] vhci_hcd vhci_hcd.1: disconnect device [ 109.635873][ T1341] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 109.714637][ T5893] usb 7-1: USB disconnect, device number 7 [ 109.728834][ T5749] udevd[5749]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.785810][ T1341] usb 9-1: Using ep0 maxpacket: 32 [ 109.789118][ T1341] usb 9-1: unable to get BOS descriptor or descriptor too short [ 109.792322][ T1341] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.795482][ T1341] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.800040][ T1341] usb 9-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 109.803145][ T1341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.805600][ T1341] usb 9-1: Product: syz [ 109.807064][ T1341] usb 9-1: Manufacturer: syz [ 109.808679][ T1341] usb 9-1: SerialNumber: syz [ 109.826885][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 110.047354][ T1341] usb 9-1: USB disconnect, device number 5 [ 110.641723][ T6939] syzkaller0: entered promiscuous mode [ 110.643742][ T6939] syzkaller0: entered allmulticast mode [ 110.873913][ T78] Bluetooth: hci4: Frame reassembly failed (-84) [ 111.205863][ T5832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 111.245865][ T5893] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 111.377033][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.380431][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.383424][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.387611][ T5832] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.390364][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.393986][ T5832] usb 6-1: config 0 descriptor?? [ 111.398340][ T5893] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 111.400951][ T5893] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 111.404082][ T5893] usb 5-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 111.407327][ T5893] usb 5-1: config 220 has no interface number 2 [ 111.409252][ T5893] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 111.413196][ T5893] usb 5-1: config 220 interface 0 has no altsetting 0 [ 111.415231][ T5893] usb 5-1: config 220 interface 76 has no altsetting 0 [ 111.417469][ T5893] usb 5-1: config 220 interface 1 has no altsetting 0 [ 111.421087][ T5893] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 111.424045][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.426693][ T5893] usb 5-1: Product: syz [ 111.428413][ T5893] usb 5-1: Manufacturer: syz [ 111.430387][ T5893] usb 5-1: SerialNumber: syz [ 111.575907][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 111.645068][ T5893] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 111.648486][ T5893] uvcvideo 5-1:220.0: No valid video chain found. [ 111.650711][ T5893] usb 5-1: selecting invalid altsetting 0 [ 111.659513][ T5893] usb 5-1: selecting invalid altsetting 0 [ 111.662051][ T5893] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 111.668603][ T5893] usb 5-1: USB disconnect, device number 15 [ 111.726810][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 111.730195][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 111.733116][ T9] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.736710][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.740099][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.743322][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.750124][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.753499][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.760704][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 111.811311][ T5832] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 112.945876][ T5101] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 112.948035][ T5758] Bluetooth: hci4: command 0x1003 tx timeout [ 113.455867][ T1341] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 113.607422][ T1341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.610710][ T1341] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 113.613637][ T1341] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 113.616562][ T1341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.621489][ T1341] usb 5-1: config 0 descriptor?? [ 113.879136][ T5832] usb 6-1: USB disconnect, device number 9 [ 114.078080][ T7011] syz_tun: entered allmulticast mode [ 114.082207][ T7011] syz_tun: left allmulticast mode [ 