last executing test programs: 21.084137998s ago: executing program 0 (id=4511): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x2041}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0xfff5}}}, 0x10, 0x0}, 0x0) 20.921636469s ago: executing program 0 (id=4513): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000980)={0x30, 0x7}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) socket(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x232242, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000000), 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e4f3b39d00023b02000008000300", @ANYRES32=r6, @ANYBLOB="22003300d000000008021100000108021100000050505050505000000904000000000000"], 0x40}}, 0x0) gettid() r7 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) 18.983174152s ago: executing program 0 (id=4522): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000001440)={&(0x7f0000a88000/0x3000)=nil, &(0x7f00007f3000/0x4000)=nil, 0x3000, 0x4}) close_range(r1, 0xffffffffffffffff, 0x1fffefff) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000300)={0x0, 0x3000000}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x3a, 0xbd, 0x3e, 0x20, 0x9e1, 0x5121, 0xccbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x75, 0x29, 0x23}}]}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601400107a0a000900050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 18.0196031s ago: executing program 0 (id=4524): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101201) ioctl$USBDEVFS_IOCTL(r1, 0x8008551c, &(0x7f00000000c0)=@usbdevfs_driver={0x0, 0x1, 0x0}) r2 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r4 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000001100)=[{r2}], 0x1, 0x0, 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f00000001c0)=""/104, 0x68}], 0x2, 0x12, 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x48}}, 0x0) r7 = io_uring_setup(0x253d, &(0x7f0000000180)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x82, 0x0) io_setup(0xff, &(0x7f0000000080)=0x0) io_submit(r9, 0x7, &(0x7f0000000040)=[&(0x7f0000000000)={0x2, 0x960010, 0x0, 0x0, 0x0, r8, &(0x7f00000001c0)="10000040030000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0474c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127afce74b41c9ef761c96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0xffffff15, 0x0, 0x0, 0x2}]) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') setsockopt$inet6_int(r10, 0x29, 0x13, &(0x7f00000002c0)=0x7, 0x4) getsockopt$inet_udp_int(r5, 0x11, 0x0, 0x0, &(0x7f0000000240)) 13.235973348s ago: executing program 3 (id=4544): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5955}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = socket(0x0, 0x800, 0x8a) syz_io_uring_setup(0x3a66, &(0x7f0000000440)={0x0, 0x1310, 0x400, 0x3, 0x106}, &(0x7f00000000c0), &(0x7f00000004c0)) syz_io_uring_setup(0x6908, &(0x7f00000002c0)={0x0, 0xe986, 0x10100, 0x1}, &(0x7f0000000200), &(0x7f0000000500)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000240)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1d0000000000000000000a000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="36c42dbd7000fddbdf250a00000028000b801400020070696d72656731000000000000000000060004000180000008000100000000003800038008000100000000000600040001010000050008003d000000080005006401010114000600fe88000000000000000000000000000140000180060002002c000000080005000200000014000300fc000000000000000000000000000000060002002c000000060001000a000000080008000700000014000180080008006e080000060004004e2400000800060005000000"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x4) 12.206867796s ago: executing program 3 (id=4548): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) io_setup(0x5, &(0x7f0000001540)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = eventfd(0x1) io_cancel(r1, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000002180)="db53787f44383956743e1e79290d05a46a5f0e4bad95200fbb8c1daae9da42fde84bd4c170b10c99f229a2b6fa6f1d777244d8c1d59d97f6a102d4d568c62b5334116a08549290e435980944e5c2c5b228813d38682e51", 0x57, 0x4, 0x0, 0x1, r3}, &(0x7f0000002240)) r4 = io_uring_setup(0x5923, &(0x7f0000000100)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x17, 0x20000000, r5) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r6, 0x0, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000002380)='map_files\x00') getdents64(r9, &(0x7f0000000140)=""/4087, 0x18) getdents(r9, &(0x7f0000001140)=""/4096, 0x1000) ioctl$PTP_ENABLE_PPS(r9, 0x40043d04, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000002140)) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11.421739764s ago: executing program 3 (id=4550): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={0x0, 0x6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019980)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3a, 0x4, 0x0, 0x0, 0xe8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@multicast1}, {@remote}, {@dev}, {@empty}, {@multicast1}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2}, {@private}, {}, {@broadcast, 0x2}, {@multicast2}]}, @noop, @timestamp_addr={0x44, 0x24, 0x23, 0x1, 0x3, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x3}, {@local, 0x6}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @multicast1, @multicast1, @remote]}]}}}}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3ed9, &(0x7f0000000080)={0x0, 0x5708, 0x200, 0x2, 0x1, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000400)=[{0x200000000006, 0xff, 0x0, 0x7ffc0002}, {0xa, 0xb, 0x4f}]}) r3 = epoll_create1(0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_pwait2(r3, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a0006002fc099239c53000008244400000000000500190104000000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="50000000ffffffffffff080211000000080211000000000000000000000000006402020202020201000301047206030303030303"], 0x39) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000019640)=ANY=[@ANYBLOB="b031eadae0e9a42dac255cdda07fad8eca6a01000008021100d50c08021100a08a43b31a33eb5d6e841e7038aea23c0c4a9805fae8566e08da7fa8169934534ec630d37afeb9569fcc4ea85fe17c8ac9d65f0619d950906fa6a6e32a09e52a40f17cf9be73dfa0e70d50df1c3780eb66aaf46fc3ebaafe58b2e0f70e3a411bbbc0da03123c74d444152d263cd310c52019d894bc71ab5aadfe7ee5795eb051eeb297e840d55f00bdde70e21efb74e0c8eac72a04485ccc7efe8f82d34f38727c4b7b922380809f8830a07be88ecdd71b1036e595"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@ctrl_frame=@ba={{}, {0x7fe1}, @device_b, @device_a, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x80}, "cc506dc73cec3093"}}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040601020000000400000000000000000500010007"], 0x1c}}, 0x0) 9.663787682s ago: executing program 1 (id=4552): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872360611f2a5176b240000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff08021100000050505050505000000000000000"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfff6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x8040001) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be7070101080a4e7719b506a0977b", 0xffbf}], 0x1}, 0x0) 7.945364349s ago: executing program 1 (id=4557): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5955}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = socket(0x0, 0x800, 0x8a) syz_io_uring_setup(0x3a66, &(0x7f0000000440)={0x0, 0x1310, 0x400, 0x3, 0x106}, &(0x7f00000000c0), &(0x7f00000004c0)) syz_io_uring_setup(0x6908, &(0x7f00000002c0)={0x0, 0xe986, 0x10100, 0x1}, &(0x7f0000000200), &(0x7f0000000500)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000240)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1d0000000000000000000a000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="36c42dbd7000fddbdf250a00000028000b801400020070696d72656731000000000000000000060004000180000008000100000000003800038008000100000000000600040001010000050008003d000000080005006401010114000600fe88000000000000000000000000000140000180060002002c000000080005000200000014000300fc000000000000000000000000000000060002002c000000060001000a000000080008000700000014000180080008006e080000060004004e2400000800060005000000"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x4) 7.536989854s ago: executing program 4 (id=4558): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x313280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x6f4}}, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r9 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(r9, &(0x7f0000002700)={0x2020}, 0x2020) sendfile(r9, r9, 0x0, 0x7ffff000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r11 = dup(0xffffffffffffffff) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r12 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x431, 0x4000) r13 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x37}}, @NL80211_ATTR_PID={0x8, 0x52, r10}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}}, 0x0) 7.187833795s ago: executing program 3 (id=4560): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000431d1c40c9309300c6180102030309021200010000000009040000000e0101805e32dbdd09401b64858540117b665ebaf36deb94b3748232708b2ce37318972731e97b3f59910963b9a9ab470b82d5fa47feda842ad958744abb0d7738f56928c586c02cf5cb721e704f867babc46236dff2a7aad5eec3445e77de81a602520baba926b6e7580cb448fe263705a01b1ef2891baf9c47458ca2a20b94d6d8d5c869d1421d7e19fe005506631aa9ab70b211c04591aee3ead9a0df5316e955b1ea746c"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="500000008daa50f291a7eed4abe319d78e28c641ad7a6e787f2cd323c4f4c6768d59683bbf419e9a78f4bd8a4a8d7f93aae370ab703f0eeea3a322076bba3d03011c2f4a934f047ebfdae3d3229be014aa60669afe1641", @ANYRES64=0x0, @ANYBLOB="000129bd7000ffdbdf2503000000080003000000004008000300080000000800020046f41ff6050005000200000008000400010000000800030051000000040004000800030002000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, 0x0, 0xb0) write$proc_mixer(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030303030303030617374657220506c61796261636b272030303030303030303030303030303030303030300a4c494e45330a4c494e453120274d617374657220506c61796261636b20537769746368272020303030303030301377303030303030303030300a564f4c554d450a4c494e45202753796e74682043617074757265272030303030303030303030303030303030303030"], 0xf7) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 7.028204333s ago: executing program 1 (id=4561): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$uac1(r2, &(0x7f0000000080)={0x14, &(0x7f0000000180)={0x0, 0x23, 0x69, {0x69, 0x5, "0533976f39464cb54f14fb135a63013ad5970983235587e90da46252e1cfa6724653827b07363e75cf063b438d30efff213b25e31b5094c7f27e0d19cdf1dd59403f293a2ee077e3ac66b70b912863cbb8e5e51aa51062440ff8415c104dda6abb838582026c73"}}, &(0x7f0000000340)={0x0, 