last executing test programs: 2m54.583687433s ago: executing program 0 (id=684): sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="a21179c1be7b40f8076135650bc735248aafcee8373ad5c63ca36861624abb153ad6d4bfa18e8ad4b099cf4c2764f82ff1d2bb3a9d38dd9e8ad077b45babd7b1842eed2dbb68698f2b2d0b6e897405cc9a591c122b5bbe8a6661df46420e8289e479b606676f55c579290419f7cbbf844f841786448a", 0x76, 0x8040, 0x0, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_sa={0x2, 0x1, 0x0, 0x6, 0x0, 0xfe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x58}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 2m54.048046105s ago: executing program 0 (id=747): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff"], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 2m53.741189689s ago: executing program 0 (id=749): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open$dir(&(0x7f0000002340)='./file1\x00', 0x6d65c0, 0x100) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8014) setsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="1200000012", 0x5, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000005c0)) close_range(r1, 0xffffffffffffffff, 0x0) 2m52.463991907s ago: executing program 0 (id=751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) lseek(r4, 0xc1e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6f73322e1c5012a7d8753e40f88dc67c21b0aeda825ad592d7f5920c55596f944f9251802992ef8bee0865d487e38b07cca6fbbffd70be2a54027894079ff4099f5c7c24f1f9da498fd5ee00000000000003ff2380a0ad5ea6a08d3f989d1843ea4daa32532c6233907ce6d418194b715deefe41adb2dc62164f2f1a6e390f4e383085b968335091fb5ee85cbc3e0a769f91f1b5a565730bc7e473368ad199f095acc0ad77d0367bcc"], 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090583"], 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x20000001, 0x4) shutdown(r6, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$can_bcm(0x1d, 0x2, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m49.079340387s ago: executing program 0 (id=757): fsopen(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe}}, '\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000040)=0x633, 0x2) recvfrom(r3, 0x0, 0x0, 0x8020, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x0, 0x0) r6 = dup2(r5, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0xee00, 0xee00}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x820000, &(0x7f0000000380)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r7}}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r8, 0x0, 0x0, 0x2400001) fallocate(r8, 0x3, 0x3, 0xffffffff) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000050002"], 0x1c}}, 0x0) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0xc048aec8, &(0x7f0000000440)={0x300, 0x0, @ioapic}) socket$pppoe(0x18, 0x1, 0x0) 2m47.740369315s ago: executing program 0 (id=761): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xb0, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0xe, [@empty, @local, @multicast2, @multicast1]}]}}, {0x0, 0x4e20, 0x7a, 0x0, @gue={{0x2, 0x0, 0x1, 0x2}, "e8fec74b64d2785a9f8f8ee2c8d79780b04a1e58e503afb6fbad9b227365767a66d15edd76128d5f33c9b8fce9486e051e83396e30957ae90f556a17dd8bd8ef6b314b41cfe6494369351759b1b4b9d441257be107ec763aeac56fba22964acf87bf17dd2afb6c0faa89"}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000701000000000000000003000000040000000c0001"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0x2c) io_setup(0x4, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 29.335871417s ago: executing program 2 (id=1109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r3, 0xc0f85403, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0) r4 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102394, 0x18ffa}], 0x1, 0x0, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0xc, &(0x7f0000000c00), &(0x7f0000000140)=0x4) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="9bd7a1ba2be600df04ce69f2329fd64c6f609be4e925c8a708c9675f505c8c635ede6ce6843b36a31b2deef19f983d54a5763255a1fefaefa19c625b5d4e28013fdb6a873f4279a5cfc7c7ead5a8c0ee5db316e3dac8f5387f135c8453c0190ccf77012903e9e5", 0x67, 0x4000840, 0x0, 0xfffffffffffffe94) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)) 25.944126706s ago: executing program 2 (id=1115): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000001240)={@local, @local}, &(0x7f0000000140)=0x8) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r2, &(0x7f0000000040)="1200", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 24.549697502s ago: executing program 2 (id=1119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = gettid() r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x9, 0x8, 0x8, 0x100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={r3, 0x2, r0, 0x6, 0x80000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ptrace$getenv(0x4201, r1, 0x3, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe0f42, 0x155) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r4, 0x8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffffaaaaaa0000002f907800000000e0000001248081000000000010000800000086dd080088be81000004100000000100000000000000080022eb00000000200000000200000000000000000000000800655874b60000"], 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000880)="2085fbf258e8629e7804dcaa83e163cab84944ac7ab76749842a16036ce0e0878be2315141c29a9d4fee13e7f8a642b0ac26de5d54b5abd30ef81ebb43efae8cb5684e7a2123c1186e9cecc4aaaa7c22b617ed8d0e69de96fdac7f625b7b562a01f4e452034e54ed8b0db9d7103979ceba9ed608c6da425e086f2f7908fca1439685e2e182a3e67d5a30b905c1f424ad2de4ce15172d537ed80bc687b5d31948127730b60688aeed2d50ecf942708671a24f052c6b052177f7dce95b32bf4875773eeda5d405c99524", 0xc9}], 0x1, &(0x7f0000000980)=ANY=[], 0x1e8}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000bc0)="91a71d4633c75a36c60c39d58d2d06d654ca0d5e21efc0981d35124cd4a9036e715b7913c6588a8123b700db3eb7b32e3ffdcd86e24f2c1e92dad72078f37159a35b69a178e2ca8f21ecbc7157ad72d014eb0e2d18b28d64182835fde723cb2c18bb4072fbd5ec0fefaa6eed321197dcc475da8a93129938c999eea854b1a86b95da23cb7b6ac906bf052f4c18f132303c78ba036436c7a6526863b80cfd5d0b118d4e338070d6ec8624c14d9ad9f076f8deadb0a4312c4015c816ac38c585d3dafcc4b7", 0xc4}, {&(0x7f0000000cc0)="bbaff3a703cb1a169755fd1fd36f397e77e94a34c57bd25d4abef85a9fd821c7d1373a91f9b0ac5c993279c30a5fe450b3a3c48bf3e274cfae9d2b014a498ed426925388f1f05849b1dc075a83f954eb084395537de12a19aa58ec81b7aba5df450b0033be17109daee3e546ea427da08df445c6df3f8007c2e8d77f7a9ee7f67c25cb44ba732456c6f911836a74f9d4bc80e403b8c126798ef045bd12f46e5f3c05c2addad4ea8f052d34a5afa1493a5c9b53aa37fb8c4bca1425dc69e72ea7bd2cbe0b4594bdd791bc76e407e27673cf146cc762ed74ff0ed8716598ff732475af272133c04f25e4c777ebe0526cd9c168d6085ec6dfbc15730bac80cdcfcf50e42712f9e42c9369655041625991c7b8bca387135cd584b97fdc7f400e6e80f8b9df80468577ab55d17a06aae27576d1c18cf74b902110ec0b3533925fffb3ef6b14fadb7e867701d98fd2a84b6614ebac80c1b41c077149d98c7bba690ed08a0d79658fa540ca53a2c70f451ccf3909434c9ccf40eb136b9bb760a18beb3ce531abfe5aa18445fab91ec832e2bcae92f0d932936cdae8e86d1757b731cf309ac9baba90e5c7fdcd59fda4df01b5077d71170e8183d7590161a7476b082bca5d149c2ee9efaebb8ac8e1acbeb8134c399803df833806167aed25175ce9ac0695bcd0de1e10604413fae69f7e4b8cd73c9ee52409578b7c3e9f07eae6b63f7bc96cd6c33a705dbb808a4e964092670798e9d2cf66aa8c982943881cbccc229786beecefa0048f06c0323ae0e477d614d3601d988d44e282bce31fae871bb962fdf683da9124819808cbb9e5d8c38c3fc8b782c132a0045a51fe9e47999eb621c3df54838dcf329fc747f95feaf3e886bad5413fe162038b894bfc67e767e4a17144d4454d7b9d8446e55ec1c086db9fdfa9bd9fe1cf7132e225ba6912c0b6e241e579cb23ebb68cc5efc89a510c1dd8732f1c379cbaff7155b9dab54f84e1fb137da5d5269220863ce6a7918ae8a9b8bfa3da7b6e69f671a361485c4aa6af907205ddbe52a88fcc0f8b71908c55bd69867ac0899f4589ef3459b7f894edabc9ddfe4bbff9f4e690aa7244b78b30f09b171d160ebec7bb28d0a667b77e6e3a253457f4176423811e549f288ffe3240f2acf3854fdd14049ede3298d3e0579b4bc4fa815158dc69c64a34ce0000f3f57acbd3fee2a070e0960b147839b3a792dd23f0c97ba55e346dbfa13f01a02a656fde676768e06253ec1ea3c63a6e5874e040995587c5590d595c0352a7495ddeb563fe3b1fd66e8b8a907b18f121bf39cb0bf4a3981d6746720c72f763b579d5a28fc2a62de72a5d0066516a820460dca8e5ed95acdddc8552141cc920d21fbdea3e601a741611a68c21f447481c76248eea6ba2351df2aff12ac22a7a3e075541804c3870", 0x3f4}], 0x2}}, {{&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000380)="dd90862335d8ab68955b5fb0d926d7ae8b2f696ff5d2bb55951a1c9e1aab16a2f0a867751a1d1acf078d62b9f6ab65a284c81f15a3a81f2267a9233526ecdbd7ea0c7bdb241a545bb0dcb51267eca8c14fc152b7e6844e2d681d24a33c96aecaf7e0d2fc13284d6df607d36a1f6700ec648a0257f833503e39596feb21d352d92c6f9c56c870bcf00a19ecfce27cb58aaa83b14f7e983f486a9afb71c8357d22c6e178d5a417d940f7aac67b1ef7f404a7c0c2f592edac4c28a337fbf36394e2bd", 0xc1}, {&(0x7f0000000500)="a88090ec83c8f52240b2fb554c4c0acdc7de66ed820b5f9e8c41d0d9944006ec82af41975e38d0f6dcdf183cb7e1c530f00bff3b1cde472fc357c5f9de", 0x3d}, {&(0x7f0000000540)="738fb2ef2f06ef60d9fc6232e1855fd21c5109df2c125605f85b114b72b0b2656bb819cd66a0c80059c6310449b857f6c61a0f7b98b21cf22a78a7a68de61a1a766b9b25a22f412de925556567c21e7205fa2760bd68c86212e578c54ab5ad386c5142526d9e9ea9b5132ec17901f400ef1b76b45ba509f1af0d54ce6fffa006833e7fb866ee41d9a979fd795ec44b3c41e41021964c", 0x96}, {&(0x7f0000000600)="b538765c81f6bb6bd33414a5101881068bfefcffd3afddfdf8c07357", 0x1c}], 0x4, &(0x7f0000000680)}}], 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000980)=""/231, 0xe7, 0x0, 0x0, 0x0) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x0) 23.469714848s ago: executing program 2 (id=1120): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r4]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) unshare(0x2060000) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000014c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700000000000500180001"], 0x4c}}, 0x0) 22.391834814s ago: executing program 2 (id=1124): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000040)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_STEAL_TIME(r4, 0x4068aea3, &(0x7f0000000080)) (async) ioctl$KVM_CAP_STEAL_TIME(r4, 0x4068aea3, &(0x7f0000000080)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x4c}}, 0x400c000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x4c}}, 0x400c000) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000280)) (async) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000000280)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r6, 0x50009402, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x81, 0x0) splice(r2, &(0x7f0000000380)=0x3ff, r7, &(0x7f00000003c0)=0x1, 0x2, 0x8) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001b00)={'vxcan1\x00', 0x0}) sendmmsg$sock(r8, &(0x7f0000002600)=[{{&(0x7f0000000480)=@generic={0x18, "0731abddc2e9459eb50874d531683b8e71c42731a4271dc5fa8e6cf171de81eaa99daf0a3e1d28e98fa121af75df55ad6f4ba20b013061c7a7a9483702807d765955e3eeb876c980f48bb38a5c0f6ddd8f6bb7743c0a528631e896a4320b9a09d26e1ee91cd0d4c9ad9083b86e58e03404052b1a961d3ee50d35749595df"}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="30817e14b7e445ca5af991742001a181134ab39c871ec083612a0cef8592ded3a2e50ce3f6a87d7289334e65f36a265e0b49b83c4bead3aa165161fc50da859fbbc64953d732c689fd51086e22e1d2b2260cadca66aed8", 0x57}, {&(0x7f0000001580)="3ac1c373c58fccfb4b94bb2d547aba16ed1b44c44666858f480c700bbb5b2df485df", 0x22}, {&(0x7f00000015c0)="57b1162b41f5daf72420130b7e461868d23b93c8669b06c6b083a3afa73697193dbd1047502d3f8516c43c52ee0255d4396552227b3df22fdd805a8900bbbbfaf622760a916185ef64d9fe47f5a486188673439a12b9d101fb4c3376fd30fac88e7b3aea63f1310588ec0928f64c9ae1b322b41d8546d4654b009ef0ea3b92adca007fb2e0c52f0d8310a68a212611cbae4d5a20b1e89dd0994b6ad861f8c622aea477266ef05dd722c39e7708603a2429cdcea90f338d63fce044618ec71a7ef81594da07f474949753d4f608d466db573a73c2a9", 0xd5}, {&(0x7f00000016c0)="52f034a63545f11324558767347b986a6a87daa37cbbaf24ce3c24b7c4593b881f7fabade08aba66acc40f0b14b3208620035f0addd12bad2c038b4e7fff4126178667a7a0ff2796c315d498716cd0c7911c40891e36dc85a8b25c3445e03a72caa7e7f4", 0x64}, {&(0x7f0000001740)="130ed367b7a5c218e252d7646e2ae66598238bd1959c256eb902193f58fd35a09cce7b449add2906fdb42d937d5f0c3c60b8a42e386347ca20c6e715fd32b638df9881118510e5db94b8b5c50483d10ec49b7e3e65759536ca242db9541b9e58183e5afed1245b8e034096e9ef620a95874b9df794b97ec649be29d0b5537fca0e7fe3f1de4b6310fb556fcf06578fd2a88795b84fde133ef63ae1c6565f8415be0cd8b988798d1060be4c81a9c737e673276f0823ee523c1ccc9593ca280e9a82c7b34807ad6cd7ae1152ce11a04bb11971f67d4c57fe87cb9d7164", 0xdc}, {&(0x7f0000001840)="56ca69f34dde25b2c5ca23698fd5ca81d2d9bcd0c39eff2045960cb356014c92fb6c51a3fdf0f07334b52ce0950338ce3142989d1c7327b07e7310475d44bbacbbbc4a3ab7128b761d92da1525be9f169e73d86144aa35e3f0b78157dd3bb4f726791ec8eb7e65a2cde0e5023a03ff878a7145eba48dc30315b815123fc5bf3fcc05e71289cfc7fa849aa32375aff8a2b7de8b82f5118bf55d8a4f730ce61f5dd3230386875b86eb844f35c851c601ed607e3033007624", 0xb7}, {&(0x7f0000001900)="fcf35fb942ea3c9da9074799150d21c206e16ce87c7050c30b66f86a70175daaab2824e2a28d5995179f9676144b295ee06a0c9c2b6332c350955d583b3acfd48f56b45dd8bbc9a92f05d08440cb931e1f71676d2fc292ae05ddb5f6", 0x5c}], 0x8, &(0x7f0000001a00)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{&(0x7f0000001b40)=@can={0x1d, r9}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="fd315ea0159787ccf644eddb9b9945aca2494fdbe567907a8169ab24d7f091b8a825f535b487b4e37c73e5993e8559cf1cd23a91f311b7e3f16cf35bbe8cc831beeaa2500c4a364bc5847c3acdf9ff42b8115cffb58211c1f8e38b50afd81ce86dbd2e4bd746f0c0358787d4888f1d09381cc6fe1a9e40951787", 0x7a}, {&(0x7f0000001c40)="a5320e3350f5da95e887b0205f1bf571b2a74273a9", 0x15}], 0x2}}, {{&(0x7f0000001cc0)=@l2tp6={0xa, 0x0, 0x9, @loopback, 0x10000, 0x2}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001d40)="86be652e83b91cd4643b01d7fc012fbc663767254956b45744b1b180e1577f7e7ef17d082e22db0ca703e92ec03f0da6d384f4002faf13d40fdbcaacf26cb1c3db0db4aee9d897c09ea916864690a069324b4bf9d65c9db73529c32d8d6dfdce72296aeea4935542781ccf2f121f1e34366120c9facd4ef5aeeebe3d1667e1212a48cb339c12c78e9cd9a11c89830d16e69e7a52b52a487468941fa6641ad5", 0x9f}, {&(0x7f0000001e00)="b0248d6f30f14c714ec50c07ab12e4a3cf7c1472b8ca945087b822585696eba5b734b7b3e67b69656f2e293eb31411121ac31223886a124d7c37e5c15b182bba69b93b7929cbb0d976224d7c73a1e5a7b897c985a73218a4189ff729490e5886806abcb941c8af6ccd443743078b057f28d545e164c8fd891ea3655697475bfcae7b7173b594c2504ddce3141bd013db49b842fef66a635b60c2ea8ae83caba30934ccc2cd32457749f96e841ab6a190035d6b00", 0xb4}, {&(0x7f0000001ec0)="ae6e3142dc87d0ac69436591610cbb9e8cfc80294438a644", 0x18}], 0x3, &(0x7f0000001f40)=[@mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{&(0x7f0000001fc0)=@l2tp6={0xa, 0x0, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8, 0x4}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002040)="9137e1e9005652e50fc4a306b7bd43b53ca0a7a0f1be86ed1e57fad9494416ba33ddfa48e74e93cbac696c3a9a5fe6d854c768c30de42de5555505353f4e03ba6f93a34d234aeaa50c0947c36016765df35c1a7572e39eb915977e07b9f31187a3f0a60265f6c543aeb594ff3289e5f45519bfd225953d9beed4607fa45d15100cdb7afcc9558f4da356065b3c45e2b0", 0x90}, {&(0x7f0000002100)="c6c2128784050378233ac8c0684d6e4eda27230052a1b48e90ce170c3e3b3eee23a17406bf871787d5558d1a856b337198ee07138f8cbc46b9506d4f0dddd7a9c2b697c2d41ad7f5ac8f8d0334529c30edcfaad0", 0x54}, {&(0x7f0000002180)="24067ca02fac1b40d5342aafab6169b697f9e68ae6dfe6f0849f17e10eda2aeef618e145f8761dff34b05b2ac1408aa31ae57ed48d73c85bbfdbd752df4fe8eca6f088370353d19abe1b72301ac667bf31fad674000261d8d57eaaab5e7f9a7f9e7a9ed46ea91f8a6880a2d7fa0e337b3a3810d2643b6afa082c5a16b31acd8750499c0a7ac9aafc463ced0baef9fb629b106997f8131e93ccd4e338b001ae125ccb91f2da4cf5ce36932883bf49881d7fd10c16bb05fde644f6ab6aca1e4e8aabaa3cdfe1605f76b75c33aea36a0f5bf657403be551757f467a29209ddc05687b50d2dfacbeeac1cab8f4ebb68f000071db7ba1bb2cf0", 0xf7}, {&(0x7f0000002280)="d692e17a1719ce5f10eaeec51fdd856c9973b304ad85c5574bf3e9291b9f5a8bd6bbb309cd6aa7e91294f81722c277544c8124746b8cfab1b66e4179a06237daf52816765a2a8ba4ff8467eb960f57e4b7b7e5276119586b558860d77842ea611325aff8c6a00712ca2f1360e597bd6a418bfff0d8fc2bbaaf", 0x79}, {&(0x7f0000002300)="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", 0xff}, {&(0x7f0000002400)="37d54c506529dece140c00a85d82fe15b0cf93983547acedbb01c684c750fc9bed724ccb30ecbe18b7e9d19106964865bfb75ea6473e1b946273ab7051d125b00501841691b884f52ee571883ecbd4471abe31d8215c488d09f1b24cbddeaa6944b6ce8d65f1660716", 0x69}, {&(0x7f0000002480)="1710819743672701f2eeb5bcb4c4bfd9384ece360934a5c068", 0x19}], 0x7, &(0x7f0000002540)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0xa8}}], 0x4, 0x20000000) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x44, 0x4, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20044004) (async) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x44, 0x4, 0xa, 0x301, 0x0, 0x0, {0xb, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x20044004) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000028c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, r10, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000029c0)=0x57, 0x4) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000002a00)=0x33321002) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$tipc(0x1e, 0x5, 0x0) 21.819700492s ago: executing program 2 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}], {0x14}}, 0xc4}}, 0x4000040) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x3, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev}}}}}}, 0x0) 17.983302476s ago: executing program 3 (id=1135): r0 = io_uring_setup(0x497c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x401) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000008c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, r3) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg(r2, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001380)="6799d0", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}}], 0x2, 0x4000000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 16.824124612s ago: executing program 3 (id=1139): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) pipe(&(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) shmget(0x3, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x11c, &(0x7f0000000000)=0x8000, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40b80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={r1, 0x3, 0x4eeb, 0x837}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000300)={0x1ff, 0x1, 'client0\x00', 0x0, "54246075edb1ac79", "91edf6c129f8147a30080407b327e8af0f9429bbf0fc0276e2e7313c0f3cfa52", 0xcd, 0x8ef}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x14, 0x14, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) 15.791621942s ago: executing program 3 (id=1140): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x80000) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000005c0)={0x1, 0x4, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x1, 0x1, 0x2, 0xfe, 0x1, 0x5, "fdb4ae44"}, 0x6, 0x4, {0xffffffffffffffff}, 0x55}) r2 = syz_open_dev$amidi(&(0x7f0000000640), 0x5, 0x521000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0], 0x3, 0xfb0f67771b9a5220, 0x0, 0xffffffffffffffff}) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000700)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000740)=0x1c, 0x800) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getresgid(&(0x7f00000008c0)=0x0, &(0x7f0000000900), &(0x7f0000000940)) r8 = syz_usbip_server_init(0x1) r9 = socket(0x2a, 0x3, 0x6) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000980)='ns/ipc\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000009c0)={0xffffffffffffffff}) r12 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00), 0x2, 0x0) r13 = syz_open_dev$vcsu(&(0x7f0000000a40), 0x5, 0x202000) pipe2$9p(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r15 = socket$inet6_udp(0xa, 0x2, 0x0) r16 = openat$incfs(0xffffffffffffffff, &(0x7f0000000ac0)='.log\x00', 0x24000, 0x20) r17 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r18 = syz_open_dev$admmidi(&(0x7f0000000b40), 0x1d, 0x101000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000b80)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000bc0)={0xa, 0x9, 0xfffffffe, 0x880, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './file0\x00'}) stat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0, 0x0}, &(0x7f0000001640)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001880)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000018c0)={0x3, 0xffff, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x6, 0x5}) statx(0xffffffffffffffff, &(0x7f0000001900)='./file0\x00', 0x400, 