114.094358][ T7013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.388'. [ 114.232377][ T1341] usb 5-1: Direct firmware load for ar3k/ramps_0x3a7b211c_0.dfu failed with error -2 [ 114.235805][ T1341] usb 5-1: Falling back to sysfs fallback for: ar3k/ramps_0x3a7b211c_0.dfu [ 114.344550][ T859] usb 7-1: USB disconnect, device number 8 [ 114.815834][ T859] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 114.945843][ T859] usb 7-1: device descriptor read/64, error -71 [ 115.185856][ T859] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 115.224248][ T7057] ======================================================= [ 115.224248][ T7057] WARNING: The mand mount option has been deprecated and [ 115.224248][ T7057] and is ignored by this kernel. Remove the mand [ 115.224248][ T7057] option from the mount to silence this warning. [ 115.224248][ T7057] ======================================================= [ 115.317317][ T859] usb 7-1: device descriptor read/64, error -71 [ 115.320975][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 115.352056][ T7067] input: syz0 as /devices/virtual/input/input12 [ 115.407347][ T7069] syzkaller0: entered promiscuous mode [ 115.409724][ T7069] syzkaller0: entered allmulticast mode [ 115.425939][ T859] usb usb7-port1: attempt power cycle [ 115.771041][ T859] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 115.782749][ T7075] veth0: entered promiscuous mode [ 115.785976][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 115.797211][ T859] usb 7-1: device descriptor read/8, error -71 [ 116.045821][ T859] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 116.076454][ T859] usb 7-1: device descriptor read/8, error -71 [ 116.187067][ T859] usb usb7-port1: unable to enumerate USB device [ 116.205545][ T7085] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 117.422033][ T7111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.795863][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 117.955840][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 117.960812][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.964201][ T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.969557][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.973093][ T24] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 117.976700][ T24] usb 6-1: Product: syz [ 117.978095][ T24] usb 6-1: Manufacturer: syz [ 117.987426][ T24] hub 6-1:4.0: USB hub found [ 118.188190][ T24] hub 6-1:4.0: 2 ports detected [ 118.190012][ T24] hub 6-1:4.0: insufficient power available to use all downstream ports [ 118.573701][ T7139] input: syz0 as /devices/virtual/input/input13 [ 118.797274][ T24] usb 6-1: USB disconnect, device number 10 [ 118.859561][ T7148] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 118.864409][ T7148] Error validating options; rc = [-22] [ 119.381290][ T7156] ------------[ cut here ]------------ [ 119.383940][ T7156] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 119.383950][ T7156] WARNING: drivers/net/wireless/virtual/mac80211_hwsim.c:2235 at mac80211_hwsim_tx+0x16c2/0x2b10, CPU#0: syz.1.444/7156 [ 119.390021][ T7156] Modules linked in: [ 119.392339][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 119.395853][ T7156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.399502][ T7156] RIP: 0010:mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.401324][ T7156] Code: 03 80 3c 02 00 0f 85 85 13 00 00 49 8b 86 00 38 00 00 c7 44 24 20 00 00 00 00 48 89 44 24 18 e9 bc eb ff ff e8 1f 51 dc fa 90 <0f> 0b 90 e9 15 f1 ff ff e8 11 51 dc fa 90 0f 0b 90 48 8b 3c 24 4c [ 119.407781][ T7156] RSP: 0018:ffffc90003357338 EFLAGS: 00010283 [ 119.409860][ T7156] RAX: 0000000000000410 RBX: 0000000000000014 RCX: ffffc9000c803000 [ 119.412378][ T7156] RDX: 0000000000080000 RSI: ffffffff872babe1 RDI: ffff888029248000 [ 119.414766][ T7156] RBP: ffff88802b1e7930 R08: 0000000000000004 R09: 0000000000000014 [ 119.417218][ T7156] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 119.419668][ T7156] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000020 [ 119.422058][ T7156] FS: 0000000000000000(0000) GS:ffff88809718b000(0063) knlGS:00000000f540db40 [ 119.424937][ T7156] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 119.427851][ T7156] CR2: 00000000f704c5d0 CR3: 0000000071939000 CR4: 0000000000352ef0 [ 119.431179][ T7156] Call Trace: [ 