0x3, 0x55, @string={0x55, 0x3, "89837a6dd98368ca0928b8c27236d89159f7c68644abce6e95afae0fc09a49fdb0ef3358a4aba578763b89772567c9648c645348c6fae62297f711e184d297e43e0b6bb63d80ebe674dc8eeaf80252f3a6a905"}}}, &(0x7f0000000640)={0x44, &(0x7f00000003c0)={0x0, 0x7, 0xac, "7a39e2a78ae1cbad0afad516e7bd4af28c5c718c4c4ffc9838ac23ab4c92a8938bc84478efe4cc2fed451f73319f96fd115735902f552a2a8bd94379c93ea9c93d5b88edf0aff214599eea4b73e85550b4fbb234bd6a933014f555bb019da8ab46af45502b458c9798b5403c2a9b767aaf0e4981862b105c6579e23ee0b9d0dc425a8e91f41467eb49e8b244680518c3b3413fa8b31eda1fdebb26245f749b4fca46c3ce6896882b289a3d83"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x81, 0x1, "8b"}, &(0x7f0000000540)={0x20, 0x82, 0x2, "b66a"}, &(0x7f0000000580)={0x20, 0x83, 0x3, "e120d6"}, &(0x7f00000005c0)={0x20, 0x84, 0x3, "1dc3ce"}, &(0x7f0000000600)={0x20, 0x85, 0x3, "c5c773"}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0e000410"], 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x50, 0xffffffffffffffff, 0x9f244000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x80001) 6.574422333s ago: executing program 4 (id=4562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1, &(0x7f0000000300)={0x0, 0x4000000}, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4900330080000000ffffffffffff08021100000050505050505000000000000000000000000000000100040600000000000025030000002a01003c040000"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x2c, &(0x7f0000000140)={0x10000, 0x16, 0xd2000000}, 0x4) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r10) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1b02, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x0, 0x38, {0x9, 0x21, 0x5a9d, 0x5}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x80, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x7f}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x0, 0x46, 0x0, 0x0, 0x8, 0x2}, 0xc, &(0x7f0000000280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x1, 0xe8}]}, 0x6, [{0x0, 0x0}, {0x3, &(0x7f0000000380)=@string={0x3, 0x3, "be"}}, {0x2d, &(0x7f00000000c0)=@string={0x2d, 0x3, "fff5c6413b582adf3dcf714785929f934416d465aa6d8a5ddbc6a40cf145f6a0277a44abe42e1248c23f19"}}, {0x28, &(0x7f0000000400)=@string={0x28, 0x3, "031c6bbdd0612af64cfa4d05aa72791af8caffa7ca3f7f971a50274d02fe5d5cefd8a960227a"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) 6.256067127s ago: executing program 2 (id=4563): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000001080)={0x1, 0x5000000}) 6.073436056s ago: executing program 2 (id=4564): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f0000000440)=0x8000000002000009) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0xf2f41, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002abdaa00fcdbdf250300b0000009f0000073797a3100000000140002007665746830da41a14bdb9dadbb88c44615a217be085f746f5f7465616d0000009dff030073797a31000000003bdf5d6a864c52a08ce6eb23e9d74b2359bb3060f6fc8f908dd443ae98da3d047e63a3d3cdbe28a9710a6ab22c8cf4e22843bb4b8143d68fac0d57f96e77a49befd20770e5c21c9d855767da00c6c4791d3ff65ab75393e945c8aebab68c12769e3a24af79914ca649b545b30cec2ae21ce37ac8e365f4ea49aec922e66799c059d1db5095fd9eacdd1f855670c874783c9bc3f4b5b32e9e193a25"], 0x50}, 0x1, 0x0, 0x0, 0xd22b0c50509306aa}, 0x24004894) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x320}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r3) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@dev, 0x800, 0x0, 0x3, 0x1}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffee5, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0xa}}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0xa, 0x3, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0xe7, 0x3, 0x7, 0x0, 0x80000000000, 0x0, 0xc636}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f00000bf000/0x2000)=nil) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8e80) 5.26470866s ago: executing program 2 (id=4565): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x62}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.075980047s ago: executing program 2 (id=4566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1872360611f2a5176b240000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000fd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff08021100000050505050505000000000000000"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfff6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setresgid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x8040001) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r8 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r8, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b5fa4fc5060000ffffff970386780df56e5be7070101080a4e7719b506a0977b", 0xffbf}], 0x1}, 0x0) 4.440891648s ago: executing program 1 (id=4567): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000980)={0x30, 0x7}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) socket(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x232242, 0x0) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000000), 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "f6a6756c9832488c"}) writev(r4, &(0x7f0000000040)=[{0x0}], 0x1) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000e4f3b39d00023b02000008000300", @ANYRES32=r6, @ANYBLOB="22003300d000000008021100000108021100000050505050505000000904000000000000"], 0x40}}, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) 3.99294536s ago: executing program 3 (id=4568): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000f0fff203"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x22240, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x24f8, &(0x7f0000000280)={0x0, 0x7, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev}}) io_uring_enter(r3, 0x5b43, 0x85e8, 0x0, 0x0, 0x0) shutdown(r6, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) stat(&(0x7f0000000040)='./file0\x00', 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4018aee2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r10, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) 3.781476629s ago: executing program 4 (id=4569): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x0, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000d80)={{0x2, 0x100}, 0x0, [0x6, 0x0, 0x2, 0x8, 0x2, 0xe38, 0x8001, 0x8, 0x5, 0x8000, 0x7, 0x5, 0x5, 0x8, 0x3, 0x5, 0x6, 0x2, 0x7, 0x3, 0x9, 0x2, 0x2, 0x0, 0x6, 0xd7, 0x0, 0x0, 0x0, 0x1, 0x7d, 0xfffffffa, 0x5, 0x8, 0x6fa5, 0x9, 0x5de6, 0x0, 0x2, 0xcae, 0xf, 0x7b8953a4, 0x9, 0x401, 0x401, 0x1, 0xfffffff7, 0x8001, 0x7, 0x5, 0x8, 0x1, 0x6, 0x7fffffff, 0xfffffffb, 0x3, 0x8, 0x7, 0x4, 0x1ff, 0x9, 0x2, 0x1, 0x8, 0x8, 0xf9f, 0x4, 0x4, 0xc39, 0x9, 0x5, 0x9, 0xc37b, 0x9, 0x9, 0x2c7, 0x1ff, 0x2, 0x9, 0xfffffffd, 0xfffffff7, 0xc67, 0x6, 0x8, 0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0xf6b8, 0x1, 0x1, 0x8, 0x9, 0x71, 0x7, 0x3, 0xb7, 0x101, 0x1, 0x2ad, 0x10000, 0x2, 0x4, 0x6, 0x10, 0x30d77521, 0xf, 0xa8f, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5]}) 3.036909305s ago: executing program 2 (id=4570): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x5955}, 0x1, 0x0, 0x0, 0x50}, 0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r3 = socket(0x0, 0x800, 0x8a) syz_io_uring_setup(0x3a66, &(0x7f0000000440)={0x0, 0x1310, 0x400, 0x3, 0x106}, &(0x7f00000000c0), &(0x7f00000004c0)) syz_io_uring_setup(0x6908, &(0x7f00000002c0)={0x0, 0xe986, 0x10100, 0x1}, &(0x7f0000000200), &(0x7f0000000500)) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000240)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="1d0000000000000000000a000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r7, @ANYBLOB="36c42dbd7000fddbdf250a00000028000b801400020070696d72656731000000000000000000060004000180000008000100000000003800038008000100000000000600040001010000050008003d000000080005006401010114000600fe88000000000000000000000000000140000180060002002c000000080005000200000014000300fc000000000000000000000000000000060002002c000000060001000a000000080008000700000014000180080008006e080000060004004e2400000800060005000000"], 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x4) 1.652025699s ago: executing program 2 (id=4571): r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x313280, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x6f4}}, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) r9 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r9, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(r9, &(0x7f0000002700)={0x2020}, 0x2020) sendfile(r9, r9, 0x0, 0x7ffff000) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) r12 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x431, 0x4000) r13 = syz_open_procfs$userns(0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x77}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x37}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r12}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}}, 0x20}}, 0x0) 1.262579954s ago: executing program 4 (id=4572): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/arp\x00') read$FUSE(r1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r2, 0x6, 0x1, &(0x7f0000003580)=""/4117, &(0x7f00000000c0)=0xff8f) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecbb5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000150a17511501000000000000000000000000877dc5b29f59"], 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) 619.979572ms ago: executing program 4 (id=4573): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x0) socket$rxrpc(0x21, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0xc00) 616.794039ms ago: executing program 0 (id=4525): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000030703000000000000000000000000000973797a3000000000"], 0x20}}, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000050}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000024c0)="90", 0x1}, {0x0}, {&(0x7f00000001c0)="7a7144c95fbfd907c5071e62a6560d569db55c31b9bef2da5b6e343661"}, {&(0x7f00000003c0)="c1ef3f0fbc9680b6a0800cb5b41c7716ef74b636303b0393d577484aad0a741eb863ce2e835562018a08116904be8b004989ca18cb79c0cc0fbb67f39673e184b8acabeb2f6d42a87229e22ae3106121321866359ff56bf79b206f14ce160ba5b1b2e993148a986e514d6ee8eb0bdae06e4691d927eab25d37cea6f07459390bb01ed307dd3ca1e779a026"}, {&(0x7f0000000480)="58d411a2dd78827648058b8728649100ac333cff57d92c3ee844f316b492592d6594aad17dc7b7a57b5db186b63134d6dd82d0c54a47c68d8f534ad6f4e90773942deeb620a2a3ef288333ee94d1435371ce88b168db6ad73a0f9e631d92c46c34ebf61b3f0fe2cd1efa993def2cc4b9b08dc5d684b6a9d3e95e94d68ee0e3c58a1b706206dcf013168dd69d1cd2e81484ddb9baec49b653570b1a5354cb316d070c32016b36030ed485d9fe371f66cbcd81b88d1ea363b72e05e778bec672194b4bfe3c77535c97a4cc6be3a5ef5c175da583e93eb9c4d8fe349bf11ff09a54eb38f44fda26"}], 