0x100, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000002100)={0x40000080, &(0x7f0000001ec0)=0xffffffffffffffff, &(0x7f0000001f00), &(0x7f0000001f40), {0x9}, &(0x7f0000001f80)=""/30, 0x1e, &(0x7f0000001fc0)=""/214, &(0x7f00000020c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) sendmmsg$unix(r0, &(0x7f0000002a80)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f00000001c0)="4d1a7b1f9901", 0x6}, {&(0x7f0000000200)="95f5ecd2b23c902a2b4c5d7842611dead9ae146b6b76386a4fa22868ccff00", 0x1f}, {&(0x7f0000000240)="7e7e77eacc3a55fd6b25200bb07e21f90edf3835c69980bcb2f2c19862ae3dbb44ca7cd4e749fe7cd8a7289d171e9300dc845158411611aee5da8d90dd4a73d1a8a473dcce488297729add2c9ca08b1d0c53d07da3103a835b01f107c03e9c820d81fdeece8af9cc26c66d115c2c1f493127788596a3b2144f9907d0f461850f87d5db6a5a39ae8a6ce190934f6afb5dde58cf8231670e6000af919aceb709d4bdc6f94c86ec45bf81457d29510928b583", 0xb1}, {&(0x7f0000000300)="da2b98ee5823b4d85d1687bb92798acfb040ce2cc2961c5b5c5bd3ed45bbbde4f27c2aa7eff93682af8cba2066b7ad345e60d7d5721d8bd1f88e0086b68bec533a12d31f0f3fb30df30f272166ef2764c3f1262110c80c23a58b9c89902a41756467ba624402361ff7a8aae7e99b2ebb87bf66521ee7c1b9d06f157535a71e2237f9660e791f42191fdd300860122808e9c9cb130342e4d62dcaff1faddf045d0f00660922eae20dfcd5ffc65367a8b04fd6024fa102374b051f20b33ea8f4fda8aa3e77e473d01a0ac2604879316fff2674521c6ee72dd0262958d3b6d59be814", 0xe1}, {&(0x7f0000000400)="d6820c29e9905385f02895c9130a25cef386c44819dab3ae53b7dc", 0x1b}, {&(0x7f0000000440)="6037469ce8e3c69e1ae0eee228e0fb528d301a5c9232c230224da0733be4cac70e43bc", 0x23}, {&(0x7f0000000480)="3bbca37df6931008fb746f06f4970d344f752b375370928a22ce8c7101122e867a19e24a2ddaa97cb92e5b78f24286a3f98d83d8980903c80cd2ca0df1fb63c10564e86bd8d90f5022cf11d6520729f9f1fa4bb2aa876b3508a23a85eb20b442d965650248e8e3ae4d6345c486bc805f03f88b4573cc896173386cf47bd041e5e16e7c7d9e25cad09864fed22e42f6938b1dce0da58b9d6e4acf93b442639b9afa42da657eba7ddc47a726", 0xab}], 0x7, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r3, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r7}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r8, r9, r10, 0xffffffffffffffff, r11, r12]}}, @rights={{0x2c, 0x1, 0x1, [r13, r14, r15, r16, 0xffffffffffffffff, r17, r18]}}, @rights={{0x18, 0x1, 0x1, [r19, r20]}}], 0xd0, 0x1}}, {{&(0x7f0000000d00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000d80)="c6b32519f637b2f54d1c9974978adcc302f303b2fc37633d1f1da74b782049f94b5ae9d0e6b82fbdfe4929194afe5e54e786e8af3f14094fc769350ed25045f7d06f1201f8f04a2a181b723b5cb6c1292851ae19efd95646ace7d6c6f7bcc0b314519857cdaa4c21266869cf", 0x6c}, {&(0x7f0000000e00)="4dc84bd6e08c64f0bcc4a390df931fa22bd67f0ce856e60195f57cd51be10bb60756caaefb2c08297cc655", 0x2b}, {&(0x7f0000000e40)="3c020deeacec9321322794884f7d4adcacd940f9e4c995cb4fa56978da17a7ac84005403125e37ee4686c0cd2b5e9c8858e372e706f78b24b1b5d9663e124c593eb66c265487f2646622241ccd934309309fcfca96432c0fd77a0fc34aac09f1cbb8a9329998e1bbde145946253008f7fa508e0f9519f28db2bb5a476bd1351bb36d96454b0955d5d5eb6d181eaa4b59cfe066d29e881065a5bbfd0b754af9a2d4d8e30003385207fade9f2f3e16d885c4fd16d1bc8ba037330f0b4b9a707675272b30544343e3b42026a9e00664944eeb", 0xd1}, {&(0x7f0000000f40)="0d5e403767d98473ecab3e356f376683ce0480b4d2891e6de6552ce3b08aac3b8f8f1984339ad743ab1d0b7c083b7b71fc", 0x31}, {&(0x7f0000000f80)="007ba45e117c8b9ca3e2d728a755cd0faaf3922c291ad0e29e57560933e591163d43b64615099bafdd18a4fc6dadc75b3d94dc7eca00586a5711eae3166876048a40e8b13113d6424c926859414b07b0c958c938b1f5907580b5d63987a0ed989f01c6a59b12a384c0186e48393739bcfc265031e6f9daa65afc6f39925261e9e2699290caa3e263f3918272143492e2dc7a668536da3f4613625c2728e74a48045f31395fe0e3d660ae2794e372594eead875c181b7d5a98431c3caf7d581d8ea295c28e50f080052eb2d2357f53f1b185e45c78751dcb598e5ef8b1add45f96725d7cd9d06f63d94c31fed6b7d4394", 0xf0}, {&(0x7f0000001080)="88a3f4287c28a75b1c4e918809cf5eb2f2b6e679c23d3263cd2016ded84646288b35d774485d57f729c0ff22785ccb19fb95f8271a0deb1fa2e01471f607f90759d6f59dba5108ef24085603ad5dd28a", 0x50}, {&(0x7f0000001100)="e263215e67b59211947e2e07073ec2f2e412445a801446d56d3ad75de118b5fbd23c4ec0afba031d6c3c3e0879a0bd43bf2884141b80a771267f43bdf47b8f8381338acde476301e76139ebcd0d0a216fd201a60b7d6f90699f905009733187ae370e5e32cf36a55f622c213237ce669d2af8f0ae0c12dc42d3762431f9bf189afd0fa124058e3e96233934471c7f91a2abb6de830782dadcb150685766372d3abab95ffb88d142b43eab464304c1896a8ca1577c32225bd853e725d528f9e7c7aec7a3f7917a8efc9bc19daaa4d622c5ca0ed6e86a61003cbfffef0272ef0c92560eb8e89", 0xe5}, {&(0x7f0000001200)='7', 0x1}, {&(0x7f0000001240)="3f06a7d42e9652746feea760c944802566eeae02d84d45fe447eb421da3748341635755f61ea9e9cd064a3900194fad26618bb4d8f88f41c83286913e5182e6a8a0a3286dd7093a5cae39f9433a980f44f8faa59f29d402911892e6fcc63141f3cbe7ce7edd84574b0fadea6220154866d01e4785949b282b9f92201b66251cf394829a8ef6326bb1cb39458ee952488b8be8f8aed92c7fd521af866812a5eb2750595cc300acd6a4bd2ab45d3449d26d43b6bdb7e1e4cef5b44adbf90a88f6d0bad3db119be0df226e1745e734749e69d8f2dfb6d09783d0ba6947f0c6f17e8", 0xe0}, {&(0x7f0000001340)="7425fe1d3d0a70ec2ac7b3e575028f5c6b2cae8b1b91de9c501ee35d44b7ae7fcc7fbe45da1aa3e2cdfa9eaf29addd0d9d11c25a7162db6ceaf58866d0ad0ae3d77f01f5a01b92", 0x47}], 0xa, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r23, r24}}}], 0x40, 0x4005}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001740)="a4329700ce8f3b8ec032e8ee43fbe53e24d5761fd000952c9e9e2976024fb271a7e37ef98b1ee6c4e8522e04881700bad7b2e07bf1215871006df6775268fc987e04c6554a47b995a826a123272122ffa139e691366a81365a6c6384f8ffaafc1359fe386bc1b76eb33784105cf74420105e96ed5a4e5d5bf8563dfbaa86269a97bc94be8b68662569d3a829822b7714bdfd682ecf25b7af02df76c673b6", 0x9e}, {&(0x7f0000001800)="1d938799f12968e5b8604c865dc3f9416eb7c381d9f94484404889f879900e0da3a97af44580683802514e65158f817b69f0cd455e16dd2123", 0x39}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}], 0x20, 0x20000000}}, {{&(0x7f0000001a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e40)=[{&(0x7f0000001b00)="82fae32410aaec76ef462e88adbf221422acf86e6fdbefacb2ae1a38fee85701aa0a65e16fcbcc178548bbbeed7aea2400a5be132bf20ee69172fa6574f79fedec1520283c19dd8c01128a5c3041322d93fb81cd92a9d728", 0x58}, {&(0x7f0000001b80)="f300417e1b10f5937480e6db9cea8407e4dedc8d426c0195a06fa3c1e1bfe06345c42706a5614151048ba7c0ac5ce1374bdfa3ed488cdfba86d0a5f525281c299f8145ca1228deacefb1d11be4d4d55c950dd29a40fdc507cf005ca905f34b64c2a60dda0249bcdc0e135ad4a85e8af95d7cbe3f676400608518f1dd10a465ed15f88b4f3d55e443820a", 0x8a}, {&(0x7f0000001c40)="6f326b006b828d9ff58bb25e6a4175160dc82c", 0x13}, {&(0x7f0000001c80)="273f3f4c9e6f13b21be2399223e8d14cdf8582b79a5bb4b408388527f358cbb93348652b07bd9f62a37a4a56e1b138cc7793906a3d4dd0b2c7b156a91e31ddbd7a7f519f44e8892e41c1573856795f001585b1d4684f2cc530dd47d9c46bd821638b9f94697844e511d3c1237850484b8937b1b81c3597a807fd9b8bbeed7615470e79c76ef82568a26cded33a617e30e9be131478d515e89e05cc6d40ce3839f24ba38436f8827a2b1bbfbfd8be5e0c", 0xb0}, {&(0x7f0000001d40)="92b1541834fc92f991d2c4c3dcf852efffa57d957412112b2d69f74a40ff046a2e743c5b9ab798a2a0f9b020fe9838abe840a90f116b6d1f", 0x38}, {&(0x7f0000001d80)="90ecd0d0a58de794d16f793f95ea9b5cceb1e1a37d16af006b5e7266096d93ce1ba7717c4ba056156c3c0fb13b7b7cd2ea0c0749ebe1046f49a4b95122312f04269fc63b69899a7b3e1de6f5f9057e3cb24c801ffd88b57b6846d4332a3a99d74792c22495738c71bc58232db4f2f0c326c859978095f978f9193c20237661712afb3586379702d8533391c382dc5c76399f4d334216", 0x96}], 0x6, &(0x7f0000002940)=[@rights={{0x1c, 0x1, 0x1, [r28, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x128, 0x4000040}}], 0x5, 0x20004000) 9.467764538s ago: executing program 1 (id=1148): io_uring_setup(0x497c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000061d000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="b90e0300000f320f01c83e420f30c44158c21bf1c4c305686d685e640fc72f8f29d890dd66b82f008ee0ab440f73d0f2"}], 0x0, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) 8.177521858s ago: executing program 3 (id=1152): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f00000016c0)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) creat(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f000000abc0)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000008840)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r1, 0x0, r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x85, 0x1}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 7.863410779s ago: executing program 1 (id=1153): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc2042, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) brk(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 6.700432696s ago: executing program 1 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80080003000000003a"], 0x24}, 0x1, 0x5502000000000000}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x82e6e000) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040701700ff00000000000109022400010000000009040000020300000009210000014122050009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x4e23, 0xfffffffe, @empty}}, 0x0, 0x0, 0x15, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf3b9ad5bd35cd0507c7988d130000000600"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x0, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289504becf7542da0bc21470e44122569da5a022ac9bdfc0dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d34810acc5f700"}, 0xd8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2, 0x810, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={0x0, 0x12c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 6.125421151s ago: executing program 3 (id=1156): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0xc2042, 0x4) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) brk(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000003c0)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5.720791644s ago: executing program 3 (id=1158): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open$dir(&(0x7f0000002340)='./file1\x00', 0x6d65c0, 0x100) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8014) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="1200000012", 0x5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000005c0)) close_range(r1, 0xffffffffffffffff, 0x0) 5.019923501s ago: executing program 4 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019000000290008"], 0x44}}, 0x0) 3.995093268s ago: executing program 4 (id=1161): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) (async, rerun: 64) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x3, 0x10000) (rerun: 64) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x1c, 0x0, 0x9, 0x0, 0x0, &(0x7f00000000c0)}) (async) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "910000000000006f00"}]}}}}}}}, 0x0) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) migrate_pages(0x0, 0x4, &(0x7f0000000040)=0x200000007f, &(0x7f0000000300)=0xa) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x0, 0x3, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wlan0\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) memfd_create(&(0x7f0000000240)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000004c0)={0x1, 0x0, '\x00', {0x0, @bt={0x6, 0xfffffffd, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x9, 0xfffffff7, 0x1054, 0x1ff, 0x5, 0x7fffffff, 0x2, 0x7, 0x27, {0x2f, 0xb}, 0x8, 0x9}}}) (async) mmap(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x2000002, 0x4000932, 0xffffffffffffffff, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000002fc0)=[{&(0x7f00000000c0)="14bf844d529717198afe147d89ae6b1cbc70c9e62941cd46e859", 0x1a}], 0x1) (async) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x2, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff}) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x309}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 3.468217459s ago: executing program 4 (id=1162): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000580), 0xa7c, r2}, 0x38) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x29, 0x15, &(0x7f0000000100), 0x3d) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="3b12feb666ca6ec151de7fbe50b28a17217975227018af772b45155da1570c24d96815c605c84ba4a3f9961b27ca5a02ef78f8fb7795c03ba15a18475fbd760100c3acbd388d2c43f88cbe01da5c03bbe2", 0x51, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r6, 0x15, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}]}, 0x34}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.319815274s ago: executing program 1 (id=1163): r0 = socket(0x2, 0x3, 0x67) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="48000000150081fb7042ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c49388a562af5745e17b8c119418f03000000d6e74703c48f93b8ecf6d65b223d", 0x48}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc080}, 0x4800) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b4ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, &(0x7f0000000ac0)='\x00\x00US', 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 3.022078544s ago: executing program 1 (id=1164): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) open$dir(&(0x7f0000002340)='./file1\x00', 0x6d65c0, 0x100) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8014) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="1200000012", 0x5, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000005c0)) close_range(r1, 0xffffffffffffffff, 0x0) 1.196141547s ago: executing program 1 (id=1165): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000340)={0xb, @raw_data="5f7ce43137953926e9a69976999573e5d4f9cf2b34389b494413b72e8c93e50849051d59c08081a096e30bde73b7c3d72781983c55dc4e3499043f5ac5a405539da0b86a8fa146d2c130024f03686d3472110472092ec796ccdb1d6066ed87f4f1dbcd1806ddfb7e69ef7526b60a946bc8762bc7983f108d621f75e1cee42129759fcc14bf1160f3ec3998e75e099fbaef2994d117a5749a4937886c8a5292fef63c60501e398324884f48d157026a139ea0efcc34c6d5158b5c507ad1b6c2856b3d1a5e23f64836"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000001800)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401", @ANYRESHEX=r3], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001580)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000180)={0x0, 0xc, 0x41, {0x41, 0x3, "222d24b73a4487280c826c1d49e03bc1797a309c23684e16e9f9e6334d9dd172a8efee11d81d1c6de53f1d35dd411c03cea8651ba632d61688e950f647e8e9"}}, &(0x7f0000001440)={0x0, 0x3, 0xed, @string={0xed, 0x3, "023a78aa56c035425daed05507bbf62ff61d9b1dc6b21efa378770bd950992a52bcb4f91b7be7c8ccb489ec5cc7e8fb3727ce10cedbddd8f5b73f83c1a835c49507c05ebf5c61cf19d24bf9e6a150237ae312fd6b1cd9446d64bc57ef844a2a133cbc6d20845e46077c5078292fa21c9c29f8b7afbbb3a2cd0ea396ef5e4926afed922755b08a592163f30ad9e02130a9678b52fa0be8f6a622b3468995e13f506d0ba1f1f352b6934bc2458e8249c273dbe60c3c67367626ef752b378c700bd664ad6f223b9d720283018979a7eff88d620839289f005356a2faad6f794fc2d4ce7c9b77ab3ac1edcf916"}}}, &(0x7f0000001780)={0x44, &(0x7f0000000280)={0x20, 0xd, 0xb8, "57841ca5648ee2737c7c28c1cf3984b7f37f1615eb14dfaddfb0f156e65e39d63537c383e09ed1d14093e3ad716cc925367f77059d1a91d1be830fba3c7fde8a473ed2e3ef23188c670ef0ae2182d947026117f0640a9a01aaf2e44317323b54b81593d3cc3414b8096828608742b6833590d06167651525765f88328aeb2a6ab4e256a07d1b1f2b21ffe95c57ea6abc79ee1f408cf21fbb842fb30c14cdea45289484d93a5e6eecbd4c46080934a6ff30547b6691b669e1"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001540)={0x0, 0x8, 0x1, 0x9c}, &(0x7f0000001640)={0x20, 0x81, 0x1, '\r'}, &(0x7f0000001680)={0x20, 0x82, 0x1, 'P'}, &(0x7f00000016c0)={0x20, 0x83, 0x1, 'O'}, &(0x7f0000001700)={0x20, 0x84, 0x4, "469e38ca"}, &(0x7f0000001740)={0x20, 0x85, 0x3, "bce7f6"}}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000001140)=ANY=[], 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newrule={0x38, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x14}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'pim6reg0\x00'}]}, 0x38}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfb, 0x1e3400) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x980001, 0x10000}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0x27, 0x203) 1.141893209s ago: executing program 4 (id=1166): r0 = socket(0x2b, 0x1, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 936.066884ms ago: executing program 4 (id=1167): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0, 0x3, 0x0, 0x1}) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r5 = dup(r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x1}, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0xc048aeca, &(0x7f0000000080)=ANY=[]) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r11, @ANYBLOB], 0x58}}, 0x0) 0s ago: executing program 4 (id=1168): r0 = io_uring_setup(0x497c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12014c088cc2f710ab19001018010102030109021200010407100309042602000e010002"], &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0ef85d36dbbea7f6100000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="00000000000000b70800000000e7ddd9eca1657a1fd5a89e2b60e9d9cc0d605501b7ffa604427088e81dd6c3ce4f05176505909d1879b7b4b6d7d5632b6513c911b8ca4bfb9741707282191244229abcb8655a832c84f254e5353467d7c812e183b515b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5120, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x2, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x401) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0xc00, 0x0) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000080), 0x0, r8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) recvmsg(r5, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r9, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001380)="6799d0", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="e9", 0x1}], 0x1}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : USB disconnect, device number 41 [ 476.693056][ T9906] udevd[9906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.715030][ T5289] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 476.941145][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.962617][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.013463][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.056098][ T5289] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 477.066531][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.093590][ T5289] usb 2-1: config 0 descriptor?? [ 477.363638][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 478.574270][T10483] ebt_among: src integrity fail: 100 [ 479.132659][ T5289] usbhid 2-1:0.0: can't add hid device: -71 [ 479.190564][ T5289] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 479.217340][ T5289] usb 2-1: USB disconnect, device number 39 [ 479.631471][T10494] netlink: 'syz.1.893': attribute type 4 has an invalid length. [ 479.788683][T10496] netlink: 'syz.1.893': attribute type 17 has an invalid length. [ 479.984161][T10497] program syz.3.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.158572][ T1189] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 480.411864][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.442673][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.491419][ T1189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.552445][ T1189] usb 5-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 480.589521][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.615759][ T1189] usb 5-1: config 0 descriptor?? [ 480.860510][T10516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 481.289262][ T1189] kye 0003:0458:5005.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 481.359089][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.413701][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.466367][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.499382][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.520994][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.577552][T10523] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 481.580898][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.771748][ T1189] kye 0003:0458:5005.001B: unknown main item tag 0x0 [ 481.884285][ T1189] kye 0003:0458:5005.001B: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.4-1/input0 [ 481.958593][ T1189] kye 0003:0458:5005.001B: tablet-enabling feature report not found [ 481.966662][ T1189] kye 0003:0458:5005.001B: tablet enabling failed [ 481.974503][T10528] ebt_among: src integrity fail: 100 [ 482.059226][ T1189] usb 5-1: USB disconnect, device number 39 [ 482.798637][T10540] netlink: 36 bytes leftover after parsing attributes in process `syz.1.906'. [ 483.128543][ T1189] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 483.292022][T10548] program syz.3.