last executing test programs: 20.390031562s ago: executing program 2 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000019000d0100000000000000000a00000000000000e0ff000008001ec0"], 0x2c}}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x69, 0xc6, 0x86, 0x60, 0x145f, 0x10c, 0xd444, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x11, 0x0, 0x0, 0xfd, 0x1d, 0x74}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0xfffffffffffffcc3, &(0x7f0000000180)={0x40, 0x0, 0xfffffffffffffd5a, "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"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.24612095s ago: executing program 2 (id=515): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) socket$inet_tcp(0x2, 0x1, 0x0) lsm_get_self_attr(0x9025a27164544f94, 0xffffffffffffffff, &(0x7f0000000040), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sched_setaffinity(0x0, 0x6, &(0x7f0000000040)=0x10001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000000102010400000000000000000a00008014000300ff01000000000000000000000000000114000400fc0000000000000000000000000000000c000280050001"], 0x50}}, 0x0) r2 = io_uring_setup(0x144c, &(0x7f0000000100)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x300, 0x0) close(r2) 16.183300053s ago: executing program 2 (id=517): syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000080)={0x401, 0x20, 0x6, 0x20, 0x3}, 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000004940)=""/102399, 0x18fff}], 0x1, 0x1, 0x3a6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b031407640f02004803000000dba2d959c33c14fba7e3d9", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x7, r9}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) 15.67001761s ago: executing program 0 (id=519): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r1, 0x80046601, 0x0) (fail_nth: 1) 15.557929852s ago: executing program 2 (id=520): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100"], 0x4c}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14.973873567s ago: executing program 0 (id=522): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf3d, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd_index=0x9, 0x10, {0x0, r3}, 0x81, 0xe, 0x0, {0x0, r6, r3}}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 14.739720251s ago: executing program 2 (id=524): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100006786f140410e5041c81f000000010902120001000000000904000208d9010a00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 14.241778997s ago: executing program 2 (id=528): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000008c0)="519e0eb33ea2", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x20101) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1000, 0x200) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) 13.036581931s ago: executing program 0 (id=532): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, &(0x7f0000000380)={0x90}) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/234) ioctl$PPPIOCGFLAGS1(r4, 0x40047435, &(0x7f0000000280)) (fail_nth: 3) 12.465888673s ago: executing program 0 (id=534): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100"], 0x4c}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10.411313251s ago: executing program 0 (id=540): r0 = socket$inet(0x2, 0x80001, 0x84) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000120043c259b8e1ba75ece8f1", @ANYRES64, @ANYBLOB="0000000000000000040036"], 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x800) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32) r2 = getpid() (rerun: 32) sched_setattr(r2, &(0x7f0000000000)={0x38, 0x5}, 0x0) (async) ioprio_get$uid(0x2, 0x0) (async) mkdirat(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%-5lx \x00'}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000100)='syzkaller\x00', 0x73c, 0xb2, &(0x7f0000000240)=""/178, 0x41000, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x80000001, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r5], &(0x7f0000000640)=[{0x0, 0x4, 0x7, 0x4}, {0x2, 0x5, 0x10, 0xb}, {0x3, 0x4, 0x5}, {0x0, 0x4, 0x10, 0xb}, {0x1, 0x4, 0xa, 0x5}, {0x2, 0x1, 0x1, 0x1}], 0x10, 0x80, @void, @value}, 0x94) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async, rerun: 64) r7 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async, rerun: 32) r10 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x101, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000780)={0x39, 0x1, 0x7, "69170000bfce0000000000000200", 0x20385655}) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x20, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf0}]}]}, 0x20}}, 0x0) (async) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) close(r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x40, 0x1, 0x4, 0xe, {{0x5, 0x4, 0x1, 0x2, 0x14, 0x65, 0x0, 0xb, 0x29, 0x0, @empty, @loopback}}}}) 10.347516542s ago: executing program 1 (id=541): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf3d, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd_index=0x9, 0x10, {0x0, r3}, 0x81, 0xe, 0x0, {0x0, r6, r3}}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 9.585965473s ago: executing program 0 (id=543): r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f0000000080)={0x8, 0x3, 0x8001, 0xf, 0x3a4, 0x68b0}) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000040)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.812634481s ago: executing program 3 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c0009000800", @ANYRES32], 0x38}}, 0x0) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xd1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000080)={0xa, @pix_mp={0x7baec3f0, 0x1, 0x32314d59, 0x5, 0x5, [{0x9ab, 0x1}, {0xffffff8c, 0xff}, {0x200, 0x5}, {0x800, 0x9}, {0xce06, 0xa61}, {0x4}, {0x80000000, 0x6}, {0x4, 0x8}], 0x7, 0xc, 0x6, 0x2, 0x4}}) r3 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000480)={0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000170000080020ffffffffffffffff0000000000"], 0x30}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="120110030197ca10880c21004719010203010902120001012df8ff09211fed514b23686d45466d448df724c3f24f11d1ffe0b504a004003ad0940c"], &(0x7f0000000a00)={0x0, 0x0, 0x5, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@loopback}, &(0x7f0000000240)=0xc) 8.811658919s ago: executing program 4 (id=546): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0017000000009782aeb88080fb11c41a0cda01b0f73e0599e5960317dbd4f9366486585b18470e954a1202b9411814f2706338e9c497b9c6fc690bd44cdecf7d744f9d52cb7e226977e68b0be245c29d9fff4431efa20b9877e8844e9433717730fe2249baa3bbab33180eb3f44be878f74483cdec612d31d16a8d96cd9f4684738231e91bc89ac2f04a3cf6b65cf78d1b928bc7d8da27c5223af9940952e27f9f6edb572576d32153ca650ef0f5572153fbf7b8c13a150609932af9188ff1bd1447578f11785550c1540c6e67684d1f29822cb0cef4a8cc45bc92281392fe8c262af13aa680422c1ae9bd86d15fc7509ac1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x20, 0x7}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x34) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="400919000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.137260056s ago: executing program 1 (id=547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x1a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x168, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0xf8, 0x4, [@m_simple={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}, @TCA_DEF_DATA={0x49, 0x3, 'fd/3\x00\xfer&54\x8f\x90\x8a\xeay\x14\x03\x03\xd8>-\xfb\b\x95v\x06\x18\xc9#\x16\x13;\xe6\xab~\xc5]\x03-\xee\xd5^\xbazc\xbd+\x9ch\xd3\x03G\xff\x8d\x88\xb9h\x1ado\x88\x87/\n\x85\xa4\xa5\x1c\xfc'}]}, {0x56, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806"}, {0xc}, {0xc}}}]}]}}]}, 0x1a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.051439268s ago: executing program 1 (id=548): r0 = epoll_create1(0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000004c0)={0x1000000a}) (async) accept4$inet(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x100000) (async, rerun: 32) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) ioctl(r2, 0x50540000, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_DQEVENT(r3, 0x80805659, &(0x7f0000000180)={0x0, @frame_sync}) (async, rerun: 32) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f00000000c0)={0x3, "f71a1ecda49ba30361987ff7069983fb6e75b2f2376bcfc3f5e2f986685a0d1d", 0x3}) (rerun: 32) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x4004, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xffffffff}}]}]}, @IFLA_TXQLEN={0x8}]}, 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r4, 0xd13, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) (async) syz_emit_ethernet(0x36, 0x0, 0x0) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 7.821659304s ago: executing program 1 (id=549): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100"], 0x4c}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.685696532s ago: executing program 1 (id=550): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6005000000000000008000000000000000000000000000bbfe8000000000000000000000000000aa80004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2000090780000"], 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) write$rfkill(r4, &(0x7f0000000040)={0x0, 0x1, 0x2}, 0x8) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/84, 0x54}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x5b49, &(0x7f0000000140)={0x0, 0x0, 0x20}, &(0x7f00000001c0), &(0x7f0000000200)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002580)=ANY=[@ANYBLOB="1c0000004a00ff000000000000000c000a"], 0x1c}}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @dev, @local}}}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) r7 = dup(0xffffffffffffffff) preadv(r7, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/144}, {&(0x7f0000000380)=""/185}], 0x20000000000001de, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000440)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="10000000011400002bbd7004fddbe725010000010001000000080001000200000000000000000010"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4080004) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.316696991s ago: executing program 4 (id=551): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = inotify_init1(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=ANY=[@ANYBLOB="2c0500008b828aa74f969e1286a0481255dd063b0b12691fe2b57729c1ed1dcb5940b1faaae456923daf1c9d07bf02682b6996bac6481c0b14fe8e4069ec4aa1c6ec999401cf98162f873302782df09a744e4461430adc6a8719fcd6", @ANYRES16=0x0, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000000400ec00e8047d80d9000100076a496e69780f1227dfd99193ac3c1b02108aacd30981a8bd69ec17ea8dd4de8617ee6ddceb090de7a6884f4512edde78653a79a0bd9e3d44d7ab80950e52f020bcff781266835b025b5ff4cd3b33bf1b19db9602f9313cb4e2002bbfb3c6bb77b9555a86dfde10938c03f9b1eb3edb8d7c4c119aaa12d1a3d1740c7cb8c1c4fa6b4bde0d8c64d5608486ef3fe7171f2cc1c991dfc57bf9aa7dc2f5ccdc309917274df598d9d4621e8b848375b4a8b846ffe0a8a0473ebbbc9929b0023e4dc4eee3f33eae0b4a96f44c230f6f3b477e2b067474b7000000d9000000ba874517f17cdd36cab6e6debacd6d8d0b385726f015a27d681a37ce1217ab644878adf504d43a17881c451035f9fda5b871f5514b7987f7a7bedc55095bc5858280a4c95121be04c56910de2c2d6b3454b9ff170a0a3283a877164a31f39936751e5c0b76adf5488967f66dfe1bf39c65186b8ab0418350ed50d7b74ed3b37e846e659ac0c263be58f5a674a418e89856b8d50a29615ddc6816bf209ca0c0ebfcee6542561a627550abe1446e374150bae4e85bb2d3fadb433435418c5b008317bbc3e6e297b29122e3f787e698a7e62a2433194c0000006d000100bdcc44b835bbfb68ac287a3f19c78345001abf71d92d2b893657313b3f1cdcb4a201af9abe781a58f6e04eb3bddde03d906188fc9a219cb9690a45072ffd21b5fac9818e06e5b8c64865a87aef6655a8cf34c966a80c566b9c918d25c22764c0d642b7b94e36522bfc000000aa00020074cb6743f1c7340a93c9cec3ad1aa9a7f7c158b8b5a3181a29463fd63f3395bae67dbe9b0cfbbf11129b94310f7c36d194746c83b4f91ab993621430b048e180f099877ef04693cbe567165f928b8fa5bd76ddcfc478064d67e950bd476fe2b3aec97553a0bcf6d701b395828cc504469340daa1e7d3c4397d37459094365a96334232d49f7de590e4ced7c5f7b2a54c6da1a2de8974d380bb458a2649b41ea90b1f46b2070d0000c5000100bc069cc4a3cbf48918cec68042ab37bb5c475d3b9fd5096d912113c26e915243dea826ba81a52aaf7139d505c6606790a36437888f05aa0e828d558bff9519a7dc23190f4b7330118a36e555aac7e361551ee047f85b5e056dfc117e356ea56ad54ab0ac7e7b8737b32f187ea9cb469682447d0ee856def9035f2ab4a0e136d79a2ee0a467087adb8a0569bece2e811261513f69390c0d6703703d50cf110497914e77f48cc0f7c3fa7675f4daceaa89f5df009aee3b091929cc2681ca4db23f60000000a1000300acabac645228571427ce0efcdf68ead81ba1a7cc9461e1a3e8da744c6a0f9b3ea22577ad08ead2b0e9d205aac3ea750aa6f9858908227078a8e62c275974d01273c06cc7f74c047205f13bde51ffcb77a1d392ad62d95ec9de3f3fe521387def98b6552d0f106e873a78ede1273e726e67a7f5d06e7388e1cfbd2cbacd8f206a7f5bbb811535ec4be31b40f5c3ed74dfab49afffada1a7311413fbc184000000a100010078eb720547d162794409c5b915d145f131ef1072aad3b7b88ba860ab6b811f3c73c3fc5c5545653d4b3295d83bbceacb8f359d08fddea067bf82326ab32f18041c98615f11250e3568ee84522e2b98f2e8d4d035b53fce83f6f096e768327c895fc4daf59ab87fb7794d15192e605e6de2eb773cfebf45c0e9da72a2209713282dc60bfe3907d8f9b558b47ff53b250e373999398f4d1aa59d23d41b4d0000000a0006000802110000000000040087000500f60000000000"], 0x52c}}, 0x8004) sendmmsg$unix(r3, &(0x7f0000011880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000020000100000000000000000002000000000000020000000008000400fbffffff08000d00000000"], 0x2c}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) dup(0xffffffffffffffff) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r6, 0x40045010, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) pipe(&(0x7f00000000c0)) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_submit(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 5.213840761s ago: executing program 1 (id=552): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41b880, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x0, 0x26, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) (async) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x4, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) (async) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async, rerun: 64) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 64) r3 = dup(r2) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) (async, rerun: 64) inotify_init() (async, rerun: 64) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001c00130400000000000000000a000000", @ANYRES32=r7, @ANYBLOB="95000000140001"], 0x38}}, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) (async, rerun: 32) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xd, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @exit, @call={0x85, 0x0, 0x0, 0xc5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, @fallback=0x36, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x3, 0x8, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000004c0)=[r4, r9, r10, r5, r1], &(0x7f0000000500)=[{0x4, 0x5, 0x2, 0x9}, {0x3, 0x5, 0x10, 0x9}, {0x4, 0x3, 0x2, 0x8}], 0x10, 0x7, @void, @value}, 0x94) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000300), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r11, 0xc0cc5605, &(0x7f0000000180)={0x0, @sdr}) 4.905422615s ago: executing program 3 (id=554): syz_open_dev$video4linux(0x0, 0x0, 0x0) r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, &(0x7f0000000080)={0x401, 0x20, 0x6, 0x20, 0x3}, 0x48) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000004940)=""/102399, 0x18fff}], 0x1, 0x1, 0x3a6) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000300)={0x0, &(0x7f00000001c0)}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) r5 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) execveat(r6, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b031407640f02004803000000dba2d959c33c14fba7e3d9", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x7, r9}, 0x14) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020}, 0x2020) 4.636143235s ago: executing program 4 (id=555): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xf3d, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd_index=0x9, 0x10, {0x0, r3}, 0x81, 0xe, 0x0, {0x0, r6, r3}}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 3.90629978s ago: executing program 3 (id=556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002740)=@delchain={0x1a4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x168, 0x2, [@TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0xf8, 0x4, [@m_simple={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0xb, 0x3, 'skbmod\x00'}, @TCA_DEF_DATA={0x49, 0x3, 'fd/3\x00\xfer&54\x8f\x90\x8a\xeay\x14\x03\x03\xd8>-\xfb\b\x95v\x06\x18\xc9#\x16\x13;\xe6\xab~\xc5]\x03-\xee\xd5^\xbazc\xbd+\x9ch\xd3\x03G\xff\x8d\x88\xb9h\x1ado\x88\x87/\n\x85\xa4\xa5\x1c\xfc'}]}, {0x56, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806"}, {0xc}, {0xc}}}]}]}}]}, 0x1a4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.754014166s ago: executing program 3 (id=557): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000410400"/20, @ANYRES32=0x0], 