0xfffffffffffffa0}}], 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002480)=""/7, 0x7}], 0x1, &(0x7f0000002600)=""/25, 0x19}}], 0x1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendfile(r2, r1, 0x0, 0x20000023893) 543.580144ms ago: executing program 3 (id=4574): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @multicast2}, &(0x7f0000000180)=0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r1, &(0x7f00000067c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005080)=""/9, 0x9}}], 0x1, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x28000}], 0xbe, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/65, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010101, {[@ssrr={0x89, 0xb, 0xc0, [@rand_addr, @local]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 430.934145ms ago: executing program 1 (id=4575): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001980)={0x20, 0x33, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@nested={0x9, 0x1, 0x0, 0x1, [@typed={0x4}, @generic='8']}]}, 0x20}}, 0x0) (fail_nth: 9) 422.082363ms ago: executing program 4 (id=4576): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000340)={"3c24139ed4d4b8affbf514fd000000000000000000000000000000004000", r4}) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)={0x3ff, 0x3}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0x5}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x8000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa, 0x1000}}]}}]}, 0x78}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109026200020100e0000904000001020d00000b2406000100000000000005241400000d"], 0x0) epoll_create1(0x80000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x55af) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0xfffffffffffffff5, 0x8, {0x0, 0x19}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r8, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0xfffffffffffffffd, {0x200001ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r10, &(0x7f0000001340)=[{&(0x7f0000000a40)='e', 0x1}], 0x1) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 101.214966ms ago: executing program 0 (id=4577): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000431d1c40c9309300c6180102030309021200010000000009040000000e0101805e32dbdd09401b64858540117b665ebaf36deb94b3748232708b2ce37318972731e97b3f59910963b9a9ab470b82d5fa47feda842ad958744abb0d7738f56928c586c02cf5cb721e704f867babc46236dff2a7aad5eec3445e77de81a602520baba926b6e7580cb448fe263705a01b1ef2891baf9c47458ca2a20b94d6d8d5c869d1421d7e19fe005506631aa9ab70b211c04591aee3ead9a0df5316e955b1ea746c"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, r1, 0x223, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback={0xe0ffff00000000}}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="500000008daa50f291a7eed4abe319d78e28c641ad7a6e787f2cd323c4f4c6768d59683bbf419e9a78f4bd8a4a8d7f93aae370ab703f0eeea3a322076bba3d03011c2f4a934f047ebfdae3d3229be014aa60669afe1641", @ANYRES64=0x0, @ANYBLOB="000129bd7000ffdbdf2503000000080003000000004008000300080000000800020046f41ff6050005000200000008000400010000000800030051000000040004000800030002000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, 0x0, 0xb0) write$proc_mixer(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="414c5450434d20274c696e652043617074757265272030303030303030303030303030303030303030300a4c494e45320a4449474954414c330a535045414b4552202753796e7468272030303030303030303030303030303030617374657220506c61796261636b272030303030303030303030303030303030303030300a4c494e45330a4c494e453120274d617374657220506c61796261636b20537769746368272020303030303030301377303030303030303030300a564f4c554d450a4c494e45202753796e74682043617074757265272030303030303030303030303030303030303030"], 0xf7) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 0s ago: executing program 1 (id=4578): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x8, 0xc3, 0xad, 0x40, 0x2833, 0x211, 0x545a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x1, 0x0, 0xfc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x20, 0x23, 0xe9, {0xe9, 0x6, "3b3a6f3f17de88c68cce02f2a791f6e883134510395f7e2a835bbe8803142bb49154a86acbbf65fe816678df65788616dbdd8a0339ec2a487738eea9792800cab764510c37948f709e44e04286a2e8717e72b5ef1577eb854485025c134117458ccc0382b5c1fcd4b6ba3ae5fab9ec62ee4185ebf403121b3ac0b4d9e1d89768478d7d1ce20ca1087c1884c1693800f02deb55736fc6cc7b2c39161daf467342d28f67435a665df96a8c6f1c026d132453cb575fcaeae650dcc81cc09803063c464c303d8089699877e7e807eaa0c1f6876edec6bd047e849f4d71164c3244967d2ec4b1fba89f"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f00000005c0)={0x20, 0x3, 0x98, "e41d89a227d1d2b86c143a1e7d6c0ca2522d0a0e930d396de92c8d1574fe7a78e69c6931a9743fc85c431f23398d52ef8c7b34ada7921aa8124598b51b20734d8ccb1e5a5014708765319774b8858fcc32081e364757f57e7a41fa7156c39ba2f0b3a7b88849d39c0a3c55245dd8b2260568bac7dd75969ac97fcff3f74b38042bc10b77862248c255970eb03b6f0d934a593bde2140a07b"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x88, 0x4, 0x8, 0x4, 0x8, 0x4, 0x2, 0x80000000, 0xfe00, 0x20a, 0x8, 0x9}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000007c0)={0x20, 0x83, 0x2}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000880)={0x20, 0x89, 0x2}}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$cgroup_type(r2, &(0x7f0000000340), 0x9) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x20, 0x9, 0x58, {0x58, 0x24, "ac384f3e8c4baae2f6565e0ab9b4e2722bfaf6a2673c21ac5e40ae7a39be3bd5cc4bba8f5fbcecf214c88d77fcd84c938c507fe23b86ebf558bd0230ef277443e05356b59cae9669c08fbe3e96fa06280244f49ea7f4"}}, &(0x7f0000000100)={0x0, 0x3, 0x76, @string={0x76, 0x3, "5fd59dab927898a43ebcb300b93d2d44cdac895df2a7d0df8b945e8c5962533ab24844688c6166c13f064259ea300e9d9909cc204e3c8b442128b83b3bbcb8206848948d5505de79058da1435cd99a874769eaebbfb823e80d1aee577c01ac3056db7e7a27aa07ca29ceefd6e54c77b5f9028c2c"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x40, 0x29, 0x4f, "059c6089bc6f6b39062e928ae1416a646113f1fece5010220c7f8b22a01f8e5fc71d7eac7da0831cc12741e058eb5c68162caad4c91c78f5d315bbcbe14b8a0ee5945a6cc87df5c292895a2dcd2759"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000002c0)={0x20, 0x0, 0xd1, {0xcf, "e64b350b6695ebea3a63ff9b450d67fad662d69718665c3e92547e35210e5110cbc042ad53df8e88030ff52704f13de49e64134768ddf826f2b3d8f7ae8b71e004464d0f9b05d6c50aff1ca0ab2a047f50e69e4f247d51ce2b60f78e2be32f61673407ef22706455ab90e64328f0f40f579850d3d1c840508978e682eba71bf86e95da216d0d069d3fd2e5f90e700f3faa0767e8e847071c7f68d630b0b99e8227e7fbf730760bc3d9e1a2ade2badbf34d4445ecf794c6ad507cf232301d50275b0ae207c43b0d241a1021b67e8980"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0xeb}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x1f}}) kernel console output (not intermixed with test programs): high-speed USB device number 111 using dummy_hcd [ 1334.164259][T13148] team0 (unregistering): Port device team_slave_1 removed [ 1334.231855][T13148] team0 (unregistering): Port device team_slave_0 removed [ 1334.237590][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1334.239410][T26004] Bluetooth: hci3: command tx timeout [ 1334.258540][ T58] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1334.274666][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1334.291301][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.310029][ T58] usb 2-1: config 0 descriptor?? [ 1334.525313][T26904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1334.547474][T26904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1334.594630][ T5143] usb 2-1: USB disconnect, device number 111 [ 1335.072462][T26908] tipc: Started in network mode [ 1335.085890][T26908] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1335.105620][T26908] tipc: Enabled bearer , priority 10 [ 1335.146061][T26917] netlink: 'syz.1.4338': attribute type 3 has an invalid length. [ 1335.153856][T26917] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4338'. [ 1335.177665][T26867] chnl_net:caif_netlink_parms(): no params data found [ 1335.526077][T26867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.533236][T26867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.550093][T26867] bridge_slave_0: entered allmulticast mode [ 1335.573217][T26867] bridge_slave_0: entered promiscuous mode [ 1335.590646][T26867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.617202][T26867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.635065][T26867] bridge_slave_1: entered allmulticast mode [ 1335.643131][T26867] bridge_slave_1: entered promiscuous mode [ 1335.815068][T26867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1335.867343][T26867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1335.983992][T26867] team0: Port device team_slave_0 added [ 1336.043883][T26867] team0: Port device team_slave_1 added [ 1336.115505][ T5143] tipc: Node number set to 10005162 [ 1336.218321][T13148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.246106][T26867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.264666][T26867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.330956][T26004] Bluetooth: hci3: command tx timeout [ 1336.330983][T26867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1336.387855][T26867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1336.425897][T26867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1336.493611][T26867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.540644][T26666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1336.600428][T13148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.678781][T26666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1336.700768][T26666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1336.792316][T13148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.815463][T26666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1336.858212][T26867] hsr_slave_0: entered promiscuous mode [ 1336.872442][T26867] hsr_slave_1: entered promiscuous mode [ 1336.885281][T26867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1336.892888][T26867] Cannot create hsr debugfs directory [ 1336.983437][T13148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.301575][T26764] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1337.385359][T26764] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1337.413233][T26764] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1337.525366][T15314] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1337.569453][T26764] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1337.600195][T26961] netlink: 'syz.3.4348': attribute type 3 has an invalid length. [ 1337.625958][T26961] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4348'. [ 