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.339533][ T1189] usb 2-1: Using ep0 maxpacket: 32 [ 483.412877][ T1189] usb 2-1: config index 0 descriptor too short (expected 251, got 9) [ 483.444070][ T1189] usb 2-1: config 254 has no interfaces? [ 483.467485][ T1189] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0142, bcdDevice=50.fb [ 483.498334][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.521568][ T1189] usb 2-1: Product: syz [ 483.525789][ T1189] usb 2-1: Manufacturer: syz [ 483.543059][ T1189] usb 2-1: SerialNumber: syz [ 483.812641][T10553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.909'. [ 483.833214][T10553] netlink: 72 bytes leftover after parsing attributes in process `syz.4.909'. [ 483.879355][T10553] Cannot find add_set index 0 as target [ 483.914247][ T1189] usb 2-1: USB disconnect, device number 40 [ 484.001183][T10555] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 484.181283][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 485.019210][ T6017] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 485.026827][T10581] binder: 10577:10581 ioctl c0306201 20000380 returned -14 [ 485.313402][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 485.381734][ T6017] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 485.443085][ T6017] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 485.448932][T10586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.920'. [ 485.481348][T10586] netlink: 12 bytes leftover after parsing attributes in process `syz.1.920'. [ 485.487331][ T6017] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 485.538706][T10586] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 485.542379][ T6017] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 485.604388][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.627818][ T6017] usb 3-1: Product: syz [ 485.669793][ T6017] usb 3-1: Manufacturer: syz [ 485.674462][ T6017] usb 3-1: SerialNumber: syz [ 485.720817][ T6017] usb 3-1: config 0 descriptor?? [ 485.771998][ T6017] usb 3-1: NFC: Unable to get FW version [ 485.798964][ T6017] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 485.996573][T10593] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 486.028794][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.924'. [ 486.091244][ T48] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 486.114734][ T48] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 486.141406][ T48] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 486.187832][T10596] program syz.4.923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.805774][T10604] binder: 10602:10604 ioctl c0306201 20000380 returned -14 [ 487.333864][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 487.663502][ T48] usb 3-1: USB disconnect, device number 51 [ 487.836955][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 488.102762][T10626] binder: 10622:10626 ioctl c0306201 20000380 returned -14 [ 488.279253][ T48] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 488.508669][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 488.525597][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.564308][ T48] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 488.583745][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.602018][ T48] usb 3-1: Product: syz [ 488.613021][ T48] usb 3-1: Manufacturer: syz [ 488.640415][ T48] usb 3-1: SerialNumber: syz [ 488.658175][ T48] usb 3-1: config 0 descriptor?? [ 488.885576][ T48] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 488.920891][ T48] usb 3-1: No valid video chain found. [ 489.015642][ T48] usb 3-1: USB disconnect, device number 52 [ 489.321363][T10646] program syz.2.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.558596][ T48] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 489.748683][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 489.761131][ T48] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.785564][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.796705][ T48] usb 2-1: Product: syz [ 489.806976][ T48] usb 2-1: Manufacturer: syz [ 489.814934][ T48] usb 2-1: SerialNumber: syz [ 489.834801][ T48] usb 2-1: config 0 descriptor?? [ 490.062884][ T48] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 491.848536][ T5288] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 492.029292][ T5288] usb 3-1: device descriptor read/64, error -71 [ 492.150213][ T48] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 492.186345][ T48] usb 2-1: USB disconnect, device number 41 [ 492.325220][ T5288] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 492.498664][ T5288] usb 3-1: device descriptor read/64, error -71 [ 492.629733][ T5288] usb usb3-port1: attempt power cycle [ 493.078798][ T5288] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 493.138554][ T5288] usb 3-1: device descriptor read/8, error -71 [ 493.406264][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.438786][ T5288] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 493.460006][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.515587][ T5288] usb 3-1: device descriptor read/8, error -71 [ 493.670427][ T5288] usb usb3-port1: unable to enumerate USB device [ 493.704240][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.742157][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.965473][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.004099][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.194920][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.236838][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.865401][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 494.895638][ T80] bridge_slave_1: left allmulticast mode [ 494.920100][ T80] bridge_slave_1: left promiscuous mode [ 494.930510][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.970705][ T80] bridge_slave_0: left allmulticast mode [ 494.991976][ T80] bridge_slave_0: left promiscuous mode [ 495.019895][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.457391][T10680] program syz.2.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.471172][ T9569] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 495.487520][ T9569] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 495.500235][ T9569] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 495.509384][ T9569] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 495.534590][ T9569] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 495.542221][ T9569] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 496.418759][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 496.418784][ T29] audit: type=1326 audit(1726342325.583:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10697 comm="syz.2.950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b63b7def9 code=0x0 [ 496.810454][ T5288] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 497.102785][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 497.138319][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 497.161430][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.175050][ T5288] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.184248][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.203488][ T5288] usb 3-1: config 0 descriptor?? [ 497.209453][T10704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 497.386154][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.409169][ T59] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 497.419603][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.450371][ T80] bond0 (unregistering): Released all slaves [ 497.648482][ T59] usb 4-1: Invalid ep0 maxpacket: 64 [ 497.658781][ T55] Bluetooth: hci2: command tx timeout [ 497.767431][ T5288] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 497.815081][ T5288] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 497.837718][ T5288] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 497.859555][ T59] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 497.899673][ T5288] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 498.058768][ T59] usb 4-1: Invalid ep0 maxpacket: 64 [ 498.065086][ T59] usb usb4-port1: attempt power cycle [ 498.337745][ T80] hsr_slave_0: left promiscuous mode [ 498.369783][ T5288] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 498.378903][ T80] hsr_slave_1: left promiscuous mode [ 498.412809][ T80] batman_adv: batadv0: Removing interface: team0 [ 498.425362][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.433938][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.448223][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.470878][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.488653][ T59] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 498.539362][ T59] usb 4-1: Invalid ep0 maxpacket: 64 [ 498.546157][ T80] veth1_macvtap: left promiscuous mode [ 498.552736][ T80] veth0_macvtap: left promiscuous mode [ 498.559431][ T80] veth1_vlan: left promiscuous mode [ 498.565034][ T80] veth0_vlan: left promiscuous mode [ 498.633174][ T5288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.666717][ T5288] usb 5-1: config 0 has no interfaces? [ 498.689756][ T5288] usb 5-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 498.720637][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.729537][ T59] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 498.759668][ T59] usb 4-1: Invalid ep0 maxpacket: 64 [ 498.759869][ T5288] usb 5-1: config 0 descriptor?? [ 498.779746][ T59] usb usb4-port1: unable to enumerate USB device [ 498.995704][T10713] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 499.002292][T10713] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 499.081124][T10713] vhci_hcd vhci_hcd.0: Device attached [ 499.083365][T10727] sctp: [Deprecated]: syz.4.952 (pid 10727) Use of int in max_burst socket option deprecated. [ 499.083365][T10727] Use struct sctp_assoc_value instead [ 499.122254][T10725] vhci_hcd: connection closed [ 499.123419][ T5288] usb 5-1: USB disconnect, device number 40 [ 499.157710][ T9858] vhci_hcd: stop threads [ 499.187347][ T9858] vhci_hcd: release socket [ 499.205628][ T9858] vhci_hcd: disconnect device [ 499.220745][ T59] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 499.739029][ T55] Bluetooth: hci2: command tx timeout [ 500.315324][ T5286] usb 3-1: USB disconnect, device number 57 [ 500.505041][ T80] team0 (unregistering): Port device team_slave_1 removed [ 500.844449][ T80] team0 (unregistering): Port device team_slave_0 removed [ 500.942467][T10752] program syz.3.958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.819956][ T55] Bluetooth: hci2: command tx timeout [ 501.837724][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.845694][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.462385][ T9569] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 502.484286][ T9569] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 502.497477][ T9569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 502.510447][ T9569] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 502.521923][ T9569] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 502.570148][ T9569] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 503.599265][T10689] chnl_net:caif_netlink_parms(): no params data found [ 503.872889][T10805] program syz.4.969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.898726][ T9569] Bluetooth: hci2: command tx timeout [ 503.918679][ T48] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 503.949037][ T5288] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 504.141738][ T48] usb 4-1: too many configurations: 148, using maximum allowed: 8 [ 504.174394][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.186794][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.218463][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.230470][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.248701][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.264886][ T5288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.279364][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.296285][ T5288] usb 3-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 504.306101][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.327291][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.335420][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.336832][T10689] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.355821][ T5288] usb 3-1: config 0 descriptor?? [ 504.369841][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.418878][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.437460][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.448784][T10689] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.461221][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.473798][T10689] bridge_slave_0: entered allmulticast mode [ 504.482147][T10689] bridge_slave_0: entered promiscuous mode [ 504.489732][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.519257][T10689] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.527116][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.540735][T10689] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.555690][T10689] bridge_slave_1: entered allmulticast mode [ 504.563633][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.586864][T10689] bridge_slave_1: entered promiscuous mode [ 504.593133][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.629439][ T48] usb 4-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 504.661416][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.709444][ T9569] Bluetooth: hci7: command tx timeout [ 504.722995][ T48] usb 4-1: New USB device found, idVendor=856b, idProduct=0099, bcdDevice= 0.00 [ 504.733289][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.816216][ T5288] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 504.827670][ T5288] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 504.835267][ T5288] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 504.842741][ T5288] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 504.850821][ T5288] elecom 0003:056E:00FD.001E: unknown main item tag 0x0 [ 504.862220][ T5288] elecom 0003:056E:00FD.001E: hidraw0: USB HID v0.00 Device [HID 056e:00fd] on usb-dummy_hcd.2-1/input0 [ 504.935576][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.033006][T10766] chnl_net:caif_netlink_parms(): no params data found [ 505.111912][ T5288] usb 3-1: USB disconnect, device number 58 [ 505.244462][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.351525][T10689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.431780][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.485427][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 505.607825][T10689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.877809][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.972594][T10831] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 506.055134][T10689] team0: Port device team_slave_0 added [ 506.129903][T10689] team0: Port device team_slave_1 added [ 506.165063][T10836] netlink: 56 bytes leftover after parsing attributes in process `syz.2.974'. [ 506.475725][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.496628][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.534901][T10766] bridge_slave_0: entered allmulticast mode [ 506.567904][T10766] bridge_slave_0: entered promiscuous mode [ 506.597206][T10689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.622207][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.698758][T10689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.720927][T10689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.734739][ T48] usb 4-1: string descriptor 0 read error: -71 [ 506.755886][T10689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.787950][ T9569] Bluetooth: hci7: command tx timeout [ 506.796827][ T48] usb 4-1: USB disconnect, device number 46 [ 506.821871][T10689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.947029][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.957888][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.967945][T10766] bridge_slave_1: entered allmulticast mode [ 507.010312][T10766] bridge_slave_1: entered promiscuous mode [ 507.285318][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.380677][T10689] hsr_slave_0: entered promiscuous mode [ 507.416022][T10689] hsr_slave_1: entered promiscuous mode [ 507.465847][T10689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 507.486095][T10689] Cannot create hsr debugfs directory [ 507.514509][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.782522][ T80] bridge_slave_1: left allmulticast mode [ 507.813721][ T80] bridge_slave_1: left promiscuous mode [ 507.823956][T10860] program syz.3.979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.836578][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.861481][ T80] bridge_slave_0: left allmulticast mode [ 507.882324][ T80] bridge_slave_0: left promiscuous mode [ 507.895735][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.859228][ T9569] Bluetooth: hci7: command tx timeout [ 509.106413][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.169055][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.178898][T10843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 509.178962][ T9569] Bluetooth: hci0: command 0x0c1a tx timeout [ 509.203595][ T80] bond0 (unregistering): Released all slaves [ 509.208864][T10843] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 509.274352][T10766] team0: Port device team_slave_0 added [ 509.401067][T10766] team0: Port device team_slave_1 added [ 509.578601][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.594576][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.662168][T10843] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 509.680025][T10843] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 509.688635][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.699696][T10843] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 509.715285][T10843] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 509.726194][T10843] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 509.732568][T10843] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 509.743033][T10843] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 509.754071][T10843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 509.760470][T10843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 509.778100][T10843] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 509.814305][T10843] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 509.834331][T10843] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 509.843694][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.851907][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.882790][T10843] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 509.896422][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.295948][ T80] hsr_slave_0: left promiscuous mode [ 510.353314][ T80] hsr_slave_1: left promiscuous mode [ 510.370144][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.392042][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.417960][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.427379][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.474456][ T80] veth1_macvtap: left promiscuous mode [ 510.481585][ T80] veth0_macvtap: left promiscuous mode [ 510.487603][ T80] veth1_vlan: left promiscuous mode [ 510.493125][ T80] veth0_vlan: left promiscuous mode [ 511.258577][ T9569] Bluetooth: hci0: command 0x0c1a tx timeout [ 511.738645][ T9569] Bluetooth: hci6: command 0x0c1a tx timeout [ 511.738995][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 511.821052][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 511.821191][ T9569] Bluetooth: hci2: command 0x0c1a tx timeout [ 512.302998][ T80] team0 (unregistering): Port device team_slave_1 removed [ 512.508293][ T80] team0 (unregistering): Port device team_slave_0 removed [ 513.338601][ T9569] Bluetooth: hci0: command 0x0c1a tx timeout [ 513.827000][ T9569] Bluetooth: hci6: command 0x0c1a tx timeout [ 513.828552][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 513.898636][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.898832][ T9569] Bluetooth: hci7: command 0x0c1a tx timeout [ 514.165493][T10879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.983'. [ 