119.432522][ T7156] [ 119.433688][ T7156] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.435992][ T7156] ieee80211_tx_frags+0x5c9/0xa70 [ 119.437616][ T7156] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 119.439299][ T7156] __ieee80211_tx+0x145/0x5b0 [ 119.441040][ T7156] ieee80211_tx+0x336/0x460 [ 119.442731][ T7156] ? __pfx_ieee80211_tx+0x10/0x10 [ 119.444538][ T7156] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 119.447074][ T7156] ? ieee80211_skb_resize+0x119/0x670 [ 119.448943][ T7156] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 119.450723][ T7156] ieee80211_xmit+0x30f/0x3e0 [ 119.452210][ T7156] ieee80211_monitor_start_xmit+0xdd1/0x1280 [ 119.454075][ T7156] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 119.456453][ T7156] dev_hard_start_xmit+0x128/0x7a0 [ 119.458416][ T7156] __dev_queue_xmit+0x1baa/0x4950 [ 119.460642][ T7156] ? find_held_lock+0x2b/0x80 [ 119.462482][ T7156] ? __might_fault+0xc5/0x140 [ 119.464299][ T7156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.466430][ T7156] ? __pfx__copy_from_iter+0x10/0x10 [ 119.468123][ T7156] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.469800][ T7156] ? packet_parse_headers+0x5ae/0x800 [ 119.471456][ T7156] ? __asan_memset+0x23/0x50 [ 119.472904][ T7156] ? packet_parse_headers+0x5ba/0x800 [ 119.474540][ T7156] ? packet_parse_headers+0x205/0x800 [ 119.476273][ T7156] ? __pfx_packet_parse_headers+0x10/0x10 [ 119.478028][ T7156] packet_xmit+0x243/0x310 [ 119.479445][ T7156] packet_sendmsg+0x319a/0x5100 [ 119.480968][ T7156] ? __pfx___might_resched+0x10/0x10 [ 119.482594][ T7156] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.484218][ T7156] ? aa_sk_perm+0x309/0xaa0 [ 119.485630][ T7156] ? __pfx_packet_sendmsg+0x10/0x10 [ 119.487255][ T7156] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.488753][ T7156] ? __might_fault+0xc5/0x140 [ 119.490194][ T7156] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 119.491907][ T7156] __sys_sendto+0x468/0x4b0 [ 119.493284][ T7156] ? __pfx_packet_sendmsg+0x10/0x10 [ 119.494820][ T7156] ? __pfx___sys_sendto+0x10/0x10 [ 119.496415][ T7156] ? fd_install+0x223/0x580 [ 119.497889][ T7156] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 119.499683][ T7156] __ia32_sys_sendto+0xdd/0x1b0 [ 119.501141][ T7156] ? __do_fast_syscall_32+0x98/0x970 [ 119.502894][ T7156] ? lockdep_hardirqs_on+0x78/0x100 [ 119.504478][ T7156] __do_fast_syscall_32+0xe7/0x970 [ 119.506311][ T7156] ? lockdep_hardirqs_on+0x78/0x100 [ 119.508066][ T7156] do_fast_syscall_32+0x32/0x70 [ 119.509559][ T7156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.511687][ T7156] RIP: 0023:0xf701ef7c [ 119.512909][ T7156] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.519353][ T7156] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 119.522411][ T7156] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 119.525283][ T7156] RDX: 0000000000000030 RSI: 0000000004000000 RDI: 0000000080000380 [ 119.527793][ T7156] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 119.530165][ T7156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.532678][ T7156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.535121][ T7156] [ 119.536183][ T7156] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 119.538867][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.1.444 Not tainted syzkaller #0 PREEMPT(full) [ 119.542003][ T7156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 119.545076][ T7156] Call Trace: [ 119.546126][ T7156] [ 119.547045][ T7156] dump_stack_lvl+0x100/0x190 [ 119.548557][ T7156] vpanic+0x552/0x970 [ 119.549792][ T7156] ? __pfx_vpanic+0x10/0x10 [ 119.551193][ T7156] panic+0xd1/0xe0 [ 119.552373][ T7156] ? __pfx_panic+0x10/0x10 [ 119.553763][ T7156] check_panic_on_warn.cold+0x19/0x34 [ 119.555398][ T7156] ? mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.557018][ T7156] __warn.cold+0x191/0x328 [ 119.558421][ T7156] __report_bug+0x296/0x3d0 [ 119.559866][ T7156] ? mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.561692][ T7156] ? __pfx___report_bug+0x10/0x10 [ 119.563294][ T7156] ? __css_rstat_updated+0x1ce/0x5a0 [ 119.564959][ T7156] ? __pfx___skb_flow_dissect+0x10/0x10 [ 119.566655][ T7156] ? ieee80211_encrypt_tx_skb+0x2b8/0x3b0 [ 119.568418][ T7156] ? mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.569986][ T7156] report_bug+0xb2/0x220 [ 119.571299][ T7156] ? mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.572922][ T7156] handle_bug+0x16a/0x2a0 [ 119.574252][ T7156] exc_invalid_op+0x17/0x50 [ 119.575618][ T7156] asm_exc_invalid_op+0x1a/0x20 [ 119.577072][ T7156] RIP: 0010:mac80211_hwsim_tx+0x16c2/0x2b10 [ 119.578891][ T7156] Code: 03 80 3c 02 00 0f 85 85 13 00 00 49 8b 86 00 38 00 00 c7 44 24 20 00 00 00 00 48 89 44 24 18 e9 bc eb ff ff e8 1f 51 dc fa 90 <0f> 0b 90 e9 15 f1 ff ff e8 11 51 dc fa 90 0f 0b 90 48 8b 3c 24 4c [ 119.584652][ T7156] RSP: 0018:ffffc90003357338 EFLAGS: 00010283 [ 119.586516][ T7156] RAX: 0000000000000410 RBX: 0000000000000014 RCX: ffffc9000c803000 [ 119.588924][ T7156] RDX: 0000000000080000 RSI: ffffffff872babe1 RDI: ffff888029248000 [ 119.591308][ T7156] RBP: ffff88802b1e7930 R08: 0000000000000004 R09: 0000000000000014 [ 119.593674][ T7156] R10: 0000000000000028 R11: 0000000000000000 R12: 0000000000000000 [ 119.596017][ T7156] R13: dffffc0000000000 R14: 0000000000000028 R15: 0000000000000020 [ 119.598414][ T7156] ? mac80211_hwsim_tx+0x16c1/0x2b10 [ 119.600043][ T7156] ? mac80211_hwsim_tx+0x16c1/0x2b10 [ 119.601656][ T7156] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.603441][ T7156] ieee80211_tx_frags+0x5c9/0xa70 [ 119.604892][ T7156] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 119.606585][ T7156] __ieee80211_tx+0x145/0x5b0 [ 119.608052][ T7156] ieee80211_tx+0x336/0x460 [ 119.609458][ T7156] ? __pfx_ieee80211_tx+0x10/0x10 [ 119.611006][ T7156] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 119.612949][ T7156] ? ieee80211_skb_resize+0x119/0x670 [ 119.614589][ T7156] ? ieee80211_set_qos_hdr+0x2c1/0x3f0 [ 119.616261][ T7156] ieee80211_xmit+0x30f/0x3e0 [ 119.617729][ T7156] ieee80211_monitor_start_xmit+0xdd1/0x1280 [ 119.619566][ T7156] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 119.621537][ T7156] dev_hard_start_xmit+0x128/0x7a0 [ 119.623123][ T7156] __dev_queue_xmit+0x1baa/0x4950 [ 119.624658][ T7156] ? find_held_lock+0x2b/0x80 [ 119.626070][ T7156] ? __might_fault+0xc5/0x140 [ 119.627532][ T7156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 119.629186][ T7156] ? __pfx__copy_from_iter+0x10/0x10 [ 119.630768][ T7156] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.632450][ T7156] ? packet_parse_headers+0x5ae/0x800 [ 119.634107][ T7156] ? __asan_memset+0x23/0x50 [ 119.635520][ T7156] ? packet_parse_headers+0x5ba/0x800 [ 119.637164][ T7156] ? packet_parse_headers+0x205/0x800 [ 119.638803][ T7156] ? __pfx_packet_parse_headers+0x10/0x10 [ 119.640543][ T7156] packet_xmit+0x243/0x310 [ 119.641921][ T7156] packet_sendmsg+0x319a/0x5100 [ 119.643427][ T7156] ? __pfx___might_resched+0x10/0x10 [ 119.645053][ T7156] ? __pfx_futex_wake_mark+0x10/0x10 [ 119.646694][ T7156] ? aa_sk_perm+0x309/0xaa0 [ 119.648111][ T7156] ? __pfx_packet_sendmsg+0x10/0x10 [ 119.649696][ T7156] ? __pfx_aa_sk_perm+0x10/0x10 [ 119.651177][ T7156] ? __might_fault+0xc5/0x140 [ 119.652632][ T7156] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 119.654288][ T7156] __sys_sendto+0x468/0x4b0 [ 119.655662][ T7156] ? __pfx_packet_sendmsg+0x10/0x10 [ 119.657239][ T7156] ? __pfx___sys_sendto+0x10/0x10 [ 119.658746][ T7156] ? fd_install+0x223/0x580 [ 119.660136][ T7156] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 119.661912][ T7156] __ia32_sys_sendto+0xdd/0x1b0 [ 119.663407][ T7156] ? __do_fast_syscall_32+0x98/0x970 [ 119.665039][ T7156] ? lockdep_hardirqs_on+0x78/0x100 [ 119.666633][ T7156] __do_fast_syscall_32+0xe7/0x970 [ 119.668226][ T7156] ? lockdep_hardirqs_on+0x78/0x100 [ 119.669816][ T7156] do_fast_syscall_32+0x32/0x70 [ 119.671313][ T7156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.673753][ T7156] RIP: 0023:0xf701ef7c [ 119.675126][ T7156] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 119.680783][ T7156] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 119.683184][ T7156] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000640 [ 119.685527][ T7156] RDX: 0000000000000030 RSI: 0000000004000000 RDI: 0000000080000380 [ 119.687943][ T7156] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 119.690333][ T7156] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 119.692771][ T7156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.695177][ T7156] [ 119.696887][ T7156] Kernel Offset: disabled [ 119.698198][ T7156] Rebooting in 86400 seconds..