0x6c}}, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x4000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xfffffffd}, {0x400}, {0xfffffffd, 0x2}, 0x0, 0x3f0, 0x80, 0x0, 0x0, 0x423d, 0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffff, 0x11, 0x0, 0x0, 0x6}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000020000001, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000f, 0x810, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6feffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008191f4d90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x3f00) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000700)="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", 0x1bd}], 0x1) fallocate(r6, 0x10, 0x0, 0x3) 2.877772081s ago: executing program 4 (id=558): socket$inet6_sctp(0xa, 0x1, 0x84) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100"], 0x4c}}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x27}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, 0x0, 0x0) 2.425743803s ago: executing program 4 (id=559): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x4, @buffer={0x0, 0x0, 0x0}, &(0x7f00000008c0)="519e0eb33ea2", 0x0, 0xffffffff, 0x40, 0x2, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x20101) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f00000004c0), 0x10) 2.035561208s ago: executing program 4 (id=560): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0xa, 0xe, 0x8, 0x9, 0x3, 0x1, 0x201c}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x2, 0x1046, 0x0, 0x80}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r4 = socket(0x1, 0x803, 0x0) r5 = openat$ppp(0xffffff9c, &(0x7f0000000000), 0x234300, 0x0) ioctl$PPPIOCSACTIVE(r5, 0x40087446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xf2, 0x9, 0x1, 0xbb4}, {0x1, 0x2, 0x9, 0x6}]}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x40034) socket(0x10, 0x803, 0x0) 382.481798ms ago: executing program 3 (id=562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3b9f02c356073027, 0xb98247375def854d}}) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="f65cd9b4c1", 0x5, r4) keyctl$search(0xa, r4, &(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, r5) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f00000000c0)=0x3, 0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014ee000018000180310002006e657464657673696d30000000000000080005004f000000"], 0x34}}, 0x0) 0s ago: executing program 3 (id=563): r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f", 0xd5}], 0x1}, 0x0) connect$inet6(r0, 0x0, 0x0) r2 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x210503) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000180)=@xdp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f00000004c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000640)=""/64, 0x40}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f0000000780)=""/239, 0xef}, {&(0x7f0000000980)=""/206, 0xce}], 0x9, &(0x7f0000000900)=""/55, 0x37}, 0x40002160) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000340)=0x2000000) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={'veth1\x00', {0x2, 0x0, @dev}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000080)={0x1, 0x2}) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000100)={0x0, 0x34565559, 0x3, @stepwise={0x4, 0x6, 0x9, 0x6, 0x10, 0x5}}) kernel console output (not intermixed with test programs): ] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.141145][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.152950][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.165147][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.198486][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.233248][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.244492][ T5281] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 200.275566][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.312166][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.342724][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.360436][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.412172][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.445225][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.476375][ T5281] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.497193][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.508821][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.547262][ T5281] usb 2-1: config 0 descriptor?? [ 200.550430][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.603669][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.604281][ T5233] Bluetooth: hci7: command tx timeout [ 200.646521][ T7189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.693975][ T7189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.738433][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.817413][ T5281] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 200.827209][ T5281] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 200.836797][ T5281] [drm:udl_init] *ERROR* Selecting channel failed [ 200.849537][ T7189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.881051][ T7189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.891966][ T7189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.901588][ T7189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.912883][ T5281] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 200.946339][ T5281] [drm] Initialized udl on minor 2 [ 200.966089][ T5281] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 200.977345][ T5281] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 200.986158][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 200.995576][ T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.003631][ T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 201.013029][ T5281] usb 2-1: USB disconnect, device number 40 [ 201.114834][ T2637] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 201.179333][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.204297][ T942] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 201.227348][ T942] usb 5-1: USB disconnect, device number 19 [ 201.234223][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.319971][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.329600][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.346649][ T2637] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 201.383085][ T2637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.412727][ T2637] usb 1-1: Product: syz [ 201.418375][ T2637] usb 1-1: Manufacturer: syz [ 201.424775][ T2637] usb 1-1: SerialNumber: syz [ 201.453099][ T2637] usb 1-1: config 0 descriptor?? [ 201.539494][ T2637] ch341 1-1:0.0: ch341-uart converter detected [ 201.781486][ T2637] usb 1-1: failed to receive control message: -121 [ 201.796429][ T2637] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 202.052362][ T7285] FAULT_INJECTION: forcing a failure. [ 202.052362][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 202.102703][ T5365] usb 1-1: USB disconnect, device number 25 [ 202.121876][ T5365] ch341 1-1:0.0: device disconnected [ 202.134661][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.4.347 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 202.145472][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 202.155568][ T7285] Call Trace: [ 202.158854][ T7285] [ 202.161778][ T7285] dump_stack_lvl+0x241/0x360 [ 202.166470][ T7285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.171979][ T7285] ? __pfx__printk+0x10/0x10 [ 202.176858][ T7285] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 202.183061][ T7285] ? __pfx___might_resched+0x10/0x10 [ 202.188403][ T7285] should_fail_ex+0x3b0/0x4e0 [ 202.193197][ T7285] should_failslab+0xac/0x100 [ 202.198156][ T7285] ? __alloc_skb+0x1c3/0x440 [ 202.202780][ T7285] kmem_cache_alloc_node_noprof+0x71/0x320 [ 202.208674][ T7285] __alloc_skb+0x1c3/0x440 [ 202.213113][ T7285] ? __pfx___might_resched+0x10/0x10 [ 202.218404][ T7285] ? __pfx___alloc_skb+0x10/0x10 [ 202.223350][ T7285] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 202.229418][ T7285] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 202.235695][ T7285] netlink_sendmsg+0x638/0xcb0 [ 202.240471][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.246031][ T7285] ? aa_sock_msg_perm+0x91/0x160 [ 202.251061][ T7285] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 202.256360][ T7285] ? security_socket_sendmsg+0x87/0xb0 [ 202.261827][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.267104][ T7285] __sock_sendmsg+0x221/0x270 [ 202.271798][ T7285] ____sys_sendmsg+0x525/0x7d0 [ 202.276570][ T7285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.282037][ T7285] __sys_sendmsg+0x2b0/0x3a0 [ 202.286646][ T7285] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.291782][ T7285] ? vfs_write+0x7c4/0xc90 [ 202.296257][ T7285] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 202.302939][ T7285] ? lockdep_hardirqs_on+0x99/0x150 [ 202.308223][ T7285] __do_fast_syscall_32+0xb4/0x110 [ 202.313774][ T7285] ? exc_page_fault+0x590/0x8c0 [ 202.318631][ T7285] do_fast_syscall_32+0x34/0x80 [ 202.323477][ T7285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.329808][ T7285] RIP: 0023:0xf7fcf579 [ 202.333893][ T7285] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.353521][ T7285] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 202.362213][ T7285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 202.370188][ T7285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.378214][ T7285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.386290][ T7285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.394260][ T7285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.402249][ T7285] [ 202.576715][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 202.594367][ T5281] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 202.684144][ T5233] Bluetooth: hci7: command tx timeout [ 202.806008][ T5281] usb 3-1: config 4 has an invalid interface number: 122 but max is 1 [ 202.814904][ T5281] usb 3-1: config 4 has an invalid interface number: 209 but max is 1 [ 202.823534][ T5281] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 202.848688][ T5281] usb 3-1: config 4 has no interface number 0 [ 202.855727][ T5281] usb 3-1: config 4 has no interface number 1 [ 202.862146][ T5281] usb 3-1: config 4 interface 122 altsetting 0 endpoint 0xD has invalid maxpacket 1576, setting to 64 [ 202.875344][ T5281] usb 3-1: config 4 interface 122 altsetting 0 endpoint 0x8 has invalid maxpacket 88, setting to 64 [ 202.887379][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.903872][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 202.909218][ T5365] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 202.914700][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 202.914734][ T5281] usb 3-1: config 4 interface 122 altsetting 0 endpoint 0x9 has invalid maxpacket 24167, setting to 64 [ 202.947963][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 202.960288][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 202.972325][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.986500][ T5281] usb 3-1: config 4 interface 122 altsetting 0 endpoint 0x8F has an invalid bInterval 171, changing to 4 [ 203.000923][ T5281] usb 3-1: config 4 interface 122 altsetting 0 endpoint 0x8F has invalid maxpacket 24132, setting to 1023 [ 203.013024][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 203.024751][ T5281] usb 3-1: config 4 interface 122 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 203.038538][ T5281] usb 3-1: config 4 interface 209 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 203.051863][ T5281] usb 3-1: config 4 interface 209 has no altsetting 0 [ 203.062615][ T5281] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=67.54 [ 203.071980][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.081037][ T5281] usb 3-1: Product: syz [ 203.085997][ T5281] usb 3-1: Manufacturer: ᠌ [ 203.091006][ T5281] usb 3-1: SerialNumber: syz [ 203.104589][ T7287] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.123852][ T5365] usb 5-1: device descriptor read/64, error -71 [ 203.336381][ T5281] ushc 3-1:4.122: probe with driver ushc failed with error -71 [ 203.356836][ T5281] usb 3-1: USB disconnect, device number 20 [ 203.407909][ T5365] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 203.586049][ T5365] usb 5-1: device descriptor read/64, error -71 [ 203.724513][ T5365] usb usb5-port1: attempt power cycle [ 203.768501][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 204.091970][ T7308] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 204.173885][ T5365] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 204.205090][ T5365] usb 5-1: device descriptor read/8, error -71 [ 204.484361][ T5365] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 204.542814][ T5365] usb 5-1: device descriptor read/8, error -71 [ 204.553866][ T942] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.565645][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 204.689742][ T5365] usb usb5-port1: unable to enumerate USB device [ 204.742831][ T942] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.753603][ T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.767475][ T942] usb 3-1: config 0 descriptor?? [ 204.776281][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 204.796742][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 204.812597][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.825068][ T9] usb 2-1: Product: syz [ 204.829783][ T9] usb 2-1: Manufacturer: syz [ 204.838010][ T9] usb 2-1: SerialNumber: syz [ 204.846488][ T9] usb 2-1: config 0 descriptor?? [ 205.023353][ T942] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 205.033355][ T942] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 205.049567][ T942] [drm:udl_init] *ERROR* Selecting channel failed [ 205.089832][ T942] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 205.110637][ T942] [drm] Initialized udl on minor 2 [ 205.125341][ T942] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.134809][ T942] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 205.147252][ T5307] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.159176][ T942] usb 3-1: USB disconnect, device number 21 [ 205.166106][ T5307] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 205.321828][ T7315] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 205.338513][ T7315] pim6reg0: linktype set to 776 [ 205.913926][ T5365] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 206.083921][ T5365] usb 1-1: device descriptor read/64, error -71 [ 206.127851][ T9] airspy 2-1:0.0: usb_control_msg() failed -110 request 0a [ 206.146316][ T9] airspy 2-1:0.0: Could not detect board [ 206.153179][ T9] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 206.379521][ T5365] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 206.395833][ T7335] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.592716][ T7340] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 206.600921][ T5365] usb 1-1: device descriptor read/64, error -71 [ 206.724988][ T5365] usb usb1-port1: attempt power cycle [ 207.102794][ T7344] FAULT_INJECTION: forcing a failure. [ 207.102794][ T7344] name failslab, interval 1, probability 0, space 0, times 0 [ 207.133995][ T5365] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 207.136947][ T7344] CPU: 0 UID: 0 PID: 7344 Comm: syz.2.366 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 207.153012][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 207.163502][ T7344] Call Trace: [ 207.166782][ T7344] [ 207.169809][ T7344] dump_stack_lvl+0x241/0x360 [ 207.174578][ T7344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.179799][ T7344] ? __pfx__printk+0x10/0x10 [ 207.184409][ T7344] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 207.191001][ T7344] ? __pfx___might_resched+0x10/0x10 [ 207.196500][ T7344] should_fail_ex+0x3b0/0x4e0 [ 207.201359][ T7344] should_failslab+0xac/0x100 [ 207.206097][ T7344] ? __alloc_skb+0x1c3/0x440 [ 207.210715][ T7344] kmem_cache_alloc_node_noprof+0x71/0x320 [ 207.216788][ T7344] __alloc_skb+0x1c3/0x440 [ 207.221233][ T7344] ? __pfx___might_resched+0x10/0x10 [ 207.226628][ T7344] ? __pfx___alloc_skb+0x10/0x10 [ 207.231811][ T7344] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 207.238162][ T7344] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 207.244411][ T7344] netlink_sendmsg+0x638/0xcb0 [ 207.249191][ T7344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.254557][ T7344] ? aa_sock_msg_perm+0x91/0x160 [ 207.259580][ T7344] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 207.264888][ T7344] ? security_socket_sendmsg+0x87/0xb0 [ 207.270350][ T7344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.275634][ T7344] __sock_sendmsg+0x221/0x270 [ 207.280321][ T7344] ____sys_sendmsg+0x525/0x7d0 [ 207.285113][ T7344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.290419][ T7344] __sys_sendmsg+0x2b0/0x3a0 [ 207.295105][ T7344] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.300393][ T7344] ? vfs_write+0x7c4/0xc90 [ 207.305014][ T7344] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 207.311621][ T7344] ? lockdep_hardirqs_on+0x99/0x150 [ 207.316998][ T7344] __do_fast_syscall_32+0xb4/0x110 [ 207.322112][ T7344] ? exc_page_fault+0x590/0x8c0 [ 207.326975][ T7344] do_fast_syscall_32+0x34/0x80 [ 207.331857][ T7344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.338281][ T7344] RIP: 0023:0xf740d579 [ 207.342704][ T7344] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.363718][ T7344] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 207.372172][ T7344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 207.380154][ T7344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 207.388573][ T7344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.396901][ T7344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.404885][ T7344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.412984][ T7344] [ 207.454619][ T5365] usb 1-1: device descriptor read/8, error -71 [ 207.746271][ T5365] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 207.809353][ T5365] usb 1-1: device descriptor read/8, error -71 [ 207.954397][ T5365] usb usb1-port1: unable to enumerate USB device [ 208.260921][ T5233] Bluetooth: Wrong link type (-71) [ 208.267986][ T5233] Bluetooth: hci3: link tx timeout [ 208.274316][ T5233] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 208.345831][ T2637] usb 2-1: USB disconnect, device number 41 [ 208.444124][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 208.606492][ T9] usb 3-1: device descriptor read/64, error -71 [ 208.794664][ T7358] bond0: entered promiscuous mode [ 208.810969][ T7358] bond_slave_0: entered promiscuous mode [ 208.818255][ T7358] bond_slave_1: entered promiscuous mode [ 208.846085][ T7358] syz.0.373 uses obsolete (PF_INET,SOCK_PACKET) [ 208.894417][ T7361] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 208.904075][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 209.063967][ T9] usb 3-1: device descriptor read/64, error -71 [ 209.113843][ T942] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 209.173420][ T7357] bond0: left promiscuous mode [ 209.182754][ T7357] bond_slave_0: left promiscuous mode [ 209.188911][ T9] usb usb3-port1: attempt power cycle [ 209.195048][ T7357] bond_slave_1: left promiscuous mode [ 209.306374][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.324156][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.325600][ T5280] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 209.335912][ T942] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.359117][ T942] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= e.00 [ 209.371100][ T942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.383310][ T942] usb 5-1: config 0 descriptor?? [ 209.577532][ T5280] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 209.595897][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.616411][ T5280] usb 2-1: config 0 descriptor?? [ 209.624274][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 209.674095][ T2637] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 209.685148][ T9] usb 3-1: device descriptor read/8, error -71 [ 209.823537][ T942] kye 0003:0458:0138.0003: item fetching failed at offset 2/5 [ 209.846442][ T942] kye 0003:0458:0138.0003: parse failed [ 209.854791][ T5280] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 209.855873][ T942] kye 0003:0458:0138.0003: probe with driver kye failed with error -22 [ 209.882128][ T2637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.909502][ T5280] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 209.918531][ T2637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.930895][ T2637] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.944257][ T5280] [drm:udl_init] *ERROR* Selecting channel failed [ 209.960380][ T2637] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= e.00 [ 209.975766][ T5280] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 209.982497][ T5280] [drm] Initialized udl on minor 2 [ 210.003796][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 210.003876][ T5280] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 210.023225][ T2637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.035269][ T2637] usb 1-1: config 0 descriptor?? [ 210.041443][ T5280] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 210.045657][ T9] usb 3-1: device descriptor read/8, error -71 [ 210.050133][ T5277] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 210.070234][ T5280] usb 2-1: USB disconnect, device number 42 [ 210.078692][ T5277] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 210.224397][ T9] usb usb3-port1: unable to enumerate USB device [ 210.288911][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.313343][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.364123][ T4624] Bluetooth: hci3: command 0x0406 tx timeout [ 210.432319][ T9] usb 5-1: USB disconnect, device number 24 [ 210.481810][ T2637] kye 0003:0458:0138.0004: item fetching failed at offset 2/5 [ 210.502320][ T2637] kye 0003:0458:0138.0004: parse failed [ 210.510732][ T2637] kye 0003:0458:0138.0004: probe with driver kye failed with error -22 [ 210.818994][ T7367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.829276][ T7367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.843328][ T9] usb 1-1: USB disconnect, device number 30 [ 211.384893][ T9] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 211.498993][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 211.607503][ T9] usb 5-1: config 4 has an invalid interface number: 122 but max is 1 [ 211.621327][ T9] usb 5-1: config 4 has an invalid interface number: 209 but max is 1 [ 211.630140][ T9] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 211.651494][ T9] usb 5-1: config 4 has no interface number 0 [ 211.658013][ T9] usb 5-1: config 4 has no interface number 1 [ 211.665389][ T9] usb 5-1: config 4 interface 122 altsetting 0 endpoint 0xD has invalid maxpacket 1576, setting to 64 [ 211.676886][ T9] usb 5-1: config 4 interface 122 altsetting 0 endpoint 0x8 has invalid maxpacket 88, setting to 64 [ 211.691552][ T9] usb 5-1: config 4 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.705012][ T9] usb 5-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 211.717641][ T9] usb 5-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 211.729786][ T9] usb 5-1: config 4 interface 122 altsetting 0 endpoint 0x9 has invalid maxpacket 24167, setting to 64 [ 211.741610][ T9] usb 5-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 211.753023][ T9] usb 5-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 211.765104][ T9] usb 5-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.785851][ T9] usb 5-1: config 4 interface 122 altsetting 0 endpoint 0x8F has an invalid bInterval 171, changing to 4 [ 211.797462][ T9] usb 5-1: config 4 interface 122 altsetting 0 endpoint 0x8F has invalid maxpacket 24132, setting to 1023 [ 211.814753][ T9] usb 5-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 211.828481][ T9] usb 5-1: config 4 interface 122 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 211.842737][ T9] usb 5-1: config 4 interface 209 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 211.858045][ T9] usb 5-1: config 4 interface 209 has no altsetting 0 [ 211.870313][ T9] usb 5-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=67.54 [ 211.879780][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.888477][ T9] usb 5-1: Product: syz [ 211.892820][ T9] usb 5-1: Manufacturer: ᠌ [ 211.907400][ T9] usb 5-1: SerialNumber: syz [ 211.916536][ T7375] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 212.131664][ T7391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.383'. [ 212.230678][ T9] ushc 5-1:4.122: probe with driver ushc failed with error -71 [ 212.278432][ T4624] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 212.290262][ T4624] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 212.312740][ T9] usb 5-1: USB disconnect, device number 25 [ 212.324209][ T4624] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 212.333119][ T4624] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 212.343565][ T4624] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 212.353816][ T2637] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 212.361961][ T4624] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 212.394792][ T942] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 212.526100][ T7396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.544010][ T2637] usb 3-1: device descriptor read/64, error -71 [ 212.565446][ T7396] batadv_slave_1: entered promiscuous mode [ 212.606566][ T942] usb 2-1: config index 0 descriptor too short (expected 22, got 18) [ 212.631030][ T942] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 212.650703][ T942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.662898][ T942] usb 2-1: Product: syz [ 212.677555][ T942] usb 2-1: Manufacturer: syz [ 212.682613][ T942] usb 2-1: SerialNumber: syz [ 212.691521][ T942] usb 2-1: config 0 descriptor?? [ 212.827149][ T2637] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 212.931412][ T942] kaweth 2-1:0.0: Firmware present in device. [ 213.004434][ T2637] usb 3-1: device descriptor read/64, error -71 [ 213.116731][ T942] kaweth 2-1:0.0: Statistics collection: 0 [ 213.134088][ T2637] usb usb3-port1: attempt power cycle [ 213.148928][ T942] kaweth 2-1:0.0: Multicast filter limit: 0 [ 213.172285][ T942] kaweth 2-1:0.0: MTU: 0 [ 213.195978][ T942] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 213.253151][ T7394] chnl_net:caif_netlink_parms(): no params data found [ 213.513115][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.532199][ T7390] sctp: [Deprecated]: syz.1.385 (pid 7390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.532199][ T7390] Use struct sctp_sack_info instead [ 213.553844][ T2637] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 213.573590][ T7394] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.598419][ T7394] bridge_slave_0: entered allmulticast mode [ 213.604429][ T2637] usb 3-1: device descriptor read/8, error -71 [ 213.622544][ T942] kaweth 2-1:0.0: Error setting SOFS wait [ 213.625674][ T7394] bridge_slave_0: entered promiscuous mode [ 213.633890][ T942] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 213.660167][ T7394] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.685304][ T7394] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.692633][ T7394] bridge_slave_1: entered allmulticast mode [ 213.712891][ T942] usb 2-1: USB disconnect, device number 43 [ 213.730120][ T7394] bridge_slave_1: entered promiscuous mode [ 213.873829][ T2637] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 213.919975][ T2637] usb 3-1: device descriptor read/8, error -71 [ 213.976195][ T7394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.021776][ T7394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.028510][ T7412] sctp: [Deprecated]: syz.4.389 (pid 7412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.028510][ T7412] Use struct sctp_sack_info instead [ 214.055123][ T2637] usb usb3-port1: unable to enumerate USB device [ 214.240322][ T7394] team0: Port device team_slave_0 added [ 214.250336][ T7394] team0: Port device team_slave_1 added [ 214.445155][ T4624] Bluetooth: hci8: command tx timeout [ 214.495111][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.507011][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.597845][ T7394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.687008][ T7420] pim6reg: entered allmulticast mode [ 214.696254][ T7394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.703242][ T7394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.792814][ T7394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.834382][ T7415] pim6reg: left allmulticast mode [ 215.207062][ T7394] hsr_slave_0: entered promiscuous mode [ 215.247452][ T7394] hsr_slave_1: entered promiscuous mode [ 215.294738][ T7394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.313853][ T7394] Cannot create hsr debugfs directory [ 215.693941][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 215.924155][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.966160][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 216.009830][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 216.031685][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 216.059250][ T1125] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.064143][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 216.108571][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 216.121399][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 216.165796][ T9] usb 3-1: Product: syz [ 216.170032][ T9] usb 3-1: Manufacturer: syz [ 216.175187][ T9] usb 3-1: SerialNumber: syz [ 216.183491][ T9] usb 3-1: config 0 descriptor?? [ 216.330109][ T7394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.405783][ T9] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 216.442241][ T9] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 216.523819][ T5233] Bluetooth: hci8: command tx timeout [ 216.606547][ T9] radio-si470x 3-1:0.0: software version 155, hardware version 184 [ 216.627564][ T9] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 216.643085][ T1125] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.884956][ T7394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.966642][ T9] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 217.064258][ T1125] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.084152][ T5233] Bluetooth: hci1: command 0x0406 tx timeout [ 217.098109][ T7447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 217.252944][ T7394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.341779][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.352717][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.367083][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.376497][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.386121][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.393659][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.457059][ T1125] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.502241][ T9] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 217.511378][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 217.618823][ T7394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.631397][ T5279] usb 3-1: USB disconnect, device number 30 [ 218.182272][ T1125] bridge_slave_1: left allmulticast mode [ 218.197240][ T1125] bridge_slave_1: left promiscuous mode [ 218.211993][ T1125] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.231334][ T1125] bridge_slave_0: left allmulticast mode [ 218.239840][ T1125] bridge_slave_0: left promiscuous mode [ 218.247668][ T1125] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.333991][ T2637] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 218.534281][ T2637] usb 2-1: Using ep0 maxpacket: 32 [ 218.542898][ T2637] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 218.552050][ T2637] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 218.567947][ T2637] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 151, changing to 11 [ 218.579775][ T2637] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 17729, setting to 1024 [ 218.591874][ T2637] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 218.608901][ T2637] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.616324][ T4624] Bluetooth: hci8: command tx timeout [ 218.635817][ T2637] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 218.653848][ T2637] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 218.665144][ T2637] usb 2-1: Product: syz [ 218.669361][ T2637] usb 2-1: Manufacturer: syz [ 218.674067][ T2637] usb 2-1: SerialNumber: syz [ 218.686801][ T2637] usb 2-1: config 0 descriptor?? [ 218.694662][ T7467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.704995][ T2637] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 218.728113][ T2637] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 219.005346][ T2637] usb 2-1: USB disconnect, device number 44 [ 219.011403][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 219.033066][ T2637] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 219.436745][ T1125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.455253][ T1125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.470351][ T1125] bond0 (unregistering): Released all slaves [ 219.488408][ T4624] Bluetooth: hci3: command tx timeout [ 219.501748][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 219.809003][ T7394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.996793][ T7394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.096346][ T7394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.339939][ T7394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.495046][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.522061][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.553014][ T7461] bridge_slave_0: entered allmulticast mode [ 220.570532][ T7461] bridge_slave_0: entered promiscuous mode [ 220.600007][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.628198][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.660317][ T7461] bridge_slave_1: entered allmulticast mode [ 220.684524][ T4624] Bluetooth: hci8: command tx timeout [ 220.693950][ T7461] bridge_slave_1: entered promiscuous mode [ 220.854137][ T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 220.889481][ T1125] hsr_slave_0: left promiscuous mode [ 220.913813][ T1125] hsr_slave_1: left promiscuous mode [ 220.922871][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.933070][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.958940][ T1125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.984468][ T1125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.067751][ T1125] veth1_macvtap: left promiscuous mode [ 221.086577][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 221.094927][ T1125] veth0_macvtap: left promiscuous mode [ 221.112150][ T1125] veth1_vlan: left promiscuous mode [ 221.129553][ T1125] veth0_vlan: left promiscuous mode [ 221.155434][ T9] usb 3-1: config 1 has an invalid interface number: 232 but max is 2 [ 221.171119][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.188597][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.204669][ T9] usb 3-1: config 1 has no interface number 0 [ 221.288737][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 221.330256][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.371994][ T9] usb 3-1: Manufacturer: ೵侻鬥䭬  [ 221.564150][ T4624] Bluetooth: hci3: command tx timeout [ 221.657836][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.697305][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.270475][ T9] usb 3-1: skipping empty audio interface (v1) [ 222.316322][ T9] snd-usb-audio 3-1:1.232: probe with driver snd-usb-audio failed with error -22 [ 222.328124][ T9] usb 3-1: USB disconnect, device number 31 [ 222.366910][ T5237] udevd[5237]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.387159][ T5307] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 222.598372][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 222.620583][ T5307] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.628683][ T5307] usb 1-1: config 0 has no interface number 0 [ 222.637961][ T5307] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 222.649637][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.659797][ T5307] usb 1-1: Product: syz [ 222.664375][ T5307] usb 1-1: Manufacturer: syz [ 222.669092][ T5307] usb 1-1: SerialNumber: syz [ 222.678608][ T5307] usb 1-1: config 0 descriptor?? [ 222.688042][ T5307] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 222.836925][ T1125] team0 (unregistering): Port device team_slave_1 removed [ 223.005553][ T1125] team0 (unregistering): Port device team_slave_0 removed [ 223.244423][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 223.438559][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 223.450444][ T25] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 223.459966][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.470579][ T25] usb 3-1: Product: syz [ 223.478499][ T25] usb 3-1: Manufacturer: syz [ 223.483235][ T25] usb 3-1: SerialNumber: syz [ 223.491208][ T25] usb 3-1: config 0 descriptor?? [ 223.649900][ T4624] Bluetooth: hci3: command tx timeout [ 223.724772][ T5307] gspca_spca1528: reg_w err -71 [ 223.773612][ T5307] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 223.796868][ T5307] usb 1-1: USB disconnect, device number 31 [ 224.089973][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.150353][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.248105][ T25] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 224.275816][ T25] peak_usb 3-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 224.366467][ T7461] team0: Port device team_slave_0 added [ 224.458112][ T7461] team0: Port device team_slave_1 added [ 224.495017][ T25] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 224.512433][ T25] usb 3-1: USB disconnect, device number 32 [ 224.739056][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.788722][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.854537][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.940268][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.989533][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.131077][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.356720][ T7461] hsr_slave_0: entered promiscuous mode [ 225.379975][ T7461] hsr_slave_1: entered promiscuous mode [ 225.388519][ T7461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.396377][ T7461] Cannot create hsr debugfs directory [ 225.590166][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.428'. [ 225.707750][ T7394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.724000][ T4624] Bluetooth: hci3: command tx timeout [ 225.877517][ T7394] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.917277][ T7571] netlink: 20 bytes leftover after parsing attributes in process `syz.0.430'. [ 225.987078][ T7575] Cannot find add_set index 0 as target [ 226.012565][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.019820][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.048991][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.056171][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.155937][ T7576] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 226.574067][ T5280] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.790027][ T5280] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.806295][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.840686][ T5280] usb 3-1: config 0 descriptor?? [ 226.932820][ T7394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.119648][ T7593] ipt_REJECT: TCP_RESET invalid for non-tcp [ 227.135704][ T5280] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 227.172202][ T5280] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 227.193264][ T5280] [drm:udl_init] *ERROR* Selecting channel failed [ 227.220444][ T5280] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 227.228404][ T5280] [drm] Initialized udl on minor 2 [ 227.236221][ T5280] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.246619][ T5280] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 227.264113][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.276149][ T5280] usb 3-1: USB disconnect, device number 33 [ 227.282278][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 227.558242][ T7394] veth0_vlan: entered promiscuous mode [ 227.650566][ T7394] veth1_vlan: entered promiscuous mode [ 227.800420][ T7461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.841260][ T7461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.873395][ T7461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 227.922682][ T7461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.049363][ T7394] veth0_macvtap: entered promiscuous mode [ 228.104103][ T7394] veth1_macvtap: entered promiscuous mode [ 228.142937][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.180469][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.225069][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.270594][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.303132][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.339274][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.372626][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.401382][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.420022][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.441229][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.471467][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.500339][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.522188][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.566574][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.583943][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.644486][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.680767][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.856827][ T7604] syz.1.436 (7604): drop_caches: 2 [ 228.889180][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.930483][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.962582][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.992606][ T7605] syz.1.436 (7605): drop_caches: 2 [ 229.029050][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 229.040484][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.051341][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.063177][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.094007][ T7625] Cannot find add_set index 0 as target [ 229.102470][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.115594][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.126260][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.137217][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.147199][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.157674][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.168506][ T7394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.179231][ T7394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.228701][ T7394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.268780][ T7394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.280568][ T7394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.291934][ T7394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.303673][ T7394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.648807][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.768543][ T7461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.884864][ T2579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.918900][ T2579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.020305][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.305405][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.339970][ T7640] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 230.388202][ T7461] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.420642][ T2579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.452549][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.459764][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.469850][ T2579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.575927][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.643945][ T942] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 230.682856][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.690035][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.720129][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.729597][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.738058][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.763286][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.775910][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 230.783290][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.853219][ T942] usb 1-1: config 4 has an invalid interface number: 122 but max is 1 [ 230.900070][ T942] usb 1-1: config 4 has an invalid interface number: 209 but max is 1 [ 230.986280][ T7653] FAULT_INJECTION: forcing a failure. [ 230.986280][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 231.000182][ T942] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 231.008106][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.3.382 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 231.021148][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 231.031330][ T7653] Call Trace: [ 231.034613][ T7653] [ 231.037533][ T7653] dump_stack_lvl+0x241/0x360 [ 231.042223][ T7653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.047420][ T7653] ? __pfx__printk+0x10/0x10 [ 231.052036][ T7653] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 231.058023][ T7653] ? __pfx___might_resched+0x10/0x10 [ 231.063704][ T7653] should_fail_ex+0x3b0/0x4e0 [ 231.068408][ T7653] should_failslab+0xac/0x100 [ 231.073081][ T7653] ? __alloc_skb+0x1c3/0x440 [ 231.077925][ T7653] kmem_cache_alloc_node_noprof+0x71/0x320 [ 231.084573][ T7653] __alloc_skb+0x1c3/0x440 [ 231.088981][ T7653] ? __pfx___might_resched+0x10/0x10 [ 231.094284][ T7653] ? __pfx___alloc_skb+0x10/0x10 [ 231.099221][ T7653] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 231.105460][ T7653] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 231.111717][ T7653] netlink_sendmsg+0x638/0xcb0 [ 231.116502][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.121865][ T7653] ? aa_sock_msg_perm+0x91/0x160 [ 231.126815][ T7653] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 231.132212][ T7653] ? security_socket_sendmsg+0x87/0xb0 [ 231.137702][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.142971][ T7653] __sock_sendmsg+0x221/0x270 [ 231.147642][ T7653] ____sys_sendmsg+0x525/0x7d0 [ 231.152503][ T7653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.157817][ T7653] __sys_sendmsg+0x2b0/0x3a0 [ 231.162474][ T7653] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.167658][ T7653] ? vfs_write+0x7c4/0xc90 [ 231.172085][ T7653] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 231.178675][ T7653] ? lockdep_hardirqs_on+0x99/0x150 [ 231.183881][ T7653] __do_fast_syscall_32+0xb4/0x110 [ 231.188982][ T7653] ? exc_page_fault+0x590/0x8c0 [ 231.193828][ T7653] do_fast_syscall_32+0x34/0x80 [ 231.198691][ T7653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.205011][ T7653] RIP: 0023:0xf7faf579 [ 231.209267][ T7653] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 231.229141][ T7653] RSP: 002b:00000000f573656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 231.237557][ T7653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 231.253365][ T7653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.261376][ T7653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.269375][ T7653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.277480][ T7653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.285470][ T7653] [ 231.298999][ T5277] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 231.349040][ T942] usb 1-1: config 4 has no interface number 0 [ 231.452741][ T942] usb 1-1: config 4 has no interface number 1 [ 231.463352][ T942] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0xD has invalid maxpacket 1576, setting to 64 [ 231.475000][ T942] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8 has invalid maxpacket 88, setting to 64 [ 231.488640][ T942] usb 1-1: config 4 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.500454][ T942] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 231.519762][ T942] usb 1-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 231.540910][ T942] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x9 has invalid maxpacket 24167, setting to 64 [ 231.544692][ T5277] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 231.553570][ T942] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 231.579044][ T942] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 231.591172][ T942] usb 1-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 231.605131][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.647679][ T942] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8F has an invalid bInterval 171, changing to 4 [ 231.650010][ T5277] usb 3-1: config 0 descriptor?? [ 231.672900][ T942] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8F has invalid maxpacket 24132, setting to 1023 [ 231.709788][ T942] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 231.713062][ T35] bridge_slave_1: left allmulticast mode [ 231.724562][ T942] usb 1-1: config 4 interface 122 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 231.747796][ T942] usb 1-1: config 4 interface 209 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 231.761323][ T35] bridge_slave_1: left promiscuous mode [ 231.763524][ T942] usb 1-1: config 4 interface 209 has no altsetting 0 [ 231.783677][ T942] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=67.54 [ 231.793348][ T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.806353][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.813575][ T942] usb 1-1: Product: syz [ 231.823893][ T942] usb 1-1: Manufacturer: ᠌ [ 231.828943][ T942] usb 1-1: SerialNumber: syz [ 231.849469][ T7639] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.874960][ T35] bridge_slave_0: left allmulticast mode [ 231.881832][ T35] bridge_slave_0: left promiscuous mode [ 231.889018][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.119034][ T942] ushc 1-1:4.122: probe with driver ushc failed with error -71 [ 232.148925][ T5277] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 232.184313][ T942] usb 1-1: USB disconnect, device number 32 [ 232.214215][ T5277] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 232.237178][ T5277] [drm:udl_init] *ERROR* Selecting channel failed [ 232.285629][ T5277] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 232.327841][ T5277] [drm] Initialized