514.525062][T10766] hsr_slave_0: entered promiscuous mode [ 514.560154][T10766] hsr_slave_1: entered promiscuous mode [ 514.708657][T10766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.716345][T10766] Cannot create hsr debugfs directory [ 514.898567][ T59] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 515.099717][ T5290] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 515.121300][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.190464][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.272996][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 515.367421][ T59] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 515.381867][ T5290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 515.397810][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 515.404868][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.470111][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.472100][ T59] usb 3-1: config 0 descriptor?? [ 515.506817][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 515.568443][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 515.600005][ T5290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 515.614314][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 515.646400][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.676853][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 515.699914][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 515.769222][ T5290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 515.798894][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 515.833690][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.871561][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 515.899347][ T9569] Bluetooth: hci5: command 0x0c1a tx timeout [ 515.900091][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 515.928538][ T5290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 515.978702][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 515.988278][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 515.994761][ T5290] usb 5-1: string descriptor 0 read error: -22 [ 515.994781][ T55] Bluetooth: hci7: command 0x0c1a tx timeout [ 516.010661][T10915] program syz.3.990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.020066][ T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 516.033166][ T5290] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 516.088804][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.110248][ T59] usb 3-1: USB disconnect, device number 59 [ 516.208607][ T5290] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 516.560957][T10924] netlink: 100 bytes leftover after parsing attributes in process `syz.3.992'. [ 516.584541][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.697196][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.878876][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.944699][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.122702][T10689] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.181828][T10689] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.270010][T10689] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.308902][T10689] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.902318][T10689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.022402][T10766] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.086900][T10689] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.115525][T10766] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.224762][T10766] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.279215][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.286410][ T9859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.336766][T10766] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.387084][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.394387][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.415592][ T6017] usb 5-1: USB disconnect, device number 41 [ 518.793012][T10952] sg_read: process 172 (syz.4.996) changed security contexts after opening file descriptor, this is not allowed. [ 519.216464][T10689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.352560][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.495419][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.646768][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 519.660601][T10970] FAULT_INJECTION: forcing a failure. [ 519.660601][T10970] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 519.678600][T10970] CPU: 1 UID: 0 PID: 10970 Comm: syz.3.999 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 519.689844][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 519.699911][T10970] Call Trace: [ 519.703218][T10970] [ 519.706171][T10970] dump_stack_lvl+0x241/0x360 [ 519.710897][T10970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.716130][T10970] ? __pfx__printk+0x10/0x10 [ 519.720774][T10970] ? __pfx_lock_release+0x10/0x10 [ 519.725840][T10970] should_fail_ex+0x3b0/0x4e0 [ 519.730533][T10970] _copy_from_user+0x2f/0xe0 [ 519.735139][T10970] copy_msghdr_from_user+0xae/0x680 [ 519.740373][T10970] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 519.746198][T10970] __sys_sendmsg+0x23d/0x3a0 [ 519.750798][T10970] ? __pfx___sys_sendmsg+0x10/0x10 [ 519.755914][T10970] ? vfs_write+0x7c4/0xc90 [ 519.760396][T10970] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.766832][T10970] ? do_syscall_64+0x100/0x230 [ 519.771702][T10970] ? do_syscall_64+0xb6/0x230 [ 519.776391][T10970] do_syscall_64+0xf3/0x230 [ 519.780991][T10970] ? clear_bhb_loop+0x35/0x90 [ 519.785675][T10970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.791579][T10970] RIP: 0033:0x7f4511d7def9 [ 519.795995][T10970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.815616][T10970] RSP: 002b:00007f4512af1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.824063][T10970] RAX: ffffffffffffffda RBX: 00007f4511f36058 RCX: 00007f4511d7def9 [ 519.832088][T10970] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 519.840070][T10970] RBP: 00007f4512af1090 R08: 0000000000000000 R09: 0000000000000000 [ 519.848039][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.856006][T10970] R13: 0000000000000000 R14: 00007f4511f36058 R15: 00007f451205fa28 [ 519.863989][T10970] [ 520.004988][T10689] veth0_vlan: entered promiscuous mode [ 520.194462][ T9859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.312577][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.319762][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.364601][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.371896][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.584176][ T9859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.806673][ T9859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.845121][T10689] veth1_vlan: entered promiscuous mode [ 520.956503][ T9859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.204012][T10982] ebt_among: src integrity fail: 100 [ 521.287723][ T9569] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 521.298317][ T9569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 521.306522][ T9569] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 521.332746][ T9569] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 521.342313][ T9569] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 521.349870][ T9569] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 521.716107][T10689] veth0_macvtap: entered promiscuous mode [ 521.913560][ T9859] bridge_slave_1: left allmulticast mode [ 521.920469][ T9859] bridge_slave_1: left promiscuous mode [ 521.936969][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.964305][ T9859] bridge_slave_0: left allmulticast mode [ 521.980113][ T9859] bridge_slave_0: left promiscuous mode [ 521.998684][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.428804][ T55] Bluetooth: hci3: command tx timeout [ 523.600649][ T9859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.621591][ T9859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.719306][ T9859] bond0 (unregistering): Released all slaves [ 523.792006][T10689] veth1_macvtap: entered promiscuous mode [ 523.855687][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.061444][T10997] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 524.302222][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.345792][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.394951][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.448194][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.488739][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.508957][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.523468][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.538022][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.576124][T10689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.781115][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.818647][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.845650][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.875386][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.904939][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.965148][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.992811][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.022257][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.047050][T10689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.066656][T10689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.091984][T10689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.144609][ T9859] hsr_slave_0: left promiscuous mode [ 525.179942][ T9859] hsr_slave_1: left promiscuous mode [ 525.202016][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.228644][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.243415][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.251163][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.290459][ T9859] veth1_macvtap: left promiscuous mode [ 525.296024][ T9859] veth0_macvtap: left promiscuous mode [ 525.302223][ T9859] veth1_vlan: left promiscuous mode [ 525.318661][ T9859] veth0_vlan: left promiscuous mode [ 525.508948][ T55] Bluetooth: hci3: command tx timeout [ 527.409133][ T9859] team0 (unregistering): Port device team_slave_1 removed [ 527.549065][ T9859] team0 (unregistering): Port device team_slave_0 removed [ 527.585326][ T55] Bluetooth: hci3: command tx timeout [ 528.841811][T10689] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.877898][T10689] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.888901][T10689] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.928971][T10689] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.421599][T10766] veth0_vlan: entered promiscuous mode [ 529.575702][T10766] veth1_vlan: entered promiscuous mode [ 529.658669][ T55] Bluetooth: hci3: command tx timeout [ 529.673895][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 529.790556][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.827040][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.018685][T10984] chnl_net:caif_netlink_parms(): no params data found [ 530.154332][T10766] veth0_macvtap: entered promiscuous mode [ 530.435440][ T9859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.528570][ T4018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.536544][ T4018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.566116][T10766] veth1_macvtap: entered promiscuous mode [ 530.632531][T11074] FAULT_INJECTION: forcing a failure. [ 530.632531][T11074] name failslab, interval 1, probability 0, space 0, times 0 [ 530.650070][ T9859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.662258][T11074] CPU: 1 UID: 0 PID: 11074 Comm: syz.4.1013 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 530.673081][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 530.683184][T11074] Call Trace: [ 530.686501][T11074] [ 530.689550][T11074] dump_stack_lvl+0x241/0x360 [ 530.694288][T11074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.699553][T11074] ? __pfx__printk+0x10/0x10 [ 530.704272][T11074] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 530.710307][T11074] ? __pfx___might_resched+0x10/0x10 [ 530.715679][T11074] should_fail_ex+0x3b0/0x4e0 [ 530.720414][T11074] should_failslab+0xac/0x100 [ 530.725168][T11074] ? __alloc_skb+0x1c3/0x440 [ 530.729813][T11074] kmem_cache_alloc_node_noprof+0x71/0x320 [ 530.735669][T11074] __alloc_skb+0x1c3/0x440 [ 530.740133][T11074] ? __pfx___alloc_skb+0x10/0x10 [ 530.745114][T11074] ? netlink_autobind+0xd6/0x2f0 [ 530.750092][T11074] ? netlink_autobind+0x2b0/0x2f0 [ 530.755305][T11074] netlink_sendmsg+0x638/0xcb0 [ 530.760146][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.765491][T11074] ? __import_iovec+0x536/0x820 [ 530.770394][T11074] ? aa_sock_msg_perm+0x91/0x160 [ 530.775397][T11074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 530.780734][T11074] ? security_socket_sendmsg+0x87/0xb0 [ 530.786341][T11074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.791664][T11074] __sock_sendmsg+0x221/0x270 [ 530.796397][T11074] ____sys_sendmsg+0x525/0x7d0 [ 530.801214][T11074] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.806559][T11074] __sys_sendmsg+0x2b0/0x3a0 [ 530.811196][T11074] ? __pfx___sys_sendmsg+0x10/0x10 [ 530.816347][T11074] ? vfs_write+0x7c4/0xc90 [ 530.820831][T11074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 530.827229][T11074] do_syscall_64+0xf3/0x230 [ 530.831771][T11074] ? clear_bhb_loop+0x35/0x90 [ 530.836492][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.842422][T11074] RIP: 0033:0x7f192ef7def9 [ 530.846869][T11074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.866512][T11074] RSP: 002b:00007f192fddd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.874980][T11074] RAX: ffffffffffffffda RBX: 00007f192f136058 RCX: 00007f192ef7def9 [ 530.882999][T11074] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 530.891013][T11074] RBP: 00007f192fddd090 R08: 0000000000000000 R09: 0000000000000000 [ 530.899025][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.907035][T11074] R13: 0000000000000000 R14: 00007f192f136058 R15: 00007f192f25fa28 [ 530.915065][T11074] [ 530.921284][ T9569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 530.933197][ T9569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 530.942692][ T9569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 530.952022][ T9569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 530.960485][ T9569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 530.968073][ T9569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 531.276666][ T9859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.342890][T11088] binder: 11084:11088 ioctl c0306201 20000380 returned -14 [ 531.741186][ T9859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.852078][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.910734][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.952663][T10984] bridge_slave_0: entered allmulticast mode [ 531.969983][T10984] bridge_slave_0: entered promiscuous mode [ 531.986327][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.005987][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.028947][T10984] bridge_slave_1: entered allmulticast mode [ 532.044933][T10984] bridge_slave_1: entered promiscuous mode [ 532.106121][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.136223][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.170608][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.188528][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.214692][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.238523][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.262813][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.288582][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.329670][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.491974][T11099] ebt_among: src integrity fail: 100 [ 532.522226][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.562696][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.796857][T10984] team0: Port device team_slave_0 added [ 532.851890][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.892640][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.921042][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.951686][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.972981][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.998624][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.018678][ T9569] Bluetooth: hci4: command tx timeout [ 533.030900][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.054685][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.073234][T10766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.085437][T10766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.100838][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.118652][T10766] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.127404][T10766] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.149155][T10766] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.158964][T10766] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.232585][T10984] team0: Port device team_slave_1 added [ 533.687326][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.778694][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.829729][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.986617][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.003009][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.065171][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.179199][ T9859] bridge_slave_1: left allmulticast mode [ 534.179230][ T9859] bridge_slave_1: left promiscuous mode [ 534.179430][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.187666][ T9859] bridge_slave_0: left allmulticast mode [ 534.187699][ T9859] bridge_slave_0: left promiscuous mode [ 534.187915][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.107045][ T9569] Bluetooth: hci4: command tx timeout [ 535.929069][ T9859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.962659][ T9859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.981107][ T9859] bond0 (unregistering): Released all slaves [ 536.081065][T11139] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 536.486148][T11159] program syz.4.1019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 536.523804][T10984] hsr_slave_0: entered promiscuous mode [ 536.561939][T10984] hsr_slave_1: entered promiscuous mode [ 536.599470][T10984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.631112][T10984] Cannot create hsr debugfs directory [ 536.983949][ T4018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.030492][ T4018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.178782][ T9569] Bluetooth: hci4: command tx timeout [ 537.667073][ T9859] hsr_slave_0: left promiscuous mode [ 537.674059][ T9859] hsr_slave_1: left promiscuous mode [ 537.690462][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.698096][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.711738][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.732433][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.804768][ T9859] veth1_macvtap: left promiscuous mode [ 537.826853][ T9859] veth0_macvtap: left promiscuous mode [ 537.847657][ T9859] veth1_vlan: left promiscuous mode [ 537.891885][ T9859] veth0_vlan: left promiscuous mode [ 539.259827][ T9569] Bluetooth: hci4: command tx timeout [ 539.369505][ T9859] team0 (unregistering): Port device team_slave_1 removed [ 539.484992][ T9859] team0 (unregistering): Port device team_slave_0 removed [ 540.618028][T11082] chnl_net:caif_netlink_parms(): no params data found [ 540.764362][T11199] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 540.829181][ T9858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.853958][ T9858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.459137][T11082] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.466623][T11082] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.499741][T11082] bridge_slave_0: entered allmulticast mode [ 541.513418][T11082] bridge_slave_0: entered promiscuous mode [ 541.544303][T11082] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.590396][T11082] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.607492][T11082] bridge_slave_1: entered allmulticast mode [ 541.621269][T11082] bridge_slave_1: entered promiscuous mode [ 541.649119][T11210] FAULT_INJECTION: forcing a failure. [ 541.649119][T11210] name