1337.732628][T13148] bridge_slave_1: left allmulticast mode [ 1337.746208][T15314] usb 2-1: Using ep0 maxpacket: 8 [ 1337.746712][T13148] bridge_slave_1: left promiscuous mode [ 1337.758528][T13148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.774098][T13148] bridge_slave_0: left allmulticast mode [ 1337.774123][T15314] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1337.781542][T13148] bridge_slave_0: left promiscuous mode [ 1337.801624][T13148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.809540][T15314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.830040][T15314] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1337.847384][T15314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.866524][T15314] usb 2-1: config 0 descriptor?? [ 1338.149399][ T58] usb 2-1: USB disconnect, device number 112 [ 1338.358955][T13148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1338.371946][T13148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1338.383761][T13148] bond0 (unregistering): Released all slaves [ 1338.395526][T26004] Bluetooth: hci3: command tx timeout [ 1338.840437][T26666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.971325][T26666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.985634][ T5150] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1339.165061][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.172336][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.191183][ T5150] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1339.209547][ T5150] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1339.225001][ T5150] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1339.267563][T13148] hsr_slave_0: left promiscuous mode [ 1339.284551][T13148] hsr_slave_1: left promiscuous mode [ 1339.298314][ T5150] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1339.312066][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.322379][T13148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.334153][ T5150] usb 4-1: Product: syz [ 1339.338820][T13148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.346556][ T5150] usb 4-1: Manufacturer: syz [ 1339.351564][ T5150] usb 4-1: SerialNumber: syz [ 1339.363999][T13148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.386692][T13148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.451277][T13148] veth1_macvtap: left promiscuous mode [ 1339.458036][T13148] veth0_macvtap: left promiscuous mode [ 1339.477078][T13148] veth1_vlan: left promiscuous mode [ 1339.482521][T13148] veth0_vlan: left promiscuous mode [ 1339.595760][ T5150] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 125 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1339.894400][T26986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.924039][T26986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.942242][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 1339.942262][ T29] audit: type=1326 audit(1720037787.271:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.000316][ T29] audit: type=1326 audit(1720037787.301:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.046699][ T29] audit: type=1326 audit(1720037787.301:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.071055][ T29] audit: type=1326 audit(1720037787.301:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.112110][ T29] audit: type=1326 audit(1720037787.301:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.164136][ T29] audit: type=1326 audit(1720037787.301:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.225269][ T29] audit: type=1326 audit(1720037787.301:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.255433][ T29] audit: type=1326 audit(1720037787.311:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.285621][ T29] audit: type=1326 audit(1720037787.311:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1340.350167][ T29] audit: type=1326 audit(1720037787.311:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26987 comm="syz.1.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5333575bd9 code=0x7ffc0000 [ 1341.098165][T13148] team0 (unregistering): Port device team_slave_1 removed [ 1341.229954][T13148] team0 (unregistering): Port device team_slave_0 removed [ 1341.984566][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.991831][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.065318][ T25] usb 4-1: USB disconnect, device number 125 [ 1342.092277][ T25] usblp0: removed [ 1342.347749][T26764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.514192][T26764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.610197][T23590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.617428][T23590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.663428][T23590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.670687][T23590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1342.755963][T26867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1342.824809][T26666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.858645][T26867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1342.904023][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1342.994953][T26867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1343.015070][T26867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1343.131923][T26764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1343.302124][ T4493] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1343.315004][ T4493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1343.320686][T26666] veth0_vlan: entered promiscuous mode [ 1343.337798][ T4493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1343.359809][ T4493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1343.380115][ T4493] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1343.388335][ T4493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.512080][T13147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.642414][T26666] veth1_vlan: entered promiscuous mode [ 1343.703893][T26764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.770985][T13147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.962075][T13147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.142364][T13147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.301841][T26666] veth0_macvtap: entered promiscuous mode [ 1344.369160][T26666] veth1_macvtap: entered promiscuous mode [ 1344.549277][T26764] veth0_vlan: entered promiscuous mode [ 1344.692813][T26666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.704923][T26666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.721126][T26666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.732999][T26666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.751828][T26666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.764507][T26764] veth1_vlan: entered promiscuous mode [ 1344.850334][T26666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.862731][T26666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.876959][T26666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.892602][T26666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.911177][T26666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.937689][T13147] bridge_slave_1: left allmulticast mode [ 1344.943461][T13147] bridge_slave_1: left promiscuous mode [ 1344.962709][T13147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.975151][T13147] bridge_slave_0: left allmulticast mode [ 1344.980980][T13147] bridge_slave_0: left promiscuous mode [ 1344.993634][T13147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.435473][T26004] Bluetooth: hci4: command tx timeout [ 1345.588152][T13147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.600648][T13147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.612208][T13147] bond0 (unregistering): Released all slaves [ 1345.683638][T26867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.728298][T26666] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.757422][T26666] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.776042][T26666] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.784791][T26666] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.809863][T27064] chnl_net:caif_netlink_parms(): no params data found [ 1346.075820][ T5150] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1346.109982][T26867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.254556][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.261813][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.289810][ T5150] usb 4-1: string descriptor 0 read error: -22 [ 1346.299559][ T5150] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1346.316052][ T5150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.335913][ T5150] usb 4-1: config 0 descriptor?? [ 1346.348325][ T5150] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 1346.355589][ T5150] usb 4-1: No valid video chain found. [ 1346.383261][T27064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.392006][T27064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.409793][T27064] bridge_slave_0: entered allmulticast mode [ 1346.417449][T27064] bridge_slave_0: entered promiscuous mode [ 1346.431075][T26764] veth0_macvtap: entered promiscuous mode [ 1346.444985][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.452258][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.475716][T27064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.482828][T27064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.499626][T27064] bridge_slave_1: entered allmulticast mode [ 1346.510448][T27064] bridge_slave_1: entered promiscuous mode [ 1346.550297][T27064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.609628][T13147] hsr_slave_0: left promiscuous mode [ 1346.621236][T13147] hsr_slave_1: left promiscuous mode [ 1346.633978][T23590] usb 4-1: USB disconnect, device number 126 [ 1346.640896][T13147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1346.662902][T13147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1346.672326][T13147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1346.681069][T13147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.707718][T13147] veth1_macvtap: left promiscuous mode [ 1346.713332][T13147] veth0_macvtap: left promiscuous mode [ 1346.719769][T13147] veth1_vlan: left promiscuous mode [ 1346.725146][T13147] veth0_vlan: left promiscuous mode [ 1347.348654][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1347.384212][T13147] team0 (unregistering): Port device team_slave_1 removed [ 1347.462542][T13147] team0 (unregistering): Port device team_slave_0 removed [ 1347.515767][T26004] Bluetooth: hci4: command tx timeout [ 1348.273188][T27064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.321158][T26764] veth1_macvtap: entered promiscuous mode [ 1348.409020][T27064] team0: Port device team_slave_0 added [ 1348.428185][T27064] team0: Port device team_slave_1 added [ 1348.509976][T13148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.543368][T13148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.568291][T27064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.585186][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.626749][T27064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.659720][T27064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.675734][T27064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.725246][T27064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.763386][T26867] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1348.776165][T26867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1348.822569][T26764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.845433][T26764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.861885][T26764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1348.872441][T26764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.922319][T26764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1349.066684][T26764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.092926][T26764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.126463][T26764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.153533][T26764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.178693][T26764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.250452][T27064] hsr_slave_0: entered promiscuous mode [ 1349.267797][T27064] hsr_slave_1: entered promiscuous mode [ 1349.329593][T27121] netlink: 'syz.3.4364': attribute type 3 has an invalid length. [ 1349.368772][T27121] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1349.411607][T26764] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.420903][T26764] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.430504][T26764] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.439697][T26764] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.453523][ T2868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.479460][ T2868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.613152][T26004] Bluetooth: hci4: command tx timeout [ 1349.720949][T26867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1349.788783][T27142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1349.978585][T13147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.006387][T13147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.137466][T13148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.160374][T15540] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1350.180653][T13148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.358008][T26867] veth0_vlan: entered promiscuous mode [ 1350.389342][T15540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1350.411264][T26867] veth1_vlan: entered promiscuous mode [ 1350.421366][T15540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1350.442974][T15540] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1350.515273][T15540] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1350.524383][T15540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.591982][T15540] usb 1-1: config 0 descriptor?? [ 1350.881224][T26867] veth0_macvtap: entered promiscuous mode [ 1350.909028][T26867] veth1_macvtap: entered promiscuous mode [ 1351.061366][T15540] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1351.104443][T15540] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0 [ 1351.112898][T27167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1351.134231][T15540] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 1351.156378][T15540] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1351.222893][T27064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1351.291860][T27064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1351.329720][ T5143] usb 1-1: USB disconnect, device number 109 [ 1351.369451][T27064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1351.462520][T27064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1351.513133][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.570335][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.597995][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.621472][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.638499][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1351.651099][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.676094][T26004] Bluetooth: hci4: command tx timeout [ 1351.686195][T26867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.818749][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1351.866281][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.903841][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1351.924929][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1351.962707][T26867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1352.014005][T26867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1352.046808][T26867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1352.127130][T26867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.147254][T26867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.180639][T26867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.199764][T26867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.345516][ T7241] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1352.426221][T27195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1352.437552][T27195] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4373'. [ 1352.457991][T27195] program syz.3.4373 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1352.479791][T11802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.515743][T11802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.601365][ T7241] usb 5-1: string descriptor 0 read error: -22 [ 1352.620530][ T7241] usb 5-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1352.640076][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.665876][ T7241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.687273][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.711923][ T7241] usb 5-1: config 0 descriptor?? [ 1352.755949][ T7241] usb 5-1: Found UVC 0.00 device (30c9:0093) [ 1352.780053][ T7241] usb 5-1: No valid video chain found. [ 1352.790217][T27064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.912099][T27064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.951712][T27192] netlink: 'syz.0.4372': attribute type 3 has an invalid length. [ 1353.015240][T27192] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1353.041112][T15314] usb 5-1: USB disconnect, device number 107 [ 1353.166674][ T7241] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1353.377262][ T7241] usb 4-1: config 0 has an invalid interface number: 81 but max is 1 [ 1353.395311][ T7241] usb 4-1: config 0 has no interface number 1 [ 1353.412225][ T7241] usb 4-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice=a9.1a [ 1353.432493][ T7241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.476683][ T7241] usb 4-1: config 0 descriptor?? [ 1353.488312][ T7241] usb 4-1: unknown number of interfaces: 2 [ 1353.527104][T15540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.534279][T15540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.582736][T15540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.589923][T15540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.732615][ T7241] usb 4-1: USB disconnect, device number 127 [ 1353.796205][T27222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.862422][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4376'. [ 1353.927175][T27064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.119876][T27064] veth0_vlan: entered promiscuous mode [ 1354.141124][T27064] veth1_vlan: entered promiscuous mode [ 1354.234718][T27064] veth0_macvtap: entered promiscuous mode [ 1354.259672][T27064] veth1_macvtap: entered promiscuous mode [ 1354.303318][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.303349][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.303367][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.303384][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.303399][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.303417][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.303431][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.303448][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.312030][T27064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.329152][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.441633][T27243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1354.452471][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.452508][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.452528][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.452544][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.452561][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.452582][T27064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.452600][T27064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.454706][T27064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.462721][T27064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.462762][T27064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.462794][T27064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.462827][T27064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.885437][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.885466][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.995564][T15540] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1355.094679][T11802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.094707][T11802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.181148][T15540] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=8e.77 [ 1355.181188][T15540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.181212][T15540] usb 3-1: Product: syz [ 1355.181226][T15540] usb 3-1: Manufacturer: syz [ 1355.181238][T15540] usb 3-1: SerialNumber: syz [ 1355.183195][T15540] usb 3-1: config 0 descriptor?? [ 1355.305396][T15314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1355.405368][T15540] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 1355.419939][T15540] usb 3-1: USB disconnect, device number 122 [ 1355.487667][T15314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1355.487710][T15314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1355.487737][T15314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1355.487788][T15314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1355.487816][T15314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.490536][T15314] usb 