udl on minor 2 [ 232.339942][ T5277] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.359267][ T5277] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 232.395307][ T47] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 232.410071][ T47] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 232.428084][ T5277] usb 3-1: USB disconnect, device number 34 [ 232.675415][ T7672] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 232.844764][ T4624] Bluetooth: hci4: command tx timeout [ 233.213828][ T5277] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 233.450567][ T5277] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 233.468701][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.528331][ T5277] usb 4-1: config 0 descriptor?? [ 233.710598][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.788435][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.931857][ T35] bond0 (unregistering): Released all slaves [ 233.940657][ T5277] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 233.985308][ T5277] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 234.029129][ T5277] [drm:udl_init] *ERROR* Selecting channel failed [ 234.055266][ T5277] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 234.062287][ T5277] [drm] Initialized udl on minor 2 [ 234.075150][ T5277] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.100302][ T5277] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 234.140303][ T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 234.175038][ T5277] usb 4-1: USB disconnect, device number 21 [ 234.204775][ T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 234.222127][ T7461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.413660][ T7461] veth0_vlan: entered promiscuous mode [ 234.469657][ T7648] chnl_net:caif_netlink_parms(): no params data found [ 234.756924][ T7461] veth1_vlan: entered promiscuous mode [ 234.935844][ T4624] Bluetooth: hci4: command tx timeout [ 235.195222][ T35] hsr_slave_0: left promiscuous mode [ 235.226224][ T35] hsr_slave_1: left promiscuous mode [ 235.344009][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.408370][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.448873][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.506148][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.776101][ T35] veth1_macvtap: left promiscuous mode [ 235.796028][ T35] veth0_macvtap: left promiscuous mode [ 235.801739][ T35] veth1_vlan: left promiscuous mode [ 235.874446][ T35] veth0_vlan: left promiscuous mode [ 236.557447][ T942] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 236.764809][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 236.792993][ T942] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 236.801018][ T942] usb 1-1: can't read configurations, error -61 [ 236.965272][ T942] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 237.004132][ T4624] Bluetooth: hci4: command tx timeout [ 237.179703][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 237.187826][ T942] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.201188][ T942] usb 1-1: can't read configurations, error -61 [ 237.208692][ T942] usb usb1-port1: attempt power cycle [ 237.439226][ T35] team0 (unregistering): Port device team_slave_1 removed [ 237.495736][ T35] team0 (unregistering): Port device team_slave_0 removed [ 237.639263][ T942] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 237.694608][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 237.721584][ T942] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.743823][ T942] usb 1-1: can't read configurations, error -61 [ 237.893816][ T942] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 237.945505][ T942] usb 1-1: Using ep0 maxpacket: 8 [ 237.973264][ T942] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 237.981762][ T942] usb 1-1: can't read configurations, error -61 [ 237.995480][ T942] usb usb1-port1: unable to enumerate USB device [ 238.310486][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.330284][ T7648] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.338376][ T7648] bridge_slave_0: entered allmulticast mode [ 238.352234][ T7648] bridge_slave_0: entered promiscuous mode [ 238.403454][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.459790][ T7780] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 238.459898][ T7648] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.528146][ T7648] bridge_slave_1: entered allmulticast mode [ 238.556771][ T7648] bridge_slave_1: entered promiscuous mode [ 238.740515][ T7648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.781176][ T7461] veth0_macvtap: entered promiscuous mode [ 238.867451][ T7648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.053623][ T7648] team0: Port device team_slave_0 added [ 239.065833][ T7461] veth1_macvtap: entered promiscuous mode [ 239.084388][ T4624] Bluetooth: hci4: command tx timeout [ 239.095138][ T7648] team0: Port device team_slave_1 added [ 239.202392][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.219701][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.267923][ T7648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.329068][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.386883][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 239.405636][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.464965][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.498344][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.512246][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.533769][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.559701][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.571646][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.584383][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.595509][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.615014][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.638314][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.643682][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 239.675300][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.710526][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 239.720843][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.751838][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 239.762036][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.762059][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.764564][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.808821][ T7648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.820930][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.828373][ T7648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.863308][ T7796] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 239.892349][ T7648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.916263][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.088830][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.107881][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.124023][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.146780][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.158066][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.175021][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.201931][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.214953][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.225339][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.236034][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.246547][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.257255][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.269930][ T7461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.282722][ T7461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.362757][ T7461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.521964][ T7813] bridge1: entered promiscuous mode [ 240.535162][ T7813] bridge1: entered allmulticast mode [ 240.588812][ T7813] team0: Port device bridge1 added [ 240.672323][ T7461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.699158][ T7461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.708103][ T7461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.717128][ T7461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.726080][ T47] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 240.781438][ T7648] hsr_slave_0: entered promiscuous mode [ 240.792643][ T7648] hsr_slave_1: entered promiscuous mode [ 240.802694][ T7648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.810516][ T7648] Cannot create hsr debugfs directory [ 240.913897][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 240.925688][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.938077][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 240.960378][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 241.010360][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.052715][ T47] usb 1-1: config 0 descriptor?? [ 241.069120][ T7818] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.117715][ T47] hub 1-1:0.0: USB hub found [ 241.322236][ T47] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 241.381755][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.409958][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.633077][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.647268][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.828052][ T47] hid-generic 0003:046D:C314.0005: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.0-1/input0 [ 242.257307][ T9] usb 3-1: USB disconnect, device number 35 [ 242.628610][ T942] usb 1-1: USB disconnect, device number 37 [ 242.629885][ T7847] team_slave_0: entered promiscuous mode [ 242.643530][ T7847] team_slave_1: entered promiscuous mode [ 242.801581][ T7648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.837865][ T7648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.890238][ T7648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.923685][ T7648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.223902][ T942] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.303662][ T7648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.325893][ T7648] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.367649][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.374956][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.451299][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.458595][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.478940][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 243.514838][ T9] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 243.523514][ T942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 243.537517][ T942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 243.556967][ T942] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 243.598105][ T942] usb 5-1: New USB device found, idVendor=067b, idProduct=23c3, bcdDevice=18.a2 [ 243.630143][ T942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.676950][ T942] usb 5-1: Product: syz [ 243.686714][ T942] usb 5-1: Manufacturer: syz [ 243.700521][ T942] usb 5-1: SerialNumber: syz [ 243.730303][ T942] usb 5-1: config 0 descriptor?? [ 243.743879][ T9] usb 1-1: config 4 has an invalid interface number: 122 but max is 1 [ 243.760790][ T7648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.785995][ T942] pl2303 5-1:0.0: required interrupt-in endpoint missing [ 243.796639][ T9] usb 1-1: config 4 has an invalid interface number: 209 but max is 1 [ 243.810197][ T9] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 243.862865][ T9] usb 1-1: config 4 has no interface number 0 [ 243.888146][ T9] usb 1-1: config 4 has no interface number 1 [ 243.895877][ T9] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0xD has invalid maxpacket 1576, setting to 64 [ 243.907655][ T9] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8 has invalid maxpacket 88, setting to 64 [ 243.918539][ T9] usb 1-1: config 4 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.929570][ T9] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 243.941518][ T9] usb 1-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 243.955588][ T9] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x9 has invalid maxpacket 24167, setting to 64 [ 244.008964][ T9] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 244.047997][ T9] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 244.100093][ T7648] veth0_vlan: entered promiscuous mode [ 244.117580][ T9] usb 1-1: config 4 interface 122 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.140832][ T7847] netlink: 'syz.4.473': attribute type 10 has an invalid length. [ 244.175522][ T7847] team_slave_0: left promiscuous mode [ 244.180832][ T9] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8F has an invalid bInterval 171, changing to 4 [ 244.184137][ T7847] team_slave_1: left promiscuous mode [ 244.217674][ T9] usb 1-1: config 4 interface 122 altsetting 0 endpoint 0x8F has invalid maxpacket 24132, setting to 1023 [ 244.234954][ T9] usb 1-1: config 4 interface 122 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 244.251640][ T9] usb 1-1: config 4 interface 122 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 244.275376][ T9] usb 1-1: config 4 interface 209 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 244.294348][ T9] usb 1-1: config 4 interface 209 has no altsetting 0 [ 244.315875][ T9] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=67.54 [ 244.333869][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.350584][ T9] usb 1-1: Product: syz [ 244.373398][ T9] usb 1-1: Manufacturer: ᠌ [ 244.404257][ T9] usb 1-1: SerialNumber: syz [ 244.419343][ T7859] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 244.436265][ T7847] team_slave_0: entered promiscuous mode [ 244.442013][ T7847] team_slave_1: entered promiscuous mode [ 244.488303][ T7847] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.532074][ T7847] bond0: (slave team0): Enslaving as an active interface with an up link [ 244.598220][ T8] usb 5-1: USB disconnect, device number 26 [ 244.653120][ T7648] veth1_vlan: entered promiscuous mode [ 244.691165][ T7844] team_slave_0: left promiscuous mode [ 244.696919][ T7844] team_slave_1: left promiscuous mode [ 244.769170][ T9] ushc 1-1:4.122: probe with driver ushc failed with error -71 [ 244.814209][ T9] usb 1-1: USB disconnect, device number 38 [ 244.862787][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 244.926415][ T7648] veth0_macvtap: entered promiscuous mode [ 244.960380][ T7648] veth1_macvtap: entered promiscuous mode [ 245.035050][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.057996][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.068578][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.113877][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.147922][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.189107][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.206004][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.243117][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.293558][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.339996][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.368231][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.404064][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.447435][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.478228][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.515976][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.543357][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.554191][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.567029][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.580306][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.648703][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.659439][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.671326][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.682330][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.696578][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.707764][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.718337][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.731858][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.742485][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.772055][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.782306][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.793320][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.806363][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.817312][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.827580][ T7648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.838598][ T7648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.850438][ T7648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.916655][ T7648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.926720][ T7648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.971151][ T7648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.007199][ T7648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.291164][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.336988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.441727][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.471897][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.491889][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 247.453897][ T47] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 247.645556][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 247.671850][ T47] usb 2-1: config 7 has an invalid interface number: 247 but max is 17 [ 247.701159][ T47] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 18 [ 247.724341][ T47] usb 2-1: config 7 has no interface number 0 [ 247.747454][ T47] usb 2-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.783507][ T47] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 247.794309][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.803153][ T47] usb 2-1: Product: syz [ 247.808465][ T47] usb 2-1: Manufacturer: syz [ 247.813191][ T47] usb 2-1: SerialNumber: syz [ 247.855830][ T47] ni6501 2-1:7.247: driver 'ni6501' failed to auto-configure device. [ 248.169712][ T9] usb 2-1: USB disconnect, device number 45 [ 248.474024][ T8] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 248.673889][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 248.692187][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.701352][ T8] usb 5-1: config 0 has no interface number 0 [ 248.710444][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.722400][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.733219][ T8] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 248.745093][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.767828][ T8] usb 5-1: config 0 descriptor?? [ 248.989246][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.487'. [ 249.165830][ T942] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 249.211687][ T7938] netlink: 'syz.4.487': attribute type 3 has an invalid length. [ 249.224014][ T7938] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.487'. [ 249.355202][ T942] usb 3-1: Using ep0 maxpacket: 16 [ 249.397550][ T8] usbhid 5-1:0.1: can't add hid device: -71 [ 249.406760][ T942] usb 3-1: New USB device found, idVendor=4971, idProduct=8017, bcdDevice=52.ec [ 249.420585][ T8] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 249.428586][ T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.445250][ T942] usb 3-1: Product: syz [ 249.449541][ T8] usb 5-1: USB disconnect, device number 27 [ 249.455969][ T942] usb 3-1: Manufacturer: syz [ 249.463094][ T942] usb 3-1: SerialNumber: syz [ 249.472623][ T942] usb 3-1: config 0 descriptor?? [ 249.493424][ T942] usb-storage 3-1:0.0: USB Mass Storage device detected [ 249.513168][ T942] usb-storage 3-1:0.0: Quirks match for vid 4971 pid 8017: 4000000 [ 249.716256][ T8] usb 3-1: USB disconnect, device number 36 [ 249.876703][ T7951] veth1_macvtap: left promiscuous mode [ 249.884993][ T7951] macsec0: entered promiscuous mode [ 249.900321][ T7951] macsec0: entered allmulticast mode [ 250.238458][ T7954] netlink: 72 bytes leftover after parsing attributes in process `syz.4.492'. [ 250.543889][ T5277] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 250.750687][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 250.855783][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 250.874232][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.887686][ T5277] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 250.909656][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.981387][ T5277] usb 5-1: config 0 descriptor?? [ 251.011811][ T7954] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.643016][ T7952] syz.1.491 (7952): drop_caches: 2 [ 251.692224][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 251.702736][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 251.713883][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 251.732646][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 251.750606][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 251.759952][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.095580][ T5277] usbhid 5-1:0.0: can't add hid device: -71 [ 252.107145][ T5277] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.141320][ T5277] usb 5-1: USB disconnect, device number 28 [ 252.196410][ T7973] vlan2: entered promiscuous mode [ 252.201666][ T7973] vlan2: entered allmulticast mode [ 252.218169][ T7973] hsr_slave_1: entered allmulticast mode [ 252.234913][ T7973] hsr_slave_1: left allmulticast mode [ 252.344131][ T47] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 252.482967][ T7969] chnl_net:caif_netlink_parms(): no params data found [ 252.575868][ T47] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 252.593798][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.608555][ T47] usb 1-1: config 0 descriptor?? [ 252.650954][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.661261][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.669664][ T7969] bridge_slave_0: entered allmulticast mode [ 252.678231][ T7969] bridge_slave_0: entered promiscuous mode [ 252.688007][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.696238][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.704132][ T7969] bridge_slave_1: entered allmulticast mode [ 252.711700][ T7969] bridge_slave_1: entered promiscuous mode [ 252.796512][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.810466][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.025256][ T7969] team0: Port device team_slave_0 added [ 253.061289][ T7969] team0: Port device team_slave_1 added [ 253.214945][ T942] usb 1-1: USB disconnect, device number 39 [ 253.245914][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.281346][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.400823][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.496071][ T5277] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 253.510796][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.542563][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.598174][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.671232][ T5277] usb 3-1: device descriptor read/64, error -71 [ 253.791603][ T7969] hsr_slave_0: entered promiscuous mode [ 253.832946][ T7969] hsr_slave_1: entered promiscuous mode [ 253.864579][ T7969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.873640][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 253.884022][ T4624] Bluetooth: hci9: command tx timeout [ 253.901061][ T7969] Cannot create hsr debugfs directory [ 253.963881][ T5277] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 254.113992][ T5277] usb 3-1: device descriptor read/64, error -71 [ 254.214212][ T942] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 254.256518][ T5277] usb usb3-port1: attempt power cycle [ 254.378271][ T942] usb 1-1: device descriptor read/64, error -71 [ 254.381146][ T7969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.589148][ T7969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.662081][ T942] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 254.693938][ T5277] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 254.736987][ T5277] usb 3-1: device descriptor read/8, error -71 [ 254.783236][ T7969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.825399][ T942] usb 1-1: device descriptor read/64, error -71 [ 254.944740][ T942] usb usb1-port1: attempt power cycle [ 254.980806][ T7969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.023874][ T5277] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 255.056544][ T5277] usb 3-1: device descriptor read/8, error -71 [ 255.208863][ T5277] usb usb3-port1: unable to enumerate USB device [ 255.254988][ T7969] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.276574][ T7969] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.292254][ T7969] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.308694][ T7969] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.384275][ T942] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 255.445113][ T942] usb 1-1: device descriptor read/8, error -71 [ 255.482131][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.576790][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.618270][ T6824] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.625552][ T6824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.669162][ T2579] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.676395][ T2579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.739911][ T942] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 255.795834][ T942] usb 1-1: device descriptor read/8, error -71 [ 255.884963][ T5307] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 255.925422][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.940928][ T942] usb usb1-port1: unable to enumerate USB device [ 255.969128][ T5233] Bluetooth: hci9: command tx timeout [ 255.973531][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.982061][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.064257][ T5307] usb 5-1: device descriptor read/64, error -71 [ 256.105923][ T7969] veth0_vlan: entered promiscuous mode [ 256.136461][ T7969] veth1_vlan: entered promiscuous mode [ 256.197019][ T25] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 256.232847][ T7969] veth0_macvtap: entered promiscuous mode [ 256.301130][ T7969] veth1_macvtap: entered promiscuous mode [ 256.325352][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.336202][ T5307] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 256.355549][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.367168][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.378226][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.388467][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.399032][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 256.399766][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.411793][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.414727][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.437160][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.443402][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.452390][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.474116][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.484735][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.496607][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.502615][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 256.507739][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.531388][ T5307] usb 5-1: device descriptor read/64, error -71 [ 256.538255][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.542254][ T25] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 256.551347][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.570303][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.582424][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.593917][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.607038][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.616194][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.618107][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.641348][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.654077][ T5307] usb usb5-port1: attempt power cycle [ 256.675911][ T25] usb 2-1: config 0 descriptor?? [ 256.683509][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.738979][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.749681][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.764989][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.775515][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.787591][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.798335][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.810361][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.823276][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.833946][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.850360][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.875400][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.892947][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.942248][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.968649][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.979828][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.990395][ T7969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.001527][ T7969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.014548][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.027013][ T7969] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.037758][ T7969] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.046968][ T7969] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.055878][ T7969] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.074609][ T5307] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 257.115554][ T5307] usb 5-1: device descriptor read/8, error -71 [ 257.364812][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.381156][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.429626][ T5307] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 257.504718][ T5307] usb 5-1: device descriptor read/8, error -71 [ 257.515097][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 257.521229][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.535862][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.551856][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.569185][ T25] usb 2-1: USB disconnect, device number 46 [ 257.634426][ T5307] usb usb5-port1: unable to enumerate USB device [ 258.028018][ T8055] FAULT_INJECTION: forcing a failure. [ 258.028018][ T8055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.044737][ T8055] CPU: 0 UID: 0 PID: 8055 Comm: syz.0.519 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 258.055475][ T8055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 258.065573][ T8055] Call Trace: [ 258.068856][ T8055] [ 258.071785][ T8055] dump_stack_lvl+0x241/0x360 [ 258.076478][ T8055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.081780][ T8055] ? __pfx__printk+0x10/0x10 [ 258.086437][ T8055] ? snprintf+0xda/0x120 [ 258.090685][ T8055] should_fail_ex+0x3b0/0x4e0 [ 258.095391][ T8055] _copy_to_user+0x2f/0xb0 [ 258.099802][ T8055] simple_read_from_buffer+0xca/0x150 [ 258.105169][ T8055] proc_fail_nth_read+0x1ec/0x260 [ 258.110623][ T8055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.116176][ T8055] ? rw_verify_area+0x520/0x6b0 [ 258.119027][ T5233] Bluetooth: hci9: command tx timeout [ 258.121062][ T8055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 258.131974][ T8055] vfs_read+0x204/0xbc0 [ 258.136180][ T8055] ? __pfx_lock_release+0x10/0x10 [ 258.141220][ T8055] ? __pfx_vfs_read+0x10/0x10 [ 258.145927][ T8055] ? __fget_files+0x29/0x470 [ 258.150620][ T8055] ? __fget_files+0x3f6/0x470 [ 258.155319][ T8055] ksys_read+0x1a0/0x2c0 [ 258.160093][ T8055] ? __pfx_ksys_read+0x10/0x10 [ 258.164854][ T8055] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 258.171445][ T8055] ? lockdep_hardirqs_on+0x99/0x150 [ 258.176640][ T8055] __do_fast_syscall_32+0xb4/0x110 [ 258.181749][ T8055] ? exc_page_fault+0x590/0x8c0 [ 258.186627][ T8055] do_fast_syscall_32+0x34/0x80 [ 258.191483][ T8055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 258.198004][ T8055] RIP: 0023:0xf7f1f579 [ 258.202078][ T8055] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 258.221788][ T8055] RSP: 002b:00000000f56855a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 258.230222][ T8055] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5685620 [ 258.238198][ T8055] RDX: 000000000000000f RSI: 00000000f73abff4 RDI: 0000000000000000 [ 258.246183][ T8055] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 258.254154][ T8055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 258.262120][ T8055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 258.270098][ T8055] [ 258.273255][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 258.439538][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.520'. [ 258.601488][ T8049] futex_wake_op: syz.3.495 tries to shift op by -1; fix this program [ 259.139795][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.526'. [ 259.469383][ T6824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.475898][ T5365] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 259.689441][ T6824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.717361][ T5365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 259.737711][ T5365] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 259.748744][ T5365] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 259.758990][ T5365] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 259.769851][ T5365] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 259.779795][ T5365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.795174][ T5365] usb 2-1: config 0 descriptor?? [ 260.017228][ T6824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.038015][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.116693][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.284097][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.292722][ T4624] Bluetooth: hci9: command tx timeout [ 260.329954][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.355288][ T6824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.472680][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 260.529275][ T5365] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 260.546969][ T5365] hdpvr 2-1:0.0: device init failed [ 260.552957][ T8089] FAULT_INJECTION: forcing a failure. [ 260.552957][ T8089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.576915][ T8089] CPU: 0 UID: 0 PID: 8089 Comm: syz.0.532 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 260.577964][ T5365] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 260.587527][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 260.587548][ T8089] Call Trace: [ 260.587559][ T8089] [ 260.587567][ T8089] dump_stack_lvl+0x241/0x360 [ 260.587597][ T8089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.587615][ T8089] ? __pfx__printk+0x10/0x10 [ 260.587638][ T8089] ? snprintf+0xda/0x120 [ 260.587660][ T8089] should_fail_ex+0x3b0/0x4e0 [ 260.587682][ T8089] _copy_to_user+0x2f/0xb0 [ 260.587705][ T8089] simple_read_from_buffer+0xca/0x150 [ 260.587728][ T8089] proc_fail_nth_read+0x1ec/0x260 [ 260.587750][ T8089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.587771][ T8089] ? rw_verify_area+0x520/0x6b0 [ 260.587789][ T8089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.587809][ T8089] vfs_read+0x204/0xbc0 [ 260.587827][ T8089] ? __pfx_lock_release+0x10/0x10 [ 260.675607][ T8089] ? __pfx_vfs_read+0x10/0x10 [ 260.680390][ T8089] ? __fget_files+0x29/0x470 [ 260.684996][ T8089] ? __fget_files+0x3f6/0x470 [ 260.689723][ T8089] ksys_read+0x1a0/0x2c0 [ 260.694101][ T8089] ? __pfx_ksys_read+0x10/0x10 [ 260.698863][ T8089] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 260.705460][ T8089] ? lockdep_hardirqs_on+0x99/0x150 [ 260.710660][ T8089] __do_fast_syscall_32+0xb4/0x110 [ 260.715816][ T8089] ? exc_page_fault+0x590/0x8c0 [ 260.720936][ T8089] do_fast_syscall_32+0x34/0x80 [ 260.725784][ T8089] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 260.732121][ T8089] RIP: 0023:0xf7f1f579 [ 260.736191][ T8089] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 260.755811][ T8089] RSP: 002b:00000000f56a65a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 260.764321][ T8089] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f56a6620 [ 260.772285][ T8089] RDX: 000000000000000f RSI: 00000000f73abff4 RDI: 0000000000000000 [ 260.780249][ T8089] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 260.788236][ T8089] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.796201][ T8089] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.804174][ T8089] [ 260.867581][ T5365] usb 2-1: USB disconnect, device number 47 [ 261.174799][ T6824] vlan0: left allmulticast mode [ 261.181832][ T6824] veth0_vlan: left allmulticast mode [ 261.188505][ T6824] vlan0: left promiscuous mode [ 261.194150][ T6824] bridge0: port 3(vlan0) entered disabled state [ 261.267395][ T6824] bridge_slave_1: left allmulticast mode [ 261.277022][ T6824] bridge_slave_1: left promiscuous mode [ 261.282885][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.298631][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.310854][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.321541][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.331323][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.340614][ T6824] bridge_slave_0: left allmulticast mode [ 261.353400][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.368136][ T6824] bridge_slave_0: left promiscuous mode [ 261.368157][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.395374][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.444037][ T5279] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 261.646851][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 261.691921][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 261.707836][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 261.736695][ T5279] usb 5-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 261.784075][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.827730][ T5279] usb 5-1: Product: syz [ 261.832054][ T5279] usb 5-1: Manufacturer: syz [ 261.836827][ T5279] usb 5-1: SerialNumber: syz [ 261.844164][ T5279] usb 5-1: config 0 descriptor?? [ 262.057149][ T5279] powermate: unknown product id 0240 [ 262.062490][ T5279] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 262.075829][ T5279] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 262.093856][ T5279] usb 5-1: USB disconnect, device number 33 [ 262.385859][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 262.497828][ T6824] team0: Port device bridge1 removed [ 262.586776][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.598901][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.620288][ T8] usb 4-1: config 0 descriptor?? [ 262.630574][ T8] cp210x 4-1:0.0: cp210x converter detected [ 262.921899][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.940349][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.957775][ T6824] bond0 (unregistering): Released all slaves [ 262.994061][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.534'. [ 263.054804][ T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 263.412782][ T5232] Bluetooth: hci5: command tx timeout [ 263.505273][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 263.794297][ T8] usb 4-1: USB disconnect, device number 22 [ 263.824337][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.864861][ T8] cp210x 4-1:0.0: device disconnected [ 264.281956][ T6824] hsr_slave_0: left promiscuous mode [ 264.306055][ T6824] hsr_slave_1: left promiscuous mode [ 264.334563][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.353945][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.397624][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.454308][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.661268][ T6824] veth1_macvtap: left promiscuous mode [ 264.744099][ T6824] veth0_macvtap: left promiscuous mode [ 264.754104][ T6824] veth1_vlan: left promiscuous mode [ 264.785632][ T6824] veth0_vlan: left promiscuous mode [ 265.007172][ T5279] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 265.058318][ T4624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.068740][ T4624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.084759][ T4624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.092944][ T4624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.101786][ T4624] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 265.114037][ T4624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.213867][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 265.223877][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 265.258013][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.274692][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.291499][ T5279] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.309910][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.319444][ T5279] usb 5-1: Product: syz [ 265.324121][ T5279] usb 5-1: Manufacturer: syz [ 265.348274][ T5279] usb 5-1: SerialNumber: syz [ 265.397346][ T5279] usb 5-1: config 0 descriptor?? [ 265.427750][ T5279] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.458752][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.489043][ T5232] Bluetooth: hci5: command tx timeout [ 265.498736][ T5279] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 265.512742][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 265.527960][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 265.539809][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 265.550528][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 265.569084][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.589692][ T8] usb 4-1: config 0 descriptor?? [ 265.825680][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.836210][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.920842][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.938587][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.079050][ T5279] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 266.087148][ T5279] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 266.436261][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 266.605432][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 266.719670][ T5279] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 267.177802][ T5232] Bluetooth: hci0: command tx timeout [ 267.565872][ T5232] Bluetooth: hci5: command tx timeout [ 267.571512][ T5279] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 267.584623][ T5279] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 267.592583][ T5279] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 267.636592][ T8139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.545'. [ 267.646381][ T5279] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 267.658287][ T5279] usb 5-1: USB disconnect, device number 34 [ 267.761301][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 267.773217][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 267.785339][ T8] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 267.824770][ T8] hdpvr 4-1:0.0: device init failed [ 267.830104][ T8] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 267.886468][ T8] usb 4-1: USB disconnect, device number 23 [ 268.075558][ T8100] chnl_net:caif_netlink_parms(): no params data found [ 268.580990][ T8172] ptrace attach of "./syz-executor exec"[7461] was attempted by "./syz-executor exec"[8172] [ 268.800407][ T8100] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.887993][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.933993][ T8100] bridge_slave_0: entered allmulticast mode [ 268.975778][ T8100] bridge_slave_0: entered promiscuous mode [ 269.032953][ T8100] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.087647][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.098866][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.121624][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.130024][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.138925][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.159793][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.167982][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.182710][ T8100] bridge_slave_1: entered allmulticast mode [ 269.190777][ T8100] bridge_slave_1: entered promiscuous mode [ 269.244004][ T5232] Bluetooth: hci0: command tx timeout [ 269.408049][ T8100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.579887][ T8100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.650016][ T5232] Bluetooth: hci5: command tx timeout [ 269.972865][ T8100] team0: Port device team_slave_0 added [ 270.013515][ T8100] team0: Port device team_slave_1 added [ 270.176804][ T6824] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.251425][ T8144] chnl_net:caif_netlink_parms(): no params data found [ 270.460492][ T6824] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.635902][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.652351][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.681452][ T8100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.699022][ T8100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.706949][ T8100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.759902][ T8100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.820527][ T6824] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.923029][ T8200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 271.003364][ T6824] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.244307][ T5232] Bluetooth: hci4: command tx timeout [ 271.327345][ T5232] Bluetooth: hci0: command tx timeout [ 271.342530][ T8100] hsr_slave_0: entered promiscuous mode [ 271.376385][ T8100] hsr_slave_1: entered promiscuous mode [ 271.405942][ T8100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.425031][ T8100] Cannot create hsr debugfs directory [ 271.713588][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.740453][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.765348][ T8144] bridge_slave_0: entered allmulticast mode [ 271.794731][ T8144] bridge_slave_0: entered promiscuous mode [ 272.013220][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.042646][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.062293][ T8144] bridge_slave_1: entered allmulticast mode [ 272.085939][ T8144] bridge_slave_1: entered promiscuous mode [ 272.146637][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.160017][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.170364][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.195612][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.209923][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.221089][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.330839][ T8185] chnl_net:caif_netlink_parms(): no params data found [ 272.359299][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.375505][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.447130][ T6824] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.637578][ T6824] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.669998][ T8144] team0: Port device team_slave_0 added [ 272.762137][ T6824] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.796319][ T8144] team0: Port device team_slave_1 added [ 272.875494][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.884744][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.910666][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.917975][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.970305][ T6824] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.061759][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.082167][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.130618][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.247565][ T8185] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.255067][ T8185] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.262417][ T8185] bridge_slave_0: entered allmulticast mode [ 273.272314][ T8185] bridge_slave_0: entered promiscuous mode [ 273.323920][ T4624] Bluetooth: hci4: command tx timeout [ 273.404260][ T4624] Bluetooth: hci0: command tx timeout [ 273.426253][ T8185] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.434505][ T8185] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.441853][ T8185] bridge_slave_1: entered allmulticast mode [ 273.452686][ T8185] bridge_slave_1: entered promiscuous mode [ 273.670454][ T8185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.985152][ T8144] hsr_slave_0: entered promiscuous mode [ 274.032613][ T8144] hsr_slave_1: entered promiscuous mode [ 274.055991][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.085917][ T8144] Cannot create hsr debugfs directory [ 274.169043][ T8185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.286785][ T4624] Bluetooth: hci3: command tx timeout [ 274.387427][ T5232] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 274.400267][ T5232] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 274.425555][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 274.446510][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 274.459304][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 274.473204][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 274.683131][ T8185] team0: Port device team_slave_0 added [ 274.720676][ T6824] bridge_slave_1: left allmulticast mode [ 274.740148][ T6824] bridge_slave_1: left promiscuous mode [ 274.753805][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.771267][ T6824] bridge_slave_0: left allmulticast mode [ 274.797931][ T6824] bridge_slave_0: left promiscuous mode [ 274.820040][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.832660][ T6824] bridge_slave_1: left allmulticast mode [ 274.839091][ T6824] bridge_slave_1: left promiscuous mode [ 274.846023][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.875460][ T6824] bridge_slave_0: left allmulticast mode [ 274.884537][ T6824] bridge_slave_0: left promiscuous mode [ 274.890320][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.405267][ T4624] Bluetooth: hci4: command tx timeout [ 275.834163][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.848041][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.860434][ T6824] bond0 (unregistering): Released all slaves [ 276.041512][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.055797][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.077198][ T6824] bond0 (unregistering): Released all slaves [ 276.096955][ T8185] team0: Port device team_slave_1 added [ 276.364262][ T4624] Bluetooth: hci3: command tx timeout [ 