failslab, interval 1, probability 0, space 0, times 0 [ 541.759411][T11210] CPU: 1 UID: 0 PID: 11210 Comm: syz.4.1028 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 541.770263][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 541.780364][T11210] Call Trace: [ 541.783722][T11210] [ 541.786657][T11210] dump_stack_lvl+0x241/0x360 [ 541.791349][T11210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 541.796643][T11210] ? __pfx__printk+0x10/0x10 [ 541.801239][T11210] ? __kmalloc_noprof+0xb0/0x400 [ 541.806201][T11210] ? __pfx___might_resched+0x10/0x10 [ 541.811508][T11210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.817634][T11210] should_fail_ex+0x3b0/0x4e0 [ 541.822360][T11210] ? copy_splice_read+0x18d/0xb60 [ 541.827384][T11210] should_failslab+0xac/0x100 [ 541.832070][T11210] ? copy_splice_read+0x18d/0xb60 [ 541.837092][T11210] __kmalloc_noprof+0xd8/0x400 [ 541.841873][T11210] copy_splice_read+0x18d/0xb60 [ 541.846727][T11210] ? __asan_memset+0x23/0x50 [ 541.851347][T11210] ? __pfx_copy_splice_read+0x10/0x10 [ 541.856744][T11210] ? __raw_spin_lock_init+0x45/0x100 [ 541.862055][T11210] ? alloc_pipe_info+0x370/0x4d0 [ 541.867000][T11210] splice_direct_to_actor+0x502/0xc90 [ 541.872387][T11210] ? __pfx_direct_splice_actor+0x10/0x10 [ 541.878029][T11210] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 541.883923][T11210] ? __fget_files+0x29/0x470 [ 541.888522][T11210] ? __pfx_lock_release+0x10/0x10 [ 541.893561][T11210] do_splice_direct+0x28c/0x3e0 [ 541.898509][T11210] ? __pfx_do_splice_direct+0x10/0x10 [ 541.904015][T11210] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 541.909929][T11210] ? security_file_permission+0x7f/0xa0 [ 541.915493][T11210] ? rw_verify_area+0x1d2/0x6b0 [ 541.920353][T11210] do_sendfile+0x56d/0xe20 [ 541.924793][T11210] ? __pfx_do_sendfile+0x10/0x10 [ 541.929746][T11210] __se_sys_sendfile64+0x17c/0x1e0 [ 541.934885][T11210] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 541.940552][T11210] ? do_syscall_64+0x100/0x230 [ 541.945329][T11210] ? do_syscall_64+0xb6/0x230 [ 541.950018][T11210] do_syscall_64+0xf3/0x230 [ 541.954528][T11210] ? clear_bhb_loop+0x35/0x90 [ 541.959233][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.965157][T11210] RIP: 0033:0x7f192ef7def9 [ 541.969576][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.989270][T11210] RSP: 002b:00007f192fdfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 541.997773][T11210] RAX: ffffffffffffffda RBX: 00007f192f135f80 RCX: 00007f192ef7def9 [ 542.005746][T11210] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 542.013726][T11210] RBP: 00007f192fdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 542.021700][T11210] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 542.029741][T11210] R13: 0000000000000000 R14: 00007f192f135f80 R15: 00007f192f25fa28 [ 542.037902][T11210] [ 542.201728][T11082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.521910][T11082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.681957][T11226] program syz.1.1030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 542.722509][T11082] team0: Port device team_slave_0 added [ 542.772337][T11082] team0: Port device team_slave_1 added [ 542.935857][T11082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.957775][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.041127][T11082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.163009][T11082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.175369][T11082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.210299][T11082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.237426][T11232] pim6reg: entered allmulticast mode [ 543.342580][T11082] hsr_slave_0: entered promiscuous mode [ 543.354452][T11082] hsr_slave_1: entered promiscuous mode [ 543.362877][T11082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.376848][T11082] Cannot create hsr debugfs directory [ 543.422578][T11225] pim6reg: left allmulticast mode [ 543.646100][T10984] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 543.779622][T10984] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 543.865382][T10984] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 543.936306][T10984] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.799114][T10984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.979360][T10984] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.049323][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.056488][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.097465][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.104683][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.228683][ T5288] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 545.282694][T11082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 545.369186][T11082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 545.388974][ T5288] usb 2-1: device descriptor read/64, error -71 [ 545.426431][T11082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 545.452668][T11082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 545.659779][ T5288] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 545.694875][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.848849][ T5288] usb 2-1: device descriptor read/64, error -71 [ 545.875490][T10984] veth0_vlan: entered promiscuous mode [ 545.923088][T10984] veth1_vlan: entered promiscuous mode [ 545.989081][ T5288] usb usb2-port1: attempt power cycle [ 546.117839][T10984] veth0_macvtap: entered promiscuous mode [ 546.173212][T10984] veth1_macvtap: entered promiscuous mode [ 546.206443][T11082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.283487][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.316337][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.346818][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.388221][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.390678][T11281] fuse: Bad value for 'fd' [ 546.409018][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.428521][ T5288] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 546.441649][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.455196][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.481824][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.498572][ T5288] usb 2-1: device descriptor read/8, error -71 [ 546.507089][T10984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.557714][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.576627][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.596945][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.617281][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.637779][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.657922][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.678351][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.702923][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.723084][T10984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 546.745855][T10984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.778643][ T5288] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 546.792893][T10984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.809995][ T5288] usb 2-1: device descriptor read/8, error -71 [ 546.834282][T10984] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.874905][T10984] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.904879][T10984] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.940934][T10984] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.949254][ T5288] usb usb2-port1: unable to enumerate USB device [ 546.999527][T11082] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.085825][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.093064][ T9859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.133755][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.141021][ T9859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.251328][ T4018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.311817][ T4018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.452470][ T9859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.490401][ T9859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.617247][T11082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.938180][T11082] veth0_vlan: entered promiscuous mode [ 548.018313][T11082] veth1_vlan: entered promiscuous mode [ 548.049823][ T1189] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 548.132247][T11082] veth0_macvtap: entered promiscuous mode [ 548.174346][T11082] veth1_macvtap: entered promiscuous mode [ 548.260793][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.278555][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.279933][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 548.308446][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.327838][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.348881][ T1189] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 548.376718][ T1189] usb 3-1: can't read configurations, error -61 [ 548.378244][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.437386][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.486855][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.521496][T11313] trusted_key: encrypted_key: master key parameter '' is invalid [ 548.540858][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.558950][ T1189] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 548.584281][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.599487][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.622874][T11082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.640346][T11314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1039'. [ 548.778422][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 548.796664][ T1189] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 548.813383][ T1189] usb 3-1: can't read configurations, error -61 [ 548.828701][ T1189] usb usb3-port1: attempt power cycle [ 549.240533][ T1189] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 549.291582][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 549.312108][T11321] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1040'. [ 549.325666][ T1189] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 549.346171][ T1189] usb 3-1: can't read configurations, error -61 [ 549.352411][T11321] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 549.360531][T11321] macsec1: entered allmulticast mode [ 549.373357][T11321] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 549.396077][T11321] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 549.414482][T11321] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 549.548575][ T1189] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 549.556361][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.590234][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.617866][ T1189] usb 3-1: Using ep0 maxpacket: 8 [ 549.636270][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.646984][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.657712][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.673384][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.684896][ T1189] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 549.708531][ T1189] usb 3-1: can't read configurations, error -61 [ 549.717501][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.747208][ T1189] usb usb3-port1: unable to enumerate USB device [ 549.754997][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.768070][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.785717][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.799499][T11082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.821614][T11082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.876709][T11082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.976884][T11082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.998582][T11082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.009736][T11338] ebt_among: src integrity fail: 100 [ 550.017684][T11082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.041632][T11082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.352838][ T9860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.388728][ T9860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.464144][ T9858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.492488][ T9858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.011721][T11351] binder: 11348:11351 ioctl c0306201 20000380 returned -14 [ 551.078698][ T59] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 551.358472][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 551.392387][ T59] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.437893][ T59] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 551.467918][ T59] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 551.506126][ T59] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 551.538569][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.551199][ T59] usb 2-1: Product: syz [ 551.576872][ T59] usb 2-1: Manufacturer: syz [ 551.586370][ T59] usb 2-1: SerialNumber: syz [ 551.993251][T11358] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1047'. [ 552.132015][T11360] syz.1.1044 (11360): drop_caches: 0 [ 552.248515][ T5237] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 552.478590][ T5237] usb 4-1: device descriptor read/64, error -71 [ 552.858767][ T5237] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 553.049024][ T5237] usb 4-1: device descriptor read/64, error -71 [ 553.230562][ T5237] usb usb4-port1: attempt power cycle [ 553.728749][ T5237] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 553.799738][ T5237] usb 4-1: device descriptor read/8, error -71 [ 553.883615][T11375] FAULT_INJECTION: forcing a failure. [ 553.883615][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 553.937605][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.2.1053 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 553.937846][ T59] usb 2-1: 0:2 : does not exist [ 553.948406][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 553.948443][T11375] Call Trace: [ 553.948456][T11375] [ 553.948468][T11375] dump_stack_lvl+0x241/0x360 [ 553.948505][T11375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.948531][T11375] ? __pfx__printk+0x10/0x10 [ 553.948559][T11375] ? ref_tracker_alloc+0x332/0x490 [ 553.948588][T11375] should_fail_ex+0x3b0/0x4e0 [ 553.948615][T11375] ? skb_clone+0x20c/0x390 [ 553.948645][T11375] should_failslab+0xac/0x100 [ 553.948683][T11375] ? skb_clone+0x20c/0x390 [ 553.948711][T11375] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 554.013182][T11375] skb_clone+0x20c/0x390 [ 554.017461][T11375] __netlink_deliver_tap+0x3cc/0x7c0 [ 554.022855][T11375] ? netlink_deliver_tap+0x2e/0x1b0 [ 554.028097][T11375] netlink_deliver_tap+0x19d/0x1b0 [ 554.033252][T11375] netlink_unicast+0x7c4/0x990 [ 554.038082][T11375] ? __pfx_netlink_unicast+0x10/0x10 [ 554.043430][T11375] ? __virt_addr_valid+0x183/0x530 [ 554.048585][T11375] ? __check_object_size+0x49c/0x900 [ 554.053907][T11375] ? bpf_lsm_netlink_send+0x9/0x10 [ 554.059047][T11375] netlink_sendmsg+0x8e4/0xcb0 [ 554.063847][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.069178][T11375] ? arch_stack_walk+0x16d/0x1b0 [ 554.074141][T11375] ? aa_sock_msg_perm+0x91/0x160 [ 554.079099][T11375] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 554.084427][T11375] ? security_socket_sendmsg+0x87/0xb0 [ 554.090038][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.095355][T11375] __sock_sendmsg+0x221/0x270 [ 554.100071][T11375] sock_sendmsg+0x134/0x200 [ 554.104608][T11375] ? __pfx_sock_sendmsg+0x10/0x10 [ 554.109667][T11375] ? splice_direct_to_actor+0x502/0xc90 [ 554.115234][T11375] ? do_splice_direct+0x28c/0x3e0 [ 554.120271][T11375] ? do_sendfile+0x56d/0xe20 [ 554.124880][T11375] ? __se_sys_sendfile64+0x17c/0x1e0 [ 554.130194][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.136448][T11375] ? iov_iter_bvec+0x4e/0x180 [ 554.141162][T11375] splice_to_socket+0xa13/0x10b0 [ 554.146230][T11375] ? __pfx_splice_to_socket+0x10/0x10 [ 554.151663][T11375] ? __pfx_splice_to_socket+0x10/0x10 [ 554.157052][T11375] direct_splice_actor+0x11e/0x220 [ 554.162186][T11375] splice_direct_to_actor+0x58e/0xc90 [ 554.167592][T11375] ? __pfx_direct_splice_actor+0x10/0x10 [ 554.173244][T11375] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 554.179155][T11375] ? __fget_files+0x29/0x470 [ 554.183766][T11375] ? __pfx_lock_release+0x10/0x10 [ 554.188814][T11375] do_splice_direct+0x28c/0x3e0 [ 554.193694][T11375] ? __pfx_do_splice_direct+0x10/0x10 [ 554.199084][T11375] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 554.204995][T11375] ? security_file_permission+0x7f/0xa0 [ 554.210567][T11375] ? rw_verify_area+0x1d2/0x6b0 [ 554.215612][T11375] do_sendfile+0x56d/0xe20 [ 554.220077][T11375] ? __pfx_do_sendfile+0x10/0x10 [ 554.225066][T11375] __se_sys_sendfile64+0x17c/0x1e0 [ 554.230217][T11375] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 554.235895][T11375] ? do_syscall_64+0x100/0x230 [ 554.240769][T11375] ? do_syscall_64+0xb6/0x230 [ 554.245471][T11375] do_syscall_64+0xf3/0x230 [ 554.249992][T11375] ? clear_bhb_loop+0x35/0x90 [ 554.254707][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.260705][T11375] RIP: 0033:0x7f26ae57def9 [ 554.265133][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.284782][T11375] RSP: 002b:00007f26af2c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 554.293239][T11375] RAX: ffffffffffffffda RBX: 00007f26ae735f80 RCX: 00007f26ae57def9 [ 554.301247][T11375] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 554.309437][T11375] RBP: 00007f26af2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 554.317462][T11375] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 554.325448][T11375] R13: 0000000000000000 R14: 00007f26ae735f80 R15: 00007f26ae85fa28 [ 554.333550][T11375] [ 554.418650][ T5237] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 554.462761][ T5237] usb 4-1: device descriptor read/8, error -71 [ 554.480621][ T59] usb 2-1: USB disconnect, device number 46 [ 554.619791][ T5237] usb usb4-port1: unable to enumerate USB device [ 554.880471][T11378] ebt_among: src integrity fail: 100 [ 555.325246][T11389] binder: 11383:11389 ioctl c0306201 20000380 returned -14 [ 555.768260][T11397] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.346680][T11403] netlink: 'syz.2.1062': attribute type 3 has an invalid length. [ 556.358530][ T48] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 556.426884][T11403] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1062'. [ 556.589021][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 556.599516][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.630539][ T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.668537][ T48] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 556.692693][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.721497][ T48] usb 4-1: config 0 descriptor?? [ 556.919155][T11416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.957586][T11415] binder: 11412:11415 ioctl c0306201 20000380 returned -14 [ 557.283509][ T48] lua 0003:1E7D:2C2E.001F: item fetching failed at offset 5/9 [ 557.305699][ T48] lua 0003:1E7D:2C2E.001F: parse failed [ 557.329322][ T48] lua 0003:1E7D:2C2E.001F: probe with driver lua failed with error -22 [ 557.624569][ T48] usb 4-1: USB disconnect, device number 51 [ 557.836386][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 557.959236][ T29] audit: type=1326 audit(1726342387.133:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11423 comm="syz.1.1069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f831037def9 code=0x0 [ 558.075931][T11429] netlink: 'syz.2.1070': attribute type 29 has an invalid length. [ 558.104521][T11429] netlink: 'syz.2.1070': attribute type 29 has an invalid length. [ 558.658512][ T5237] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 558.886627][ T5237] usb 4-1: config index 0 descriptor too short (expected 65535, got 36) [ 558.905411][ T5237] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 558.925415][ T5237] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 558.974855][ T5237] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 559.001542][ T5237] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 559.026291][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 559.069202][ T5237] usb 4-1: SerialNumber: syz [ 559.371011][T11434] ======================================================= [ 559.371011][T11434] WARNING: The mand mount option has been deprecated and [ 559.371011][T11434] and is ignored by this kernel. Remove the mand [ 559.371011][T11434] option from the mount to silence this warning. [ 559.371011][T11434] ======================================================= [ 559.437967][T11434] fuse: Bad value for 'fd' [ 559.795511][T11457] random: crng reseeded on system resumption [ 560.186173][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 561.038713][ T5237] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 561.260628][ T5237] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 561.291042][ T5237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.340697][ T5237] usb 3-1: config 0 descriptor?? [ 561.376557][ T59] usb 4-1: USB disconnect, device number 52 [ 561.761502][ T29] audit: type=1326 audit(1726342390.913:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 561.795629][ T29] audit: type=1326 audit(1726342390.963:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 561.888707][ T29] audit: type=1326 audit(1726342391.003:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 561.906814][ T5237] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 561.938564][ T59] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 561.966609][ T5237] [drm] Initialized udl on minor 2 [ 562.044122][T11479] ebt_among: src integrity fail: 100 [ 562.058598][ T29] audit: type=1326 audit(1726342391.003:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 562.179659][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 562.197151][ T59] usb 5-1: no configurations [ 562.205787][ T29] audit: type=1326 audit(1726342391.003:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 562.279772][ T59] usb 5-1: can't read configurations, error -22 [ 562.399197][T11486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.412105][ T29] audit: type=1326 audit(1726342391.003:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 562.498540][ T59] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 562.577662][ T5237] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.578480][ T29] audit: type=1326 audit(1726342391.003:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 562.662091][ T5237] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 562.739104][ T5288] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 562.748253][ T5288] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 562.761878][ T5237] usb 3-1: USB disconnect, device number 64 [ 562.764789][ T29] audit: type=1326 audit(1726342391.023:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 562.808542][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 562.865684][ T59] usb 5-1: no configurations [ 562.875287][ T59] usb 5-1: can't read configurations, error -22 [ 562.915065][ T59] usb usb5-port1: attempt power cycle [ 562.921581][ T29] audit: type=1326 audit(1726342391.023:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.049602][ T29] audit: type=1326 audit(1726342391.023:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.190982][ T29] audit: type=1326 audit(1726342391.033:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.289432][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.295800][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.308452][ T29] audit: type=1326 audit(1726342391.033:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.378477][ T29] audit: type=1326 audit(1726342391.033:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.398651][ T59] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 563.489189][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 563.495039][ T59] usb 5-1: no configurations [ 563.526014][ T29] audit: type=1326 audit(1726342391.033:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.528475][ T59] usb 5-1: can't read configurations, error -22 [ 563.633652][ T29] audit: type=1326 audit(1726342391.033:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.706269][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 563.716948][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 563.730826][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 563.744006][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 563.754523][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 563.764649][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 563.788604][ T59] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 563.837698][ T29] audit: type=1326 audit(1726342391.033:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 563.859214][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 563.870481][ T59] usb 5-1: no configurations [ 563.875127][ T59] usb 5-1: can't read configurations, error -22 [ 563.921458][ T59] usb usb5-port1: unable to enumerate USB device [ 564.041680][ T29] audit: type=1326 audit(1726342391.043:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 564.092430][ T9860] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.188199][ T29] audit: type=1326 audit(1726342391.253:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 564.248531][ T59] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 564.368781][ T29] audit: type=1326 audit(1726342391.253:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11469 comm="syz.3.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc6177def9 code=0x7ffc0000 [ 564.393296][ T9860] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.488564][ T1189] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 564.509499][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 564.536840][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 564.599230][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 564.681978][ T9860] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.693737][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 564.704762][ T1189] usb 2-1: too many configurations: 139, using maximum allowed: 8 [ 564.783372][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 564.822814][ T59] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 564.850636][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 564.955485][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.007446][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.038116][ T59] usb 3-1: Product: syz [ 565.048649][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.061050][ T59] usb 3-1: Manufacturer: syz [ 565.065688][ T59] usb 3-1: SerialNumber: syz [ 565.087562][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.117561][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.127642][ T59] usb 3-1: config 0 descriptor?? [ 565.179858][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.199403][ T9860] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.210380][ T1189] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.302361][T11502] chnl_net:caif_netlink_parms(): no params data found [ 565.335931][T11514] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 565.384383][ T59] adutux 3-1:0.0: Could not retrieve serial number [ 565.394454][ T1189] usb 2-1: string descriptor 0 read error: -71 [ 565.412259][ T59] adutux 3-1:0.0: probe with driver adutux failed with error -5 [ 565.420660][ T1189] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 565.450304][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.481149][T11515] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 565.481451][ T1189] usb 2-1: can't set config #1, error -71 [ 565.542000][ T1189] usb 2-1: USB disconnect, device number 47 [ 565.719460][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.749965][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.819235][ T9569] Bluetooth: hci6: command tx timeout [ 566.099903][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.129521][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.163405][T11502] bridge_slave_0: entered allmulticast mode [ 566.196352][T11502] bridge_slave_0: entered promiscuous mode [ 566.233951][T11526] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 566.282239][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.304930][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.342659][T11502] bridge_slave_1: entered allmulticast mode [ 566.403413][T11502] bridge_slave_1: entered promiscuous mode [ 566.561090][ T9860] bridge_slave_1: left allmulticast mode [ 566.579527][ T9860] bridge_slave_1: left promiscuous mode [ 566.595880][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.628205][ T9860] bridge_slave_0: left allmulticast mode [ 566.647740][ T9860] bridge_slave_0: left promiscuous mode [ 566.670128][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.988744][ T6017] usb 3-1: USB disconnect, device number 65 [ 567.492964][ T59] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 567.678227][ T59] usb 4-1: device descriptor read/64, error -71 [ 567.898611][ T9569] Bluetooth: hci6: command tx timeout [ 567.984857][ T59] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 568.149540][ T59] usb 4-1: device descriptor read/64, error -71 [ 568.289326][ T59] usb usb4-port1: attempt power cycle [ 568.363439][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.416133][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.435407][ T9860] bond0 (unregistering): Released all slaves [ 568.479596][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.538857][ T5290] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 568.543392][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.718572][ T59] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 568.786286][ T5290] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.789463][ T59] usb 4-1: device descriptor read/8, error -71 [ 568.808712][ T5290] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 568.879392][ T5290] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 568.948910][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.963266][ T5290] usb 5-1: config 0 descriptor?? [ 569.079852][ T59] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 569.083073][T11502] team0: Port device team_slave_0 added [ 569.124383][T11502] team0: Port device team_slave_1 added [ 569.159284][ T59] usb 4-1: device descriptor read/8, error -71 [ 569.183023][ T5290] usb 5-1: string descriptor 0 read error: -71 [ 569.222633][ T5290] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 569.250865][ T5290] usb 5-1: USB disconnect, device number 46 [ 569.300038][ T59] usb usb4-port1: unable to enumerate USB device [ 569.432255][T11571] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 569.459556][T11573] netlink: 'syz.1.1105': attribute type 29 has an invalid length. [ 569.538576][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.551869][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.654866][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.760192][T11581] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 569.909636][ T9860] hsr_slave_0: left promiscuous mode [ 569.978623][ T9569] Bluetooth: hci6: command tx timeout [ 570.107368][ T9860] hsr_slave_1: left promiscuous mode [ 570.170711][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.194245][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.290618][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.308052][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.368539][ T1189] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 570.394726][ T6017] IPVS: starting estimator thread 0... [ 570.447351][ T9860] veth1_macvtap: left promiscuous mode [ 570.466420][ T9860] veth0_macvtap: left promiscuous mode [ 570.492574][ T9860] veth1_vlan: left promiscuous mode [ 570.503211][T11598] IPVS: using max 17 ests per chain, 40800 per kthread [ 570.510375][ T9860] veth0_vlan: left promiscuous mode [ 570.580838][ T1189] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.641425][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 570.683687][ T1189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 570.714310][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 570.730261][ T1189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.772967][ T1189] usb 2-1: Product: syz [ 570.781853][ T1189] usb 2-1: Manufacturer: syz [ 570.786806][ T1189] usb 2-1: SerialNumber: syz [ 571.273751][T11607] FAULT_INJECTION: forcing a failure. [ 571.273751][T11607] name failslab, interval 1, probability 0, space 0, times 0 [ 571.311090][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.4.1113 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 571.321928][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 571.332028][T11607] Call Trace: [ 571.335330][T11607] [ 571.338274][T11607] dump_stack_lvl+0x241/0x360 [ 571.342980][T11607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.348193][T11607] ? __pfx__printk+0x10/0x10 [ 571.352804][T11607] ? ref_tracker_alloc+0x332/0x490 [ 571.357928][T11607] should_fail_ex+0x3b0/0x4e0 [ 571.362634][T11607] ? skb_clone+0x20c/0x390 [ 571.367065][T11607] should_failslab+0xac/0x100 [ 571.371772][T11607] ? skb_clone+0x20c/0x390 [ 571.376208][T11607] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 571.381600][T11607] skb_clone+0x20c/0x390 [ 571.385870][T11607] __netlink_deliver_tap+0x3cc/0x7c0 [ 571.391186][T11607] ? netlink_deliver_tap+0x2e/0x1b0 [ 571.396394][T11607] netlink_deliver_tap+0x19d/0x1b0 [ 571.401524][T11607] __netlink_sendskb+0x60/0xd0 [ 571.406340][T11607] netlink_dump+0x97d/0xd80 [ 571.410871][T11607] ? __pfx_netlink_dump+0x10/0x10 [ 571.415922][T11607] ? __asan_memset+0x23/0x50 [ 571.420534][T11607] ? genl_start+0x4a8/0x6d0 [ 571.425068][T11607] __netlink_dump_start+0x5a2/0x790 [ 571.430304][T11607] genl_rcv_msg+0x88c/0xec0 [ 571.434835][T11607] ? mark_lock+0x9a/0x350 [ 571.439202][T11607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.444251][T11607] ? __pfx_genl_start+0x10/0x10 [ 571.449117][T11607] ? __pfx_genl_dumpit+0x10/0x10 [ 571.454069][T11607] ? __pfx_genl_done+0x10/0x10 [ 571.458872][T11607] ? __pfx_lock_acquire+0x10/0x10 [ 571.463914][T11607] ? __pfx_batadv_hardif_neigh_dump+0x10/0x10 [ 571.470003][T11607] ? __pfx___might_resched+0x10/0x10 [ 571.475320][T11607] netlink_rcv_skb+0x1e3/0x430 [ 571.480104][T11607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 571.485319][T11607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 571.490637][T11607] ? __netlink_deliver_tap+0x77e/0x7c0 [ 571.496175][T11607] genl_rcv+0x28/0x40 [ 571.500179][T11607] netlink_unicast+0x7f6/0x990 [ 571.504977][T11607] ? __pfx_netlink_unicast+0x10/0x10 [ 571.510285][T11607] ? __virt_addr_valid+0x183/0x530 [ 571.515441][T11607] ? __check_object_size+0x49c/0x900 [ 571.520836][T11607] ? bpf_lsm_netlink_send+0x9/0x10 [ 571.525974][T11607] netlink_sendmsg+0x8e4/0xcb0 [ 571.530782][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.536089][T11607] ? arch_stack_walk+0x16d/0x1b0 [ 571.541053][T11607] ? aa_sock_msg_perm+0x91/0x160 [ 571.546028][T11607] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 571.551335][T11607] ? security_socket_sendmsg+0x87/0xb0 [ 571.556814][T11607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.562114][T11607] __sock_sendmsg+0x221/0x270 [ 571.566822][T11607] sock_sendmsg+0x134/0x200 [ 571.571364][T11607] ? __pfx_sock_sendmsg+0x10/0x10 [ 571.576425][T11607] ? splice_direct_to_actor+0x502/0xc90 [ 571.581990][T11607] ? do_splice_direct+0x28c/0x3e0 [ 571.587031][T11607] ? do_sendfile+0x56d/0xe20 [ 571.591643][T11607] ? __se_sys_sendfile64+0x17c/0x1e0 [ 571.596973][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.603087][T11607] ? iov_iter_bvec+0x4e/0x180 [ 571.607819][T11607] splice_to_socket+0xa13/0x10b0 [ 571.612810][T11607] ? __pfx_splice_to_socket+0x10/0x10 [ 571.618254][T11607] ? __pfx_splice_to_socket+0x10/0x10 [ 571.623646][T11607] direct_splice_actor+0x11e/0x220 [ 571.628783][T11607] splice_direct_to_actor+0x58e/0xc90 [ 571.634185][T11607] ? __pfx_direct_splice_actor+0x10/0x10 [ 571.639964][T11607] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 571.645877][T11607] ? __fget_files+0x29/0x470 [ 571.650488][T11607] ? __pfx_lock_release+0x10/0x10 [ 571.655583][T11607] do_splice_direct+0x28c/0x3e0 [ 571.660502][T11607] ? __pfx_do_splice_direct+0x10/0x10 [ 571.665904][T11607] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 571.671823][T11607] ? security_file_permission+0x7f/0xa0 [ 571.677420][T11607] ? rw_verify_area+0x1d2/0x6b0 [ 571.682292][T11607] do_sendfile+0x56d/0xe20 [ 571.686744][T11607] ? __pfx_do_sendfile+0x10/0x10 [ 571.691731][T11607] __se_sys_sendfile64+0x17c/0x1e0 [ 571.696868][T11607] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 571.702527][T11607] ? do_syscall_64+0x100/0x230 [ 571.707310][T11607] ? do_syscall_64+0xb6/0x230 [ 571.712093][T11607] do_syscall_64+0xf3/0x230 [ 571.716612][T11607] ? clear_bhb_loop+0x35/0x90 [ 571.721342][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.727255][T11607] RIP: 0033:0x7f192ef7def9 [ 571.731714][T11607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.751442][T11607] RSP: 002b:00007f192fdfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 571.760060][T11607] RAX: ffffffffffffffda RBX: 00007f192f135f80 RCX: 00007f192ef7def9 [ 571.768042][T11607] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 571.776115][T11607] RBP: 00007f192fdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 571.784097][T11607] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 571.792104][T11607] R13: 0000000000000000 R14: 00007f192f135f80 R15: 00007f192f25fa28 [ 571.800117][T11607] [ 572.058744][ T9569] Bluetooth: hci6: command tx timeout [ 572.547489][T11611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.604433][ T1189] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 572.638001][ T1189] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 572.676985][ T1189] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 573.356275][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 573.570391][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 573.636380][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 576.191293][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 576.222354][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.230376][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.313676][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.375231][T11600] @: renamed from vlan0 (while UP) [ 576.403844][T11590] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1110'. [ 576.431844][T11604] netlink: 'syz.1.1110': attribute type 12 has an invalid length. [ 576.458683][T11604] netlink: 'syz.1.1110': attribute type 29 has an invalid length. [ 576.466794][T11604] netlink: 'syz.1.1110': attribute type 2 has an invalid length. [ 576.475524][T11604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1110'. [ 576.585503][ T1189] cdc_ncm 2-1:1.0: setting tx_max = 32 [ 576.845001][ T1189] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 576.903896][T11502] hsr_slave_0: entered promiscuous mode [ 576.914841][ T1189] usb 2-1: USB disconnect, device number 48 [ 576.939571][ T1189] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 576.971994][T11502] hsr_slave_1: entered promiscuous mode [ 577.038477][T11502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 577.097286][T11502] Cannot create hsr debugfs directory [ 578.615666][ T9860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.984368][ T9860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.140887][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 579.152669][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 579.163686][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 579.172212][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.180251][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 579.187626][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 579.462598][ T9860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.640248][ T9860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.178662][ T5237] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 580.335605][T11683] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 580.410179][ T5237] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.440856][ T5237] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.497088][ T5237] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 580.516754][ T5237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.755454][ T5237] usb 2-1: usb_control_msg returned -32 [ 580.774556][ T5237] usbtmc 2-1:16.0: can't