276.370482][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.378152][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.404780][ T8185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.420246][ T8225] chnl_net:caif_netlink_parms(): no params data found [ 276.524154][ T4624] Bluetooth: hci9: command tx timeout [ 276.565566][ T8185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.572647][ T8185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.599386][ T8185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.017048][ T8100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.034593][ T8100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.048625][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.056141][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.063419][ T8225] bridge_slave_0: entered allmulticast mode [ 277.080583][ T8225] bridge_slave_0: entered promiscuous mode [ 277.099345][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.109427][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.119699][ T8225] bridge_slave_1: entered allmulticast mode [ 277.142840][ T8225] bridge_slave_1: entered promiscuous mode [ 277.215040][ T8100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.239136][ T8100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.292663][ T8185] hsr_slave_0: entered promiscuous mode [ 277.301495][ T8185] hsr_slave_1: entered promiscuous mode [ 277.309657][ T8185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.318139][ T8185] Cannot create hsr debugfs directory [ 277.409501][ T8225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.484042][ T4624] Bluetooth: hci4: command tx timeout [ 277.560510][ T8225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.767608][ T6824] hsr_slave_0: left promiscuous mode [ 277.776476][ T6824] hsr_slave_1: left promiscuous mode [ 277.787438][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.795319][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.805466][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.813064][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.831071][ T6824] hsr_slave_0: left promiscuous mode [ 277.841255][ T6824] hsr_slave_1: left promiscuous mode [ 277.851708][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.860201][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.870587][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.939727][ T6824] veth0_macvtap: left promiscuous mode [ 277.945585][ T6824] veth1_vlan: left promiscuous mode [ 277.952924][ T6824] veth0_vlan: left promiscuous mode [ 277.975930][ T6824] veth1_macvtap: left promiscuous mode [ 277.981520][ T6824] veth0_macvtap: left promiscuous mode [ 277.987955][ T6824] veth1_vlan: left promiscuous mode [ 277.993295][ T6824] veth0_vlan: left promiscuous mode [ 278.453967][ T4624] Bluetooth: hci3: command tx timeout [ 278.610672][ T4624] Bluetooth: hci9: command tx timeout [ 278.954486][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 279.014928][ T30] INFO: task syz.3.167:6200 blocked for more than 143 seconds. [ 279.032584][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 279.053078][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 279.064197][ T30] task:syz.3.167 state:D stack:22928 pid:6200 tgid:6199 ppid:5745 flags:0x20000004 [ 279.082765][ T30] Call Trace: [ 279.103855][ T30] [ 279.107221][ T30] __schedule+0x1800/0x4a60 [ 279.112171][ T30] ? __pfx___schedule+0x10/0x10 [ 279.150716][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.156359][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 279.162753][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.169920][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 279.175206][ T30] ? schedule+0x90/0x320 [ 279.181426][ T30] schedule+0x14b/0x320 [ 279.186171][ T30] ? down_read+0x6a5/0xa40 [ 279.190633][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.196229][ T30] down_read+0x705/0xa40 [ 279.200521][ T30] ? __pfx_down_read+0x10/0x10 [ 279.205518][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 279.211369][ T30] ? I_BDEV+0xd/0x20 [ 279.215729][ T30] filemap_get_pages+0x49d/0x2090 [ 279.221189][ T30] ? finish_task_switch+0x2cf/0x870 [ 279.227878][ T30] ? __pfx_filemap_get_pages+0x10/0x10 [ 279.233923][ T30] ? __pfx___might_resched+0x10/0x10 [ 279.239262][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 279.246017][ T30] filemap_read+0x457/0xfa0 [ 279.250958][ T30] ? __pfx_filemap_read+0x10/0x10 [ 279.256450][ T30] ? end_current_label_crit_section+0x151/0x180 [ 279.262722][ T30] ? common_file_perm+0x1a6/0x210 [ 279.267985][ T30] blkdev_read_iter+0x2df/0x440 [ 279.273250][ T30] vfs_read+0x9bd/0xbc0 [ 279.277896][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.285298][ T30] ? __pfx_vfs_read+0x10/0x10 [ 279.290479][ T30] ? do_futex+0x392/0x560 [ 279.295293][ T30] ksys_read+0x1a0/0x2c0 [ 279.299941][ T30] ? __pfx_ksys_read+0x10/0x10 [ 279.305242][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 279.312276][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 279.317687][ T30] __do_fast_syscall_32+0xb4/0x110 [ 279.322849][ T30] ? exc_page_fault+0x590/0x8c0 [ 279.327893][ T30] do_fast_syscall_32+0x34/0x80 [ 279.332777][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.340608][ T30] RIP: 0023:0xf73bd579 [ 279.345194][ T30] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 279.354163][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020002380 [ 279.362730][ T30] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.371338][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.379762][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 279.390193][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.398621][ T30] [ 279.401792][ T30] [ 279.401792][ T30] Showing all locks held in the system: [ 279.411849][ T30] 3 locks held by kworker/u8:0/11: [ 279.417123][ T30] 3 locks held by kworker/u8:1/12: [ 279.422251][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 279.434325][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 279.436323][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 279.460717][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 279.491180][ T30] 3 locks held by kworker/1:0H/26: [ 279.507280][ T30] #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 279.518164][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 279.530012][ T30] #2: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: blk_mq_run_work_fn+0x9b/0x2f0 [ 279.540651][ T30] 1 lock held by khungtaskd/30: [ 279.546265][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 279.557088][ T30] 3 locks held by kworker/u8:5/1001: [ 279.562733][ T30] #0: ffff888030172148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 279.577553][ T30] #1: ffffc90003e07d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 279.593005][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 279.602857][ T30] 2 locks held by syslogd/4668: [ 279.609014][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 279.620300][ T30] #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 279.632530][ T30] 2 locks held by dhcpcd/4900: [ 279.637979][ T30] #0: ffff8880281fb678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 279.649327][ T30] #1: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 279.659021][ T30] 2 locks held by getty/4986: [ 279.664547][ T30] #0: ffff888030bd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 279.675236][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 279.688787][ T30] 1 lock held by syz.2.144/6078: [ 279.696509][ T30] 1 lock held by syz.3.167/6200: [ 279.701861][ T30] #0: ffff88802313e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 279.713547][ T30] 5 locks held by kworker/u8:10/6824: [ 279.719904][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 279.731699][ T30] #1: ffffc9000338fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 279.742546][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 279.752345][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 279.763608][ T30] #4: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 279.774889][ T30] 1 lock held by syz.3.290/7042: [ 279.779847][ T30] #0: ffff88802313e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 279.790613][ T30] 1 lock held by syz.3.317/7278: [ 279.799665][ T30] #0: ffff88802313e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 279.811215][ T30] 1 lock held by syz.3.471/7820: [ 279.816769][ T30] #0: ffff88802313e540 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 279.827882][ T30] 1 lock held by syz-executor/8100: [ 279.833403][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.843390][ T30] 7 locks held by syz-executor/8144: [ 279.849136][ T30] #0: ffff888035556420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 279.858643][ T30] #1: ffff888011b2e488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 279.868628][ T30] #2: ffff8880284ed878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 279.879308][ T30] #3: ffffffff8f5265e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 279.890219][ T30] #4: ffff888078fbf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 279.903220][ T30] #5: ffff888078fbe250 (&devlink->lock_key#18){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 279.915342][ T30] #6: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 279.926698][ T30] 1 lock held by syz-executor/8185: [ 279.932273][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.942148][ T30] 1 lock held by syz-executor/8225: [ 279.947905][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 279.957798][ T30] 1 lock held by syz-executor/8247: [ 279.963031][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 279.972436][ T30] [ 279.974946][ T30] ============================================= [ 279.974946][ T30] [ 279.983943][ T30] NMI backtrace for cpu 0 [ 279.988317][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 279.998841][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.008922][ T30] Call Trace: [ 280.012206][ T30] [ 280.015153][ T30] dump_stack_lvl+0x241/0x360 [ 280.019884][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.025115][ T30] ? __pfx__printk+0x10/0x10 [ 280.029723][ T30] ? vprintk_emit+0x667/0x7c0 [ 280.034514][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 280.039547][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 280.044509][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.049986][ T30] ? _printk+0xd5/0x120 [ 280.054146][ T30] ? __pfx__printk+0x10/0x10 [ 280.058747][ T30] ? __wake_up_klogd+0xcc/0x110 [ 280.063595][ T30] ? __pfx__printk+0x10/0x10 [ 280.068205][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 280.073236][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.079225][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 280.085206][ T30] watchdog+0xff4/0x1040 [ 280.089452][ T30] ? watchdog+0x1ea/0x1040 [ 280.093884][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.098559][ T30] kthread+0x2f0/0x390 [ 280.102624][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.107329][ T30] ? __pfx_kthread+0x10/0x10 [ 280.111915][ T30] ret_from_fork+0x4b/0x80 [ 280.116330][ T30] ? __pfx_kthread+0x10/0x10 [ 280.120911][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.125719][ T30] [ 280.130359][ T30] Sending NMI from CPU 0 to CPUs 1: [ 280.136767][ C1] NMI backtrace for cpu 1 [ 280.136781][ C1] CPU: 1 UID: 0 PID: 5365 Comm: kworker/1:8 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 280.136801][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.136811][ C1] Workqueue: events nsim_dev_trap_report_work [ 280.136833][ C1] RIP: 0010:deref_stack_reg+0x1/0x260 [ 280.136856][ C1] Code: 25 80 b9 00 e9 60 fe ff ff e8 eb 54 78 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 83 ec 28 49 89 d6 48 89 34 24 48 89 [ 280.136869][ C1] RSP: 0018:ffffc9000423f4f8 EFLAGS: 00000287 [ 280.136882][ C1] RAX: fffffffffffffff0 RBX: ffffffff911ddb9a RCX: 0000000000000000 [ 280.136894][ C1] RDX: ffffc9000423f620 RSI: ffffc9000423fad8 RDI: ffffc9000423f5e0 [ 280.136906][ C1] RBP: ffffc9000423f5e0 R08: 0000000000000005 R09: ffffffff814140bf [ 280.136918][ C1] R10: 0000000000000003 R11: ffff88802fc20000 R12: ffffc9000423fae0 [ 280.136929][ C1] R13: dffffc0000000000 R14: ffffc9000423f630 R15: 1ffff92000847ebc [ 280.136941][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 280.136956][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.136968][ C1] CR2: 00007ffd0d27cfd8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 280.136982][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.136997][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.137008][ C1] Call Trace: [ 280.137014][ C1] [ 280.137021][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 280.137040][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 280.137062][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 280.137080][ C1] ? nmi_handle+0x2a/0x5a0 [ 280.137103][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 280.137121][ C1] ? nmi_handle+0x14f/0x5a0 [ 280.137136][ C1] ? nmi_handle+0x2a/0x5a0 [ 280.137152][ C1] ? deref_stack_reg+0x1/0x260 [ 280.137171][ C1] ? default_do_nmi+0x63/0x160 [ 280.137189][ C1] ? exc_nmi+0x123/0x1f0 [ 280.137208][ C1] ? end_repeat_nmi+0xf/0x53 [ 280.137229][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 280.137251][ C1] ? deref_stack_reg+0x1/0x260 [ 280.137270][ C1] ? deref_stack_reg+0x1/0x260 [ 280.137291][ C1] ? deref_stack_reg+0x1/0x260 [ 280.137310][ C1] [ 280.137316][ C1] [ 280.137322][ C1] unwind_next_frame+0x1ab8/0x2a00 [ 280.137347][ C1] ? consume_skb+0xb1/0x160 [ 280.137365][ C1] ? consume_skb+0xb1/0x160 [ 280.137381][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 280.137400][ C1] arch_stack_walk+0x151/0x1b0 [ 280.137419][ C1] ? nsim_dev_trap_report_work+0x765/0xaa0 [ 280.137437][ C1] stack_trace_save+0x118/0x1d0 [ 280.137456][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 280.137478][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.137499][ C1] kasan_save_track+0x3f/0x80 [ 280.137518][ C1] ? kasan_save_track+0x3f/0x80 [ 280.137534][ C1] ? kasan_save_free_info+0x40/0x50 [ 280.137550][ C1] ? poison_slab_object+0xe0/0x150 [ 280.137568][ C1] ? __kasan_slab_free+0x37/0x60 [ 280.137585][ C1] ? kfree+0x149/0x360 [ 280.137615][ C1] ? skb_release_data+0x676/0x880 [ 280.137632][ C1] ? consume_skb+0xb1/0x160 [ 280.137672][ C1] ? skb_release_data+0x676/0x880 [ 280.137689][ C1] kasan_save_free_info+0x40/0x50 [ 280.137705][ C1] poison_slab_object+0xe0/0x150 [ 280.137725][ C1] __kasan_slab_free+0x37/0x60 [ 280.137743][ C1] ? skb_release_data+0x676/0x880 [ 280.137760][ C1] kfree+0x149/0x360 [ 280.137777][ C1] skb_release_data+0x676/0x880 [ 280.137800][ C1] consume_skb+0xb1/0x160 [ 280.137818][ C1] nsim_dev_trap_report_work+0x765/0xaa0 [ 280.137843][ C1] ? process_scheduled_works+0x945/0x1830 [ 280.137862][ C1] process_scheduled_works+0xa2c/0x1830 [ 280.137895][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.137918][ C1] ? assign_work+0x364/0x3d0 [ 280.137939][ C1] worker_thread+0x870/0xd30 [ 280.137962][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 280.137986][ C1] ? __kthread_parkme+0x169/0x1d0 [ 280.138011][ C1] ? __pfx_worker_thread+0x10/0x10 [ 280.138029][ C1] kthread+0x2f0/0x390 [ 280.138043][ C1] ? __pfx_worker_thread+0x10/0x10 [ 280.138061][ C1] ? __pfx_kthread+0x10/0x10 [ 280.138075][ C1] ret_from_fork+0x4b/0x80 [ 280.138094][ C1] ? __pfx_kthread+0x10/0x10 [ 280.138108][ C1] ret_from_fork_asm+0x1a/0x30 [ 280.138136][ C1] [ 280.204199][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 280.204218][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 280.204240][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.204251][ T30] Call Trace: [ 280.204258][ T30] [ 280.204266][ T30] dump_stack_lvl+0x241/0x360 [ 280.204292][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.204311][ T30] ? __pfx__printk+0x10/0x10 [ 280.204326][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.204354][ T30] ? vscnprintf+0x5d/0x90 [ 280.204376][ T30] panic+0x349/0x860 [ 280.204395][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.204417][ T30] ? __pfx_panic+0x10/0x10 [ 280.204431][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 280.204451][ T30] ? __irq_work_queue_local+0x137/0x410 [ 280.204474][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 280.204492][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.204512][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 280.204535][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 280.204559][ T30] watchdog+0x1033/0x1040 [ 280.204582][ T30] ? watchdog+0x1ea/0x1040 [ 280.204609][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.204630][ T30] kthread+0x2f0/0x390 [ 280.204646][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.204667][ T30] ? __pfx_kthread+0x10/0x10 [ 280.204684][ T30] ret_from_fork+0x4b/0x80 [ 280.204705][ T30] ? __pfx_kthread+0x10/0x10 [ 280.204720][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.204753][ T30] [ 280.206557][ T30] Kernel Offset: disabled [ 280.726335][ T30] Rebooting in 86400 seconds..