read capabilities [ 580.833894][ T9860] bridge_slave_1: left allmulticast mode [ 580.869745][ T9860] bridge_slave_1: left promiscuous mode [ 580.899121][T11687] program syz.4.1134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.913537][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.927911][ T9860] bridge_slave_0: left allmulticast mode [ 580.942982][ T9860] bridge_slave_0: left promiscuous mode [ 580.952559][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.156534][T11691] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 581.228796][ T1189] usb 2-1: USB disconnect, device number 49 [ 581.266358][ T55] Bluetooth: hci3: command tx timeout [ 581.928604][ T5289] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 582.149066][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.175746][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.198829][ T5289] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 582.218294][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.281357][ T5289] usb 5-1: config 0 descriptor?? [ 582.793378][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.812159][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.840003][ T5289] cougar 0003:060B:700A.0020: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.4-1/input0 [ 582.862796][ T9860] bond0 (unregistering): Released all slaves [ 583.341385][ T55] Bluetooth: hci3: command tx timeout [ 583.442881][T11675] chnl_net:caif_netlink_parms(): no params data found [ 583.522124][T11714] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 583.528703][T11714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 583.593264][T11714] vhci_hcd vhci_hcd.0: Device attached [ 583.677058][T11502] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 583.879343][ T59] usb 15-1: new low-speed USB device number 2 using vhci_hcd [ 583.882245][ T5289] usb 5-1: USB disconnect, device number 47 [ 584.106750][T11502] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 584.260526][T11502] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 584.332764][ T9860] hsr_slave_0: left promiscuous mode [ 584.344845][ T9860] hsr_slave_1: left promiscuous mode [ 584.358873][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.377625][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.407940][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.420254][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.501778][ T9860] veth1_macvtap: left promiscuous mode [ 584.507507][ T9860] veth0_macvtap: left promiscuous mode [ 584.518937][ T9860] veth1_vlan: left promiscuous mode [ 584.527593][ T9860] veth0_vlan: left promiscuous mode [ 584.578648][ T5289] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 584.798807][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 584.815268][ T5289] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.856635][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 584.883017][ T5289] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 584.898465][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.929422][ T5289] usb 2-1: config 0 descriptor?? [ 584.936569][ T5289] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 585.421142][ T55] Bluetooth: hci3: command tx timeout [ 586.557592][ T9860] team0 (unregistering): Port device team_slave_1 removed [ 586.723729][ T9860] team0 (unregistering): Port device team_slave_0 removed [ 587.055161][ T5286] usb 2-1: USB disconnect, device number 50 [ 587.269308][T11731] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 587.498716][ T55] Bluetooth: hci3: command tx timeout [ 588.727691][T11739] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 588.801791][T11502] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 588.854878][T11738] pimreg: entered allmulticast mode [ 589.087847][T11746] FAULT_INJECTION: forcing a failure. [ 589.087847][T11746] name failslab, interval 1, probability 0, space 0, times 0 [ 589.129352][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.136669][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.151525][T11746] CPU: 1 UID: 0 PID: 11746 Comm: syz.4.1146 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 589.162373][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 589.172450][T11746] Call Trace: [ 589.175735][T11746] [ 589.178685][T11746] dump_stack_lvl+0x241/0x360 [ 589.183397][T11746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.188618][T11746] ? __pfx__printk+0x10/0x10 [ 589.193271][T11746] should_fail_ex+0x3b0/0x4e0 [ 589.198031][T11746] ? __build_skb+0x4b/0x90 [ 589.202479][T11746] should_failslab+0xac/0x100 [ 589.207210][T11746] ? __build_skb+0x4b/0x90 [ 589.211659][T11746] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 589.217073][T11746] __build_skb+0x4b/0x90 [ 589.221341][T11746] netlink_alloc_large_skb+0x65/0x100 [ 589.226729][T11746] netlink_sendmsg+0x638/0xcb0 [ 589.231531][T11746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.236849][T11746] ? arch_stack_walk+0x16d/0x1b0 [ 589.241892][T11746] ? aa_sock_msg_perm+0x91/0x160 [ 589.246955][T11746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 589.252289][T11746] ? security_socket_sendmsg+0x87/0xb0 [ 589.257971][T11746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.263302][T11746] __sock_sendmsg+0x221/0x270 [ 589.268128][T11746] sock_sendmsg+0x134/0x200 [ 589.272692][T11746] ? __pfx_sock_sendmsg+0x10/0x10 [ 589.277772][T11746] ? splice_direct_to_actor+0x502/0xc90 [ 589.283356][T11746] ? do_splice_direct+0x28c/0x3e0 [ 589.288449][T11746] ? do_sendfile+0x56d/0xe20 [ 589.293174][T11746] ? __se_sys_sendfile64+0x17c/0x1e0 [ 589.298533][T11746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.304642][T11746] ? iov_iter_bvec+0x4e/0x180 [ 589.309452][T11746] splice_to_socket+0xa13/0x10b0 [ 589.314454][T11746] ? __pfx_splice_to_socket+0x10/0x10 [ 589.319919][T11746] ? __pfx_splice_to_socket+0x10/0x10 [ 589.325328][T11746] direct_splice_actor+0x11e/0x220 [ 589.330491][T11746] splice_direct_to_actor+0x58e/0xc90 [ 589.335955][T11746] ? __pfx_direct_splice_actor+0x10/0x10 [ 589.341633][T11746] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 589.347566][T11746] ? __fget_files+0x29/0x470 [ 589.352199][T11746] ? __pfx_lock_release+0x10/0x10 [ 589.357280][T11746] do_splice_direct+0x28c/0x3e0 [ 589.362192][T11746] ? __pfx_do_splice_direct+0x10/0x10 [ 589.367607][T11746] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 589.373550][T11746] ? security_file_permission+0x7f/0xa0 [ 589.379150][T11746] ? rw_verify_area+0x1d2/0x6b0 [ 589.384047][T11746] do_sendfile+0x56d/0xe20 [ 589.388525][T11746] ? __pfx_do_sendfile+0x10/0x10 [ 589.393526][T11746] __se_sys_sendfile64+0x17c/0x1e0 [ 589.398941][T11746] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 589.404787][T11746] ? do_syscall_64+0x100/0x230 [ 589.409679][T11746] ? do_syscall_64+0xb6/0x230 [ 589.414399][T11746] do_syscall_64+0xf3/0x230 [ 589.418934][T11746] ? clear_bhb_loop+0x35/0x90 [ 589.423651][T11746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.428800][T11675] bridge_slave_0: entered allmulticast mode [ 589.429559][T11746] RIP: 0033:0x7f192ef7def9 [ 589.429586][T11746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.437799][T11675] bridge_slave_0: entered promiscuous mode [ 589.439876][T11746] RSP: 002b:00007f192fdfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 589.439905][T11746] RAX: ffffffffffffffda RBX: 00007f192f135f80 RCX: 00007f192ef7def9 [ 589.439923][T11746] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000b [ 589.439937][T11746] RBP: 00007f192fdfe090 R08: 0000000000000000 R09: 0000000000000000 [ 589.439953][T11746] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 589.439968][T11746] R13: 0000000000000000 R14: 00007f192f135f80 R15: 00007f192f25fa28 [ 589.440002][T11746] [ 589.440033][ C1] vkms_vblank_simulate: vblank timer overrun [ 589.607683][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.618652][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.625919][T11675] bridge_slave_1: entered allmulticast mode [ 589.633599][T11675] bridge_slave_1: entered promiscuous mode [ 589.975670][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.101110][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.342139][T11675] team0: Port device team_slave_0 added [ 590.406899][T11675] team0: Port device team_slave_1 added [ 590.558771][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.565843][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.591869][ C1] vkms_vblank_simulate: vblank timer overrun [ 590.668741][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.778878][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.793247][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.872252][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.908442][T11715] vhci_hcd: connection reset by peer [ 590.946005][ T80] vhci_hcd: stop threads [ 590.974694][ T80] vhci_hcd: release socket [ 591.008437][ T80] vhci_hcd: disconnect device [ 591.101764][ T59] vhci_hcd: vhci_device speed not set [ 591.215877][T11502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.260078][T11780] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 591.356447][T11675] hsr_slave_0: entered promiscuous mode [ 591.390811][T11675] hsr_slave_1: entered promiscuous mode [ 591.439230][T11675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.469202][T11675] Cannot create hsr debugfs directory [ 591.507999][T11786] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 591.668783][ T5290] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 591.722889][T11502] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.877555][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 591.916125][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 591.949006][ T9858] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.956252][ T9858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.988061][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 592.003998][ T5290] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 592.016394][ T9858] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.023749][ T9858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.033437][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.061978][ T5290] usb 4-1: config 0 descriptor?? [ 592.295352][T11795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.401218][ T5237] usb 4-1: USB disconnect, device number 57 [ 592.779768][T11502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.941151][ T5290] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 593.102580][T11502] veth0_vlan: entered promiscuous mode [ 593.143469][T11502] veth1_vlan: entered promiscuous mode [ 593.182633][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.208547][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.263824][ T5290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 593.304239][ T5290] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 593.322683][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.337145][T11809] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 593.363003][ T5290] usb 2-1: config 0 descriptor?? [ 593.738019][ T9859] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.940439][T11502] veth0_macvtap: entered promiscuous mode [ 594.233812][ T9859] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.326794][T11502] veth1_macvtap: entered promiscuous mode [ 594.409164][T11675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.646854][ T9859] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.751559][T11675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.822946][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 594.878924][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1160'. [ 595.014622][ T9569] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.027034][ T9569] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.038108][ T9569] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.048641][ T9569] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.049660][ T9859] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.066867][ T9569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 595.075097][ T9569] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.213026][T11675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.294445][T11675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.614941][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.664165][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.702755][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.736863][ T5290] usbhid 2-1:0.0: can't add hid device: -71 [ 595.749275][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.768525][ T5290] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 595.781240][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.792882][ T5290] usb 2-1: USB disconnect, device number 51 [ 595.818401][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.838673][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.858405][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.871458][T11502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.908954][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.939266][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.976654][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.989246][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.999370][T11837] raw_sendmsg: syz.1.1163 forgot to set AF_INET. Fix it! [ 595.999874][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.026995][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.050993][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.068402][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.088769][T11502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 596.100208][T11502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 596.130318][T11502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.142011][T11502] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.167561][T11502] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.178385][T11502] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.187611][T11502] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.429420][T11838] trusted_key: encrypted_key: insufficient parameters specified [ 596.438328][ T9859] bridge_slave_1: left allmulticast mode [ 596.466770][ T9859] bridge_slave_1: left promiscuous mode [ 596.478911][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.509758][ T9859] bridge_slave_0: left allmulticast mode [ 596.515466][ T9859] bridge_slave_0: left promiscuous mode [ 596.529166][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.189490][ T9569] Bluetooth: hci4: command tx timeout [ 597.688975][ T9859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.709254][ T9859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.737324][ T9859] bond0 (unregistering): Released all slaves [ 598.423861][ T59] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 598.648647][ T59] usb 2-1: Using ep0 maxpacket: 8 [ 598.667921][ T59] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.735455][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.771825][ T59] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.805432][ T9858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.825141][ T59] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 598.843079][ T9858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.853491][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.894197][ T59] usb 2-1: Product: syz [ 598.913313][T11828] chnl_net:caif_netlink_parms(): no params data found [ 598.918134][ T59] usb 2-1: Manufacturer: syz [ 598.971370][ T59] usb 2-1: SerialNumber: syz [ 599.008624][ T59] usb 2-1: config 0 descriptor?? [ 599.056387][ T59] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 599.183945][ T9859] hsr_slave_0: left promiscuous mode [ 599.203551][ T9859] hsr_slave_1: left promiscuous mode [ 599.214014][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.231960][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.261317][ T9569] Bluetooth: hci4: command tx timeout [ 599.268331][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.279856][ T9859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.300178][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.310377][ T9859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.375217][ T9859] veth1_macvtap: left promiscuous mode [ 599.400428][ T9859] veth0_macvtap: left promiscuous mode [ 599.416342][ T9859] veth1_vlan: left promiscuous mode [ 599.443277][ T9859] veth0_vlan: left promiscuous mode [ 599.510544][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.553786][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.600337][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.640877][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.773848][ T59] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 600.038536][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 600.057001][ T59] usb 5-1: unable to get BOS descriptor or descriptor too short [ 600.081223][ T59] usb 5-1: config 4 has an invalid interface number: 38 but max is 0 [ 600.142480][ T59] usb 5-1: config 4 has no interface number 0 [ 600.159254][ T59] usb 5-1: config 4 interface 38 has no altsetting 0 [ 600.204680][ T59] usb 5-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.18 [ 600.239994][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.286987][ T59] usb 5-1: Product: syz [ 600.298586][ T59] usb 5-1: Manufacturer: syz [ 600.312335][ T59] usb 5-1: SerialNumber: syz [ 601.348609][ T9569] Bluetooth: hci4: command tx timeout [ 601.372436][ T9859] team0 (unregistering): Port device team_slave_1 removed [ 601.717026][ T9859] team0 (unregistering): Port device team_slave_0 removed [ 603.419485][ T9569] Bluetooth: hci4: command tx timeout [ 604.077859][ T1835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.129134][ T1835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.231095][ T30] INFO: task syz.3.808:10075 blocked for more than 143 seconds. [ 604.248449][ T30] Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 604.256204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.269262][ T30] task:syz.3.808 state:D stack:25488 pid:10075 tgid:10075 ppid:9576 flags:0x00004006 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.288503][ T30] Call Trace: [ 604.298480][ T30] [ 604.301483][ T30] __schedule+0x1800/0x4a60 [ 604.306993][ T30] ? __pfx___schedule+0x10/0x10 [ 604.312112][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.317197][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 604.322813][ T30] ? schedule+0x90/0x320 [ 604.327370][ T30] schedule+0x14b/0x320 [ 604.331730][ T30] schedule_preempt_disabled+0x13/0x30 [ 604.337236][ T30] __mutex_lock+0x6a4/0xd70 [ 604.344589][ T30] ? __mutex_lock+0x527/0xd70 [ 604.350108][ T30] ? hugetlb_fault+0x56f/0x3770 [ 604.355023][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 604.368516][ T30] ? __lock_acquire+0x137a/0x2040 [ 604.373848][ T30] hugetlb_fault+0x56f/0x3770 [ 604.388500][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 604.393711][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 604.407387][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 604.413161][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 604.419356][ T30] handle_mm_fault+0x1901/0x1bc0 [ 604.424370][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 604.430071][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.435157][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 604.468520][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.473900][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 604.501580][ T5288] usb 2-1: USB disconnect, device number 52 [ 604.518605][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 604.545284][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 604.552096][ T30] ? exc_page_fault+0x113/0x8c0 [ 604.559981][ T30] exc_page_fault+0x459/0x8c0 [ 604.564748][ T30] asm_exc_page_fault+0x26/0x30 [ 604.571949][ T30] RIP: 0033:0x7f7bd694597c [ 604.576422][ T30] RSP: 002b:00007f7bd6c5fb88 EFLAGS: 00010246 [ 604.638616][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 604.646730][ T30] RDX: 0000000000000010 RSI: 00007f7bd64005d9 RDI: 0000000020000d00 [ 604.689627][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.717506][ T30] RBP: 00007f7bd6b37a80 R08: 00007f7bd6800000 R09: 0000000000000001 [ 604.744343][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000006d3aa [ 604.778428][ T30] R13: 00007f7bd6c5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 604.815542][ T30] [ 604.819139][ T30] INFO: task syz.3.808:10076 blocked for more than 143 seconds. [ 604.828458][ T30] Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 604.868581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.879741][ T59] usb 5-1: Found UVC 0.00 device syz (19ab:1000) [ 604.886109][ T59] usb 5-1: No valid video chain found. [ 604.891825][ T30] task:syz.3.808 state:D stack:24760 pid:10076 tgid:10075 ppid:9576 flags:0x00004004 [ 604.919644][ T30] Call Trace: [ 604.922996][ T30] [ 604.925986][ T30] __schedule+0x1800/0x4a60 [ 604.932619][ T59] usb 5-1: USB disconnect, device number 48 [ 604.957129][ T30] ? __pfx___schedule+0x10/0x10 [ 604.968508][ T30] ? __pfx_lock_release+0x10/0x10 [ 604.973605][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 604.990555][ T30] ? schedule+0x90/0x320 [ 604.997584][ T30] schedule+0x14b/0x320 [ 605.003346][ T30] schedule_preempt_disabled+0x13/0x30 [ 605.009923][ T30] __mutex_lock+0x6a4/0xd70 [ 605.014493][ T30] ? __mutex_lock+0x527/0xd70 [ 605.020742][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 605.025471][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 605.038409][ T30] ? __pfx_up_write+0x10/0x10 [ 605.043158][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 605.058676][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 605.064744][ T30] hugetlb_wp+0x104d/0x3a90 [ 605.069799][ T30] ? mark_lock+0x9a/0x350 [ 605.074181][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 605.088921][ T30] ? __pfx___might_resched+0x10/0x10 [ 605.094270][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 605.100763][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 605.105825][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 605.111739][ T30] ? __filemap_get_folio+0x769/0xc10 [ 605.117142][ T30] hugetlb_fault+0x27b2/0x3770 [ 605.139667][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 605.144908][ T30] ? mt_find+0x226/0x850 [ 605.152010][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.159089][ T30] handle_mm_fault+0x1901/0x1bc0 [ 605.164074][ T30] ? mt_find+0x62d/0x850 [ 605.168321][ T30] ? mt_find+0x226/0x850 [ 605.193069][ T30] ? __pfx_mt_find+0x10/0x10 [ 605.197708][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 605.210232][ T30] ? find_vma+0xf9/0x170 [ 605.214636][ T30] ? __pfx_find_vma+0x10/0x10 [ 605.219902][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 605.227162][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 605.233026][ T30] exc_page_fault+0x2b9/0x8c0 [ 605.237827][ T30] asm_exc_page_fault+0x26/0x30 [ 605.250043][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 605.255918][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 605.288435][ T30] RSP: 0018:ffffc900045efad0 EFLAGS: 00050246 [ 605.294579][ T30] RAX: ffffffff84b29901 RBX: 000000002001ed40 RCX: 0000000000000040 [ 605.303078][ T30] RDX: 0000000000000000 RSI: ffffc900045efb60 RDI: 000000002001ed00 [ 605.319881][ T30] RBP: ffffc900045efc10 R08: ffffc900045efb9f R09: 1ffff920008bdf73 [ 605.338535][ T30] R10: dffffc0000000000 R11: fffff520008bdf74 R12: 0000000000000040 [ 605.346575][ T30] R13: 0000000000005380 R14: 000000002001ed00 R15: ffffc900045efb60 [ 605.355098][ T30] ? _copy_from_user+0x91/0xe0 [ 605.368492][ T30] _copy_to_user+0x86/0xb0 [ 605.372984][ T30] rng_dev_read+0x3be/0x6d0 [ 605.377663][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 605.383322][ T30] ? security_file_permission+0x7f/0xa0 [ 605.389032][ T30] ? rw_verify_area+0x52a/0x6b0 [ 605.393930][ T30] vfs_readv+0x6c2/0xa90 [ 605.398207][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 605.430926][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 605.444475][ T30] ? __fget_files+0x29/0x470 [ 605.449491][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 605.454384][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 605.460258][ T30] ? do_syscall_64+0x100/0x230 [ 605.465052][ T30] ? do_syscall_64+0xb6/0x230 [ 605.478479][ T30] do_syscall_64+0xf3/0x230 [ 605.483053][ T30] ? clear_bhb_loop+0x35/0x90 [ 605.488847][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.494765][ T30] RIP: 0033:0x7f7bd697def9 [ 605.500282][ T30] RSP: 002b:00007f7bd76e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 605.518897][ T30] RAX: ffffffffffffffda RBX: 00007f7bd6b35f80 RCX: 00007f7bd697def9 [ 605.526923][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 605.549996][ T30] RBP: 00007f7bd69f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 605.558676][ T30] R10: 00000000fffffffd R11: 0000000000000246 R12: 0000000000000000 [ 605.566753][ T30] R13: 0000000000000000 R14: 00007f7bd6b35f80 R15: 00007f7bd6c5fa28 [ 605.598820][ T30] [ 605.601945][ T30] INFO: task syz.3.808:10080 blocked for more than 144 seconds. [ 605.619477][ T30] Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 605.627164][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 605.646830][ T30] task:syz.3.808 state:D stack:22296 pid:10080 tgid:10075 ppid:9576 flags:0x00004004 [ 605.692362][ T30] Call Trace: [ 605.695714][ T30] [ 605.731242][ T30] __schedule+0x1800/0x4a60 [ 605.735862][ T30] ? __pfx___schedule+0x10/0x10 [ 605.775561][ T30] ? __pfx_lock_release+0x10/0x10 [ 605.788767][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 605.794843][ T30] ? schedule+0x90/0x320 [ 605.808857][ T30] schedule+0x14b/0x320 [ 605.839528][ T30] io_schedule+0x8d/0x110 [ 605.844097][ T30] folio_wait_bit_common+0x882/0x12b0 [ 605.869117][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 605.875005][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 605.908406][ T30] ? _raw_spin_unlock+0x28/0x50 [ 605.913350][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 605.930121][ T30] __filemap_get_folio+0xb7/0xc10 [ 605.935237][ T30] hugetlb_fault+0x1b72/0x3770 [ 605.968456][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 605.973678][ T30] ? mt_find+0x226/0x850 [ 605.977953][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.027396][ T30] handle_mm_fault+0x1901/0x1bc0 [ 606.048424][ T30] ? mt_find+0x62d/0x850 [ 606.052754][ T30] ? mt_find+0x226/0x850 [ 606.057043][ T30] ? __pfx_mt_find+0x10/0x10 [ 606.099866][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 606.105202][ T30] ? find_vma+0xf9/0x170 [ 606.128506][ T30] ? __pfx_find_vma+0x10/0x10 [ 606.133278][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.177470][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 606.183005][ T30] exc_page_fault+0x2b9/0x8c0 [ 606.197679][ T30] asm_exc_page_fault+0x26/0x30 [ 606.202696][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 606.208653][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 606.249210][ T30] RSP: 0018:ffffc90004867778 EFLAGS: 00050202 [ 606.259025][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 606.267051][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 606.278670][ T30] RBP: ffffc90004867ec8 R08: ffffffff9018766f R09: 1ffffffff2030ecd [ 606.288754][ T30] R10: dffffc0000000000 R11: fffffbfff2030ece R12: 1ffff9200090cf7d [ 606.296781][ T30] R13: 1ffff9200090cf08 R14: 0000000020800000 R15: 0000000000800000 [ 606.318432][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 606.323642][ T30] ? stack_trace_save+0x118/0x1d0 [ 606.329406][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 606.334929][ T30] ? stack_depot_save_flags+0x29/0x830 [ 606.354451][ T30] ? kasan_save_track+0x51/0x80 [ 606.368479][ T30] ? kasan_save_track+0x3f/0x80 [ 606.385616][ T30] ? kasan_save_free_info+0x40/0x50 [ 606.391014][ T30] ? poison_slab_object+0xe0/0x150 [ 606.396183][ T30] ? __kasan_slab_free+0x37/0x60 [ 606.408467][ T30] ? kfree+0x149/0x360 [ 606.412585][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 606.418260][ T30] ? security_file_ioctl+0x75/0xb0 [ 606.423572][ T30] ? __se_sys_ioctl+0x47/0x170 [ 606.428469][ T30] ? do_syscall_64+0xf3/0x230 [ 606.438417][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.444552][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 606.449501][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 606.455369][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.468545][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 606.478444][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.483554][ T30] ? kfree+0x149/0x360 [ 606.487773][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 606.495606][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 606.501909][ T30] ? __fget_files+0x29/0x470 [ 606.506560][ T30] ? __fget_files+0x3f6/0x470 [ 606.518448][ T30] ? __fget_files+0x29/0x470 [ 606.523109][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 606.528087][ T30] ? security_file_ioctl+0x87/0xb0 [ 606.545484][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 606.551089][ T30] __se_sys_ioctl+0xfc/0x170 [ 606.556519][ T30] do_syscall_64+0xf3/0x230 [ 606.561487][ T30] ? clear_bhb_loop+0x35/0x90 [ 606.574784][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.588636][ T30] RIP: 0033:0x7f7bd697def9 [ 606.593112][ T30] RSP: 002b:00007f7bd76c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.628432][ T30] RAX: ffffffffffffffda RBX: 00007f7bd6b36058 RCX: 00007f7bd697def9 [ 606.639055][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 606.647095][ T30] RBP: 00007f7bd69f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 606.655166][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.688494][ T30] R13: 0000000000000000 R14: 00007f7bd6b36058 R15: 00007f7bd6c5fa28 [ 606.696544][ T30] [ 606.738521][ T30] [ 606.738521][ T30] Showing all locks held in the system: [ 606.746273][ T30] 1 lock held by khungtaskd/30: [ 606.759543][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 606.803783][ T30] 2 locks held by dhcpcd/4899: [ 606.822221][ T30] #0: ffffffff8fc70f08 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 606.831767][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 606.868542][ T30] 2 locks held by getty/4995: [ 606.884063][ T30] #0: ffff888030b0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 606.893979][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 606.904776][ T30] 2 locks held by kworker/1:5/5289: [ 606.910076][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 606.921448][ T30] #1: ffffc900041f7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 606.931936][ T30] 1 lock held by syz.4.628/9113: [ 606.936913][ T30] 2 locks held by syz-executor/9725: [ 606.942656][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 606.953819][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 606.965818][ T30] 4 locks held by kworker/u8:13/9859: [ 606.978484][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 606.989594][ T30] #1: ffffc90003d67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 607.000368][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 607.010808][ T30] #3: ffff88807bc25428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 607.038455][ T30] 3 locks held by kworker/u8:14/9860: [ 607.043886][ T30] #0: ffff888030620148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 607.078432][ T30] #1: ffffc9000462fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 607.108447][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 607.117913][ T30] 2 locks held by syz.3.808/10075: [ 607.158626][ T30] #0: ffff88802ef6b580 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 607.195701][ T30] #1: ffff8880212c48d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 607.228486][ T30] 2 locks held by syz.3.808/10076: [ 607.233631][ T30] #0: ffff88807b70c418 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 607.244078][ T30] #1: ffff8880212c48d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 607.279646][ T30] 3 locks held by syz.3.808/10080: [ 607.294880][ T30] #0: ffff88807b70c418 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 607.305433][ T30] #1: ffff8880212c48d8 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 607.338679][ T30] #2: ffff8880618cb4e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 607.349713][ T30] 2 locks held by syz-executor/10689: [ 607.355127][ T30] #0: ffff888055600d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 607.365629][ T30] #1: ffff888055600078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 607.389949][ T30] 1 lock held by syz-executor/11502: [ 607.395414][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 607.406791][ T30] 3 locks held by syz-executor/11675: [ 607.412835][ T30] #0: ffff88806a318d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 607.428767][ T30] #1: ffff88806a318078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 607.458482][ T30] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 607.505943][ T30] [ 607.508448][ T30] ============================================= [ 607.508448][ T30] [ 607.516948][ T30] NMI backtrace for cpu 0 [ 607.521315][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 607.531847][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 607.541920][ T30] Call Trace: [ 607.545300][ T30] [ 607.548236][ T30] dump_stack_lvl+0x241/0x360 [ 607.553022][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 607.558229][ T30] ? __pfx__printk+0x10/0x10 [ 607.562824][ T30] ? vprintk_emit+0x667/0x7c0 [ 607.567514][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 607.572572][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 607.577549][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 607.583033][ T30] ? _printk+0xd5/0x120 [ 607.587209][ T30] ? __pfx__printk+0x10/0x10 [ 607.591817][ T30] ? __wake_up_klogd+0xcc/0x110 [ 607.596691][ T30] ? __pfx__printk+0x10/0x10 [ 607.601293][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 607.606330][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 607.612325][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 607.618354][ T30] watchdog+0xff4/0x1040 [ 607.622620][ T30] ? watchdog+0x1ea/0x1040 [ 607.627056][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.631746][ T30] kthread+0x2f0/0x390 [ 607.635822][ T30] ? __pfx_watchdog+0x10/0x10 [ 607.640517][ T30] ? __pfx_kthread+0x10/0x10 [ 607.645114][ T30] ret_from_fork+0x4b/0x80 [ 607.649547][ T30] ? __pfx_kthread+0x10/0x10 [ 607.654141][ T30] ret_from_fork_asm+0x1a/0x30 [ 607.658933][ T30] [ 607.663310][ T30] Sending NMI from CPU 0 to CPUs 1: [ 607.669399][ C1] NMI backtrace for cpu 1 [ 607.669415][ C1] CPU: 1 UID: 0 PID: 5289 Comm: kworker/1:5 Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 607.669437][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 607.669450][ C1] Workqueue: events nsim_dev_trap_report_work [ 607.669474][ C1] RIP: 0010:lock_is_held_type+0xad/0x190 [ 607.669496][ C1] Code: 83 bd d8 0a 00 00 00 7e 47 4c 89 eb 48 81 c3 e0 0a 00 00 31 ed 48 83 fd 31 73 24 48 89 df 4c 89 fe e8 67 02 00 00 85 c0 75 2a <48> ff c5 49 63 85 d8 0a 00 00 48 83 c3 28 48 39 c5 7c d8 eb 11 48 [ 607.669513][ C1] RSP: 0018:ffffc900041f7388 EFLAGS: 00000046 [ 607.669528][ C1] RAX: 0000000000000000 RBX: ffff88802e376508 RCX: 0000000080000001 [ 607.669542][ C1] RDX: 0000000000000000 RSI: ffffffff8e938320 RDI: ffff88802e376508 [ 607.669556][ C1] RBP: 0000000000000001 R08: ffffffff82073cee R09: 1ffffffff283c908 [ 607.669570][ C1] R10: dffffc0000000000 R11: fffffbfff283c909 R12: 0000000000000246 [ 607.669583][ C1] R13: ffff88802e375a00 R14: 00000000ffffffff R15: ffffffff8e938320 [ 607.669597][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 607.669614][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.669627][ C1] CR2: 0000560f20e81438 CR3: 000000000e734000 CR4: 00000000003506f0 [ 607.669644][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.669656][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.669668][ C1] Call Trace: [ 607.669676][ C1] [ 607.669684][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 607.669708][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 607.669735][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 607.669773][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 607.669797][ C1] ? nmi_handle+0x14f/0x5a0 [ 607.669814][ C1] ? nmi_handle+0x2a/0x5a0 [ 607.669833][ C1] ? lock_is_held_type+0xad/0x190 [ 607.669850][ C1] ? default_do_nmi+0x63/0x160 [ 607.669874][ C1] ? exc_nmi+0x123/0x1f0 [ 607.669897][ C1] ? end_repeat_nmi+0xf/0x53 [ 607.669925][ C1] ? page_ext_get+0xee/0x2a0 [ 607.669951][ C1] ? lock_is_held_type+0xad/0x190 [ 607.669968][ C1] ? lock_is_held_type+0xad/0x190 [ 607.669987][ C1] ? lock_is_held_type+0xad/0x190 [ 607.670005][ C1] [ 607.670012][ C1] [ 607.670020][ C1] ? page_ext_get+0x20/0x2a0 [ 607.670044][ C1] page_ext_get+0x192/0x2a0 [ 607.670069][ C1] __set_page_owner+0x9e/0x800 [ 607.670093][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 607.670116][ C1] ? __pfx_lock_release+0x10/0x10 [ 607.670141][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 607.670163][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 607.670190][ C1] post_alloc_hook+0x1f3/0x230 [ 607.670215][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 607.670247][ C1] ? unwind_next_frame+0x1b90/0x2a00 [ 607.670276][ C1] ? ret_from_fork_asm+0x19/0x30 [ 607.670305][ C1] ? mark_lock+0x9a/0x350 [ 607.670337][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 607.670367][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 607.670396][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 607.670428][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.670453][ C1] ? kasan_save_track+0x51/0x80 [ 607.670480][ C1] alloc_slab_page+0x5f/0x120 [ 607.670507][ C1] allocate_slab+0x5a/0x2f0 [ 607.670532][ C1] ___slab_alloc+0xcd1/0x14b0 [ 607.670556][ C1] ? __alloc_skb+0x1c3/0x440 [ 607.670579][ C1] ? __alloc_skb+0x1c3/0x440 [ 607.670598][ C1] __slab_alloc+0x58/0xa0 [ 607.670619][ C1] ? __alloc_skb+0x1c3/0x440 [ 607.670639][ C1] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 607.670663][ C1] __alloc_skb+0x1c3/0x440 [ 607.670686][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 607.670708][ C1] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 607.670725][ C1] ? kmem_cache_free+0x145/0x350 [ 607.670747][ C1] nsim_dev_trap_report_work+0x254/0xaa0 [ 607.670780][ C1] ? process_scheduled_works+0x945/0x1830 [ 607.670804][ C1] process_scheduled_works+0xa2c/0x1830 [ 607.670842][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.670870][ C1] ? assign_work+0x364/0x3d0 [ 607.670896][ C1] worker_thread+0x870/0xd30 [ 607.670926][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.670957][ C1] ? __kthread_parkme+0x169/0x1d0 [ 607.670983][ C1] ? __pfx_worker_thread+0x10/0x10 [ 607.671008][ C1] kthread+0x2f0/0x390 [ 607.671024][ C1] ? __pfx_worker_thread+0x10/0x10 [ 607.671048][ C1] ? __pfx_kthread+0x10/0x10 [ 607.671065][ C1] ret_from_fork+0x4b/0x80 [ 607.671090][ C1] ? __pfx_kthread+0x10/0x10 [ 607.671107][ C1] ret_from_fork_asm+0x1a/0x30 [ 607.671139][ C1] [ 608.782800][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 608.789719][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0 [ 608.800262][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 608.810371][ T30] Call Trace: [ 608.813681][ T30] [ 608.816639][ T30] dump_stack_lvl+0x241/0x360 [ 608.821365][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.826603][ T30] ? __pfx__printk+0x10/0x10 [ 608.831225][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 608.837257][ T30] ? vscnprintf+0x5d/0x90 [ 608.841631][ T30] panic+0x349/0x860 [ 608.845702][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 608.851929][ T30] ? __pfx_panic+0x10/0x10 [ 608.856383][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 608.862003][ T30] ? __irq_work_queue_local+0x137/0x410 [ 608.867604][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 608.873019][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 608.879208][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 608.885403][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 608.891603][ T30] watchdog+0x1033/0x1040 [ 608.895983][ T30] ? watchdog+0x1ea/0x1040 [ 608.900432][ T30] ? __pfx_watchdog+0x10/0x10 [ 608.905141][ T30] kthread+0x2f0/0x390 [ 608.909211][ T30] ? __pfx_watchdog+0x10/0x10 [ 608.913908][ T30] ? __pfx_kthread+0x10/0x10 [ 608.918530][ T30] ret_from_fork+0x4b/0x80 [ 608.922984][ T30] ? __pfx_kthread+0x10/0x10 [ 608.927596][ T30] ret_from_fork_asm+0x1a/0x30 [ 608.932419][ T30] [ 608.935778][ T30] Kernel Offset: disabled [ 608.940109][ T30] Rebooting in 86400 seconds..