4-1: config 0 descriptor?? [ 1355.884135][T27266] FAULT_INJECTION: forcing a failure. [ 1355.884135][T27266] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.899424][T27266] CPU: 1 PID: 27266 Comm: syz.4.4386 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1355.909634][T27266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1355.919728][T27266] Call Trace: [ 1355.923040][T27266] [ 1355.926008][T27266] dump_stack_lvl+0x241/0x360 [ 1355.930738][T27266] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.935979][T27266] ? __pfx__printk+0x10/0x10 [ 1355.940634][T27266] should_fail_ex+0x3b0/0x4e0 [ 1355.945369][T27266] ? sctp_add_bind_addr+0x89/0x3a0 [ 1355.950530][T27266] should_failslab+0x9/0x20 [ 1355.955079][T27266] kmalloc_trace_noprof+0x6c/0x2c0 [ 1355.960689][T27266] sctp_add_bind_addr+0x89/0x3a0 [ 1355.961360][ T7241] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1355.965656][T27266] sctp_copy_local_addr_list+0x311/0x500 [ 1355.979029][T27266] ? sctp_copy_local_addr_list+0xab/0x500 [ 1355.984798][T27266] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1355.990997][T27266] ? sctp_v6_is_any+0x60/0x70 [ 1355.995733][T27266] sctp_bind_addr_copy+0xad/0x3b0 [ 1356.000799][T27266] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 1356.007165][T27266] sctp_connect_new_asoc+0x2f3/0x6c0 [ 1356.012500][T27266] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1356.018342][T27266] ? sctp_sendmsg+0xbb9/0x3520 [ 1356.023167][T27266] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1356.028765][T27266] ? security_sctp_bind_connect+0x90/0xb0 [ 1356.034542][T27266] sctp_sendmsg+0x219a/0x3520 [ 1356.039278][T27266] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1356.044339][T27266] ? __pfx_aa_sk_perm+0x10/0x10 [ 1356.049248][T27266] ? inet_sendmsg+0x330/0x390 [ 1356.053962][T27266] __sock_sendmsg+0x1a6/0x270 [ 1356.058701][T27266] ____sys_sendmsg+0x525/0x7d0 [ 1356.063516][T27266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1356.068860][T27266] __sys_sendmmsg+0x3b2/0x740 [ 1356.073600][T27266] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1356.078882][T27266] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1356.084824][T27266] ? ksys_write+0x23e/0x2c0 [ 1356.089383][T27266] ? __pfx_lock_release+0x10/0x10 [ 1356.094467][T27266] ? vfs_write+0x7c4/0xc90 [ 1356.098958][T27266] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1356.104654][T27266] ? __pfx_vfs_write+0x10/0x10 [ 1356.109503][T27266] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1356.115544][T27266] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1356.121915][T27266] ? do_syscall_64+0x100/0x230 [ 1356.126734][T27266] __x64_sys_sendmmsg+0xa0/0xb0 [ 1356.131716][T27266] do_syscall_64+0xf3/0x230 [ 1356.136291][T27266] ? clear_bhb_loop+0x35/0x90 [ 1356.141025][T27266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.146959][T27266] RIP: 0033:0x7fda38f75bd9 [ 1356.151405][T27266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.171305][T27266] RSP: 002b:00007fda39df3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1356.179858][T27266] RAX: ffffffffffffffda RBX: 00007fda39103f60 RCX: 00007fda38f75bd9 [ 1356.187871][T27266] RDX: 0000000000000001 RSI: 0000000020001800 RDI: 0000000000000003 [ 1356.195871][T27266] RBP: 00007fda39df30a0 R08: 0000000000000000 R09: 0000000000000000 [ 1356.203871][T27266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1356.211865][T27266] R13: 000000000000000b R14: 00007fda39103f60 R15: 00007fda3922fa68 [ 1356.219873][T27266] [ 1356.288521][T15314] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1356.305185][T15314] plantronics 0003:047F:FFFF.0055: unknown main item tag 0x0 [ 1356.313640][T15314] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 1356.344156][T15314] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1356.474411][ T7241] usb 2-1: string descriptor 0 read error: -22 [ 1356.505648][ T7241] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1356.522305][ T7241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.551082][ T7241] usb 2-1: config 0 descriptor?? [ 1356.572193][T15314] usb 4-1: USB disconnect, device number 2 [ 1356.608489][ T7241] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 1356.647924][ T7241] usb 2-1: No valid video chain found. [ 1356.742481][T27278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.771265][T27279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4390'. [ 1356.844511][T15540] usb 2-1: USB disconnect, device number 113 [ 1356.948985][T27270] netlink: 'syz.2.4387': attribute type 3 has an invalid length. [ 1356.972266][T27270] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1357.078803][T27286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1357.441831][T15540] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1357.602596][T27299] binder: 27297:27299 ioctl 4018620d 0 returned -22 [ 1357.635316][T15540] usb 5-1: device descriptor read/64, error -71 [ 1357.645410][T27300] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1357.819396][T27305] erspan0: entered promiscuous mode [ 1357.858086][T27305] ip6gretap0: entered promiscuous mode [ 1357.915775][T15540] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1358.023709][T27308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4398'. [ 1358.075724][T15540] usb 5-1: device descriptor read/64, error -71 [ 1358.181474][T27315] Cannot find add_set index 0 as target [ 1358.208335][T15540] usb usb5-port1: attempt power cycle [ 1358.424153][T27321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1358.655215][T15540] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1358.707407][T15540] usb 5-1: device descriptor read/8, error -71 [ 1358.775328][ T5145] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1358.987343][ T5145] usb 1-1: config 0 has an invalid interface descriptor of length 8, skipping [ 1358.996543][T15540] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1359.024927][ T5145] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.061990][ T5145] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1359.075601][T15540] usb 5-1: device descriptor read/8, error -71 [ 1359.093734][ T5145] usb 1-1: New USB device found, idVendor=04b4, idProduct=0005, bcdDevice= 0.00 [ 1359.125205][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=63 [ 1359.169422][ T5145] usb 1-1: SerialNumber: syz [ 1359.193227][ T5145] usb 1-1: config 0 descriptor?? [ 1359.206627][T15540] usb usb5-port1: unable to enumerate USB device [ 1359.344781][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1359.385026][T27333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1359.426857][ T933] usb 1-1: USB disconnect, device number 110 [ 1359.485266][ T7241] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1359.495448][T27326] netlink: 'syz.1.4404': attribute type 3 has an invalid length. [ 1359.518480][T27326] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1359.692051][ T7241] usb 4-1: string descriptor 0 read error: -22 [ 1359.715046][ T7241] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1359.744773][ T7241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.786752][ T7241] usb 4-1: config 0 descriptor?? [ 1359.806051][ T7241] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 1359.821553][ T7241] usb 4-1: No valid video chain found. [ 1360.132953][T15540] usb 4-1: USB disconnect, device number 3 [ 1360.486706][T27351] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1360.619704][T27356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1361.670986][T27390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1361.783315][T27375] netlink: 'syz.3.4421': attribute type 3 has an invalid length. [ 1361.820125][T27375] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1362.085254][ T5148] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1362.160178][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.166679][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.356448][ T5148] usb 2-1: string descriptor 0 read error: -22 [ 1362.386212][ T5148] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1362.405254][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.440167][ T5148] usb 2-1: config 0 descriptor?? [ 1362.493623][ T5148] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 1362.522212][ T5148] usb 2-1: No valid video chain found. [ 1362.953248][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4433'. [ 1363.757236][ T5148] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1363.903822][T27428] vlan2: entered promiscuous mode [ 1363.922149][T27428] batadv0: entered promiscuous mode [ 1363.934181][T27428] vlan2: entered allmulticast mode [ 1363.944073][T27428] batadv0: entered allmulticast mode [ 1363.961462][T27428] batadv0: left allmulticast mode [ 1363.979387][ T5148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1364.001090][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 1364.001112][ T29] audit: type=1326 audit(1720037811.331:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.005957][T27428] batadv0: left promiscuous mode [ 1364.007521][ T29] audit: type=1326 audit(1720037811.331:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.065555][ T5148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1364.093936][ T5148] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1364.142667][ T5148] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1364.145238][ T29] audit: type=1326 audit(1720037811.331:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.205552][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.239769][ T29] audit: type=1326 audit(1720037811.331:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.265342][ T933] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1364.272312][ T5148] usb 5-1: config 0 descriptor?? [ 1364.281491][ T29] audit: type=1326 audit(1720037811.331:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.310287][ T29] audit: type=1326 audit(1720037811.331:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.334909][ T29] audit: type=1326 audit(1720037811.341:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.364300][ T29] audit: type=1326 audit(1720037811.341:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.393373][ T29] audit: type=1326 audit(1720037811.341:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.421701][ T29] audit: type=1326 audit(1720037811.361:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27430 comm="syz.2.4439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a9fb75bd9 code=0x7ffc0000 [ 1364.507363][ T933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1364.527750][ T933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1364.559564][ T933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1364.626134][ T933] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1364.642218][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.687153][ T933] usb 4-1: config 0 descriptor?? [ 1364.736496][ T5148] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1364.749073][ T5148] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0 [ 1364.773512][ T5148] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 1364.812900][T27434] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1364.821659][ T5148] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1364.863152][T15540] usb 2-1: USB disconnect, device number 114 [ 1364.902836][T27434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4441'. [ 1365.051221][ T5148] usb 5-1: USB disconnect, device number 112 [ 1365.123182][ T933] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1365.134128][ T933] plantronics 0003:047F:FFFF.0057: unknown main item tag 0x0 [ 1365.149790][ T933] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving [ 1365.181324][ T933] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1365.395931][T15314] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1365.428747][ T933] usb 4-1: USB disconnect, device number 4 [ 1365.463042][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1365.615365][T15314] usb 2-1: Using ep0 maxpacket: 8 [ 1365.627303][T15314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.659303][T15314] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1365.674674][T15314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.700434][T15314] usb 2-1: config 0 descriptor?? [ 1365.711645][T15314] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1365.749976][T27455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1365.759893][T26004] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1365.769760][T26004] Bluetooth: hci3: Injecting HCI hardware error event [ 1365.779941][T26004] Bluetooth: hci3: hardware error 0x00 [ 1365.835849][T15540] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1365.965198][ T5148] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1366.015254][T15540] usb 3-1: Using ep0 maxpacket: 8 [ 1366.038165][T15540] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 1366.055198][T15540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1366.075250][T15540] usb 3-1: config 0 has no interface number 0 [ 1366.081536][T15540] usb 3-1: config 0 interface 52 has no altsetting 0 [ 1366.109002][T15540] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1366.135379][T15540] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1366.143763][T15540] usb 3-1: Product: syz [ 1366.165174][T15540] usb 3-1: SerialNumber: syz [ 1366.178728][ T5148] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1366.188139][T15540] usb 3-1: config 0 descriptor?? [ 1366.205782][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.231636][ T5148] usb 1-1: config 0 descriptor?? [ 1366.254519][T15314] gspca_vc032x: reg_w err -71 [ 1366.275336][T15314] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1366.310214][T15314] usb 2-1: USB disconnect, device number 115 [ 1366.686892][T27449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.713742][T27449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.778879][ T5183] usb 3-1: USB disconnect, device number 123 [ 1366.873001][T27454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.896643][T27454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.407015][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.586778][ T5183] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1367.702046][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.786546][ T5183] usb 4-1: Using ep0 maxpacket: 16 [ 1367.826248][ T5183] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 1367.834431][ T5183] usb 4-1: config 0 has no interface number 0 [ 1367.841200][T26004] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1367.872510][ T5183] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b [ 1367.886801][ T5183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.894867][ T5183] usb 4-1: Product: syz [ 1367.899259][ T5183] usb 4-1: Manufacturer: syz [ 1367.904227][ T5183] usb 4-1: SerialNumber: syz [ 1367.919379][ T5183] usb 4-1: config 0 descriptor?? [ 1367.946048][ T5183] usb 4-1: Expected 3 endpoints, found: 0 [ 1368.058746][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.146083][ T5148] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 1368.147076][ T933] usb 4-1: USB disconnect, device number 5 [ 1368.207310][ T5148] usb 1-1: USB disconnect, device number 111 [ 1368.320005][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.485901][ T4493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1368.500634][ T4493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1368.516304][ T4493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1368.532072][ T4493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1368.545815][ T4493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1368.553586][ T4493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1368.814503][ T51] bridge_slave_1: left allmulticast mode [ 1368.822460][ T51] bridge_slave_1: left promiscuous mode [ 1368.840170][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.873813][ T51] bridge_slave_0: left allmulticast mode [ 1368.896824][ T51] bridge_slave_0: left promiscuous mode [ 1368.902675][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.086103][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1369.086126][ T29] audit: type=1326 audit(1720037816.411:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.174882][ T29] audit: type=1326 audit(1720037816.411:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.206212][T26004] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1369.220223][T26004] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1369.229740][T26004] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1369.238747][ T29] audit: type=1326 audit(1720037816.451:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.261525][ T29] audit: type=1326 audit(1720037816.451:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.287259][ T29] audit: type=1326 audit(1720037816.451:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.312081][ T29] audit: type=1326 audit(1720037816.451:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.337253][ T29] audit: type=1326 audit(1720037816.451:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.361010][T27484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1369.361108][ T29] audit: type=1326 audit(1720037816.451:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.416125][T26004] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1369.423890][ T29] audit: type=1326 audit(1720037816.461:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.451436][ T29] audit: type=1326 audit(1720037816.461:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27476 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ff775bd9 code=0x7ffc0000 [ 1369.451540][T26004] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1369.482829][T26004] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1369.504578][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 1369.807336][ T51] erspan0 (unregistering): left promiscuous mode [ 1370.288401][T27497] FAULT_INJECTION: forcing a failure. [ 1370.288401][T27497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1370.312348][T27497] CPU: 0 PID: 27497 Comm: syz.0.4459 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1370.322553][T27497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1370.332618][T27497] Call Trace: [ 1370.335911][T27497] [ 1370.338858][T27497] dump_stack_lvl+0x241/0x360 [ 1370.343551][T27497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1370.348769][T27497] ? __pfx__printk+0x10/0x10 [ 1370.353385][T27497] ? __pfx_lock_release+0x10/0x10 [ 1370.358422][T27497] should_fail_ex+0x3b0/0x4e0 [ 1370.363115][T27497] _copy_from_user+0x2f/0xe0 [ 1370.367724][T27497] copy_msghdr_from_user+0xae/0x680 [ 1370.372978][T27497] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1370.378916][T27497] do_recvmmsg+0x40f/0xae0 [ 1370.383362][T27497] ? __pfx_lock_release+0x10/0x10 [ 1370.388441][T27497] ? __pfx_do_recvmmsg+0x10/0x10 [ 1370.393435][T27497] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1370.399354][T27497] ? ksys_write+0x23e/0x2c0 [ 1370.403863][T27497] ? __pfx_lock_release+0x10/0x10 [ 1370.408911][T27497] ? vfs_write+0x7c4/0xc90 [ 1370.413351][T27497] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1370.419012][T27497] ? __fget_files+0x3f6/0x470 [ 1370.423721][T27497] __x64_sys_recvmmsg+0x199/0x250 [ 1370.428769][T27497] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1370.434347][T27497] ? do_syscall_64+0x100/0x230 [ 1370.439126][T27497] ? do_syscall_64+0xb6/0x230 [ 1370.443811][T27497] do_syscall_64+0xf3/0x230 [ 1370.448334][T27497] ? clear_bhb_loop+0x35/0x90 [ 1370.453029][T27497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.458955][T27497] RIP: 0033:0x7f34ff775bd9 [ 1370.463371][T27497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.482999][T27497] RSP: 002b:00007f35004e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1370.491427][T27497] RAX: ffffffffffffffda RBX: 00007f34ff903f60 RCX: 00007f34ff775bd9 [ 1370.499409][T27497] RDX: 0000000000000f00 RSI: 0000000020000400 RDI: 0000000000000003 [ 1370.507394][T27497] RBP: 00007f35004e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.515395][T27497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1370.523387][T27497] R13: 000000000000000b R14: 00007f34ff903f60 R15: 00007f34ffa2fa68 [ 1370.531377][T27497] [ 1370.537196][ T7241] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1370.600090][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1370.612923][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1370.634213][ T51] bond0 (unregistering): Released all slaves [ 1370.641922][T26004] Bluetooth: hci3: command tx timeout [ 1370.739770][T27483] Â: renamed from pim6reg1 [ 1370.759213][ T7241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1370.780808][T27485] netlink: 'syz.4.4454': attribute type 10 has an invalid length. [ 1370.791153][ T7241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1370.809886][ T7241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1370.860774][ T7241] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1370.876119][T27485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.904099][ T7241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.905704][T27485] bond0: (slave team0): Enslaving as an active interface with an up link [ 1370.933060][T27486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4454'. [ 1370.940292][ T7241] usb 4-1: config 0 descriptor?? [ 1370.952285][T27487] netlink: 'syz.4.4454': attribute type 10 has an invalid length. [ 1370.962599][T27487] bond0: (slave team0): Releasing backup interface [ 1370.979565][T27487] bridge0: port 3(team0) entered blocking state [ 1370.986449][T27487] bridge0: port 3(team0) entered disabled state [ 1370.992945][T27487] team0: entered allmulticast mode [ 1370.998341][T27487] team_slave_0: entered allmulticast mode [ 1371.004168][T27487] team_slave_1: entered allmulticast mode [ 1371.015605][T27487] team0: entered promiscuous mode [ 1371.020760][T27487] team_slave_0: entered promiscuous mode [ 1371.027018][T27487] team_slave_1: entered promiscuous mode [ 1371.379655][ T7241] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1371.420277][ T7241] plantronics 0003:047F:FFFF.0058: unknown main item tag 0x0 [ 1371.456168][ T7241] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 1371.517676][ T51] hsr_slave_0: left promiscuous mode [ 1371.534734][ T7241] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1371.559493][ T51] hsr_slave_1: left promiscuous mode [ 1371.573665][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.595546][T26004] Bluetooth: hci4: command tx timeout [ 1371.600075][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.644634][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.664655][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.689432][T15314] usb 4-1: USB disconnect, device number 6 [ 1371.732496][ T51] veth1_macvtap: left promiscuous mode [ 1371.750115][ T51] veth0_macvtap: left promiscuous mode [ 1371.760502][ T51] veth1_vlan: left promiscuous mode [ 1371.768635][ T51] veth0_vlan: left promiscuous mode [ 1372.420487][T27541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1372.715299][T26004] Bluetooth: hci3: command tx timeout [ 1372.783296][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1372.865913][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1373.678225][T26004] Bluetooth: hci4: command tx timeout [ 1373.814276][T27531] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1373.922801][T27471] chnl_net:caif_netlink_parms(): no params data found [ 1373.955829][ T7241] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1374.103601][T27553] netlink: 'syz.0.4471': attribute type 4 has an invalid length. [ 1374.188680][ T7241] usb 4-1: Using ep0 maxpacket: 16 [ 1374.216197][ T7241] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1374.227774][T27488] chnl_net:caif_netlink_parms(): no params data found [ 1374.235701][ T7241] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1374.256710][ T7241] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 1374.275002][ T7241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.284329][ T7241] usb 4-1: Product: syz [ 1374.293203][ T7241] usb 4-1: Manufacturer: syz [ 1374.305259][ T7241] usb 4-1: SerialNumber: syz [ 1374.314103][ T7241] usb 4-1: config 0 descriptor?? [ 1374.338760][ T7241] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1374.345433][ T7241] gspca_stv06xx: st6422 sensor detected [ 1374.492727][T27564] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1374.545002][T27547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.563763][T27547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.583650][T27471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.623525][T27471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.634253][T27471] bridge_slave_0: entered allmulticast mode [ 1374.650405][T27471] bridge_slave_0: entered promiscuous mode [ 1374.742979][T27578] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4475'. [ 1374.795315][T26004] Bluetooth: hci3: command tx timeout [ 1374.835916][T27471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.865258][T27471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.869256][T27547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.886202][T27471] bridge_slave_1: entered allmulticast mode [ 1374.912887][T27471] bridge_slave_1: entered promiscuous mode [ 1374.919426][T27547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.107936][T27471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.163353][T27488] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.178808][T27488] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.186404][T27488] bridge_slave_0: entered allmulticast mode [ 1375.202107][T27488] bridge_slave_0: entered promiscuous mode [ 1375.222222][T27579] Â: renamed from pim6reg1 [ 1375.259240][T27471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.279480][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4474'. [ 1375.301125][T27488] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.350933][T27488] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.370644][T27488] bridge_slave_1: entered allmulticast mode [ 1375.388474][T27488] bridge_slave_1: entered promiscuous mode [ 1375.452492][T27590] netlink: 'syz.0.4474': attribute type 10 has an invalid length. [ 1375.476958][T27590] bridge0: port 3(team0) entered blocking state [ 1375.495625][T27590] bridge0: port 3(team0) entered disabled state [ 1375.525699][T27590] team0: entered allmulticast mode [ 1375.530910][T27590] team_slave_0: entered allmulticast mode [ 1375.538619][T27590] team_slave_1: entered allmulticast mode [ 1375.548901][T27590] team0: entered promiscuous mode [ 1375.562655][T27590] team_slave_0: entered promiscuous mode [ 1375.571278][T27590] team_slave_1: entered promiscuous mode [ 1375.580140][T27590] bridge0: port 3(team0) entered blocking state [ 1375.586672][T27590] bridge0: port 3(team0) entered forwarding state [ 1375.738032][T27471] team0: Port device team_slave_0 added [ 1375.755417][T26004] Bluetooth: hci4: command tx timeout [ 1375.771609][T27471] team0: Port device team_slave_1 added [ 1375.788997][T27488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.841059][T27488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1375.990818][T27471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.022298][T27471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.056414][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4478'. [ 1376.068643][T27471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.079669][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1376.079688][ T29] audit: type=1326 audit(1720037823.401:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.131260][ T29] audit: type=1326 audit(1720037823.401:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.183682][T27488] team0: Port device team_slave_0 added [ 1376.193376][ T29] audit: type=1326 audit(1720037823.401:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.224932][ T29] audit: type=1326 audit(1720037823.401:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.260078][ T29] audit: type=1326 audit(1720037823.401:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.283100][ T29] audit: type=1326 audit(1720037823.401:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.308860][ T29] audit: type=1326 audit(1720037823.401:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.346694][ T29] audit: type=1326 audit(1720037823.401:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.380097][ T29] audit: type=1326 audit(1720037823.401:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.410794][ T29] audit: type=1326 audit(1720037823.411:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27600 comm="syz.4.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1376.457656][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.596043][T27471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.615199][T27471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.645721][T27471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.670069][T27488] team0: Port device team_slave_1 added [ 1376.785509][ T7241] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1376.805840][ T7241] usb 4-1: USB disconnect, device number 7 [ 1376.837888][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.876150][T26004] Bluetooth: hci3: command tx timeout [ 1376.975467][T27604] netlink: 'syz.0.4480': attribute type 10 has an invalid length. [ 1376.998413][T27604] hsr0: entered promiscuous mode [ 1377.054210][T27604] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1377.081499][T27604] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1377.127254][T27604] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1377.140566][T27604] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1377.318976][T27471] hsr_slave_0: entered promiscuous mode [ 1377.340638][T27471] hsr_slave_1: entered promiscuous mode [ 1377.459736][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.490906][T27488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1377.533989][T27488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1377.575473][T27617] FAULT_INJECTION: forcing a failure. [ 1377.575473][T27617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1377.609229][T27488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1377.679156][T27617] CPU: 0 PID: 27617 Comm: syz.0.4482 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1377.689474][T27617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1377.699573][T27617] Call Trace: [ 1377.702887][T27617] [ 1377.705858][T27617] dump_stack_lvl+0x241/0x360 [ 1377.710589][T27617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1377.715837][T27617] ? __pfx__printk+0x10/0x10 [ 1377.720474][T27617] ? __pfx_lock_release+0x10/0x10 [ 1377.725543][T27617] should_fail_ex+0x3b0/0x4e0 [ 1377.730275][T27617] _copy_to_user+0x2f/0xb0 [ 1377.734730][T27617] rng_dev_read+0x3be/0x6d0 [ 1377.739287][T27617] ? __pfx_rng_dev_read+0x10/0x10 [ 1377.744352][T27617] ? security_file_permission+0x7f/0xa0 [ 1377.750030][T27617] ? rw_verify_area+0x52a/0x6b0 [ 1377.754927][T27617] vfs_readv+0x6c2/0xa90 [ 1377.759231][T27617] ? __pfx_rng_dev_read+0x10/0x10 [ 1377.764298][T27617] ? __pfx_vfs_readv+0x10/0x10 [ 1377.769122][T27617] ? __fget_files+0x29/0x470 [ 1377.773779][T27617] __x64_sys_preadv+0x1c7/0x2d0 [ 1377.778681][T27617] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1377.784098][T27617] ? do_syscall_64+0x100/0x230 [ 1377.788912][T27617] ? do_syscall_64+0xb6/0x230 [ 1377.793644][T27617] do_syscall_64+0xf3/0x230 [ 1377.798233][T27617] ? clear_bhb_loop+0x35/0x90 [ 1377.802946][T27617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.808905][T27617] RIP: 0033:0x7f34ff775bd9 [ 1377.813356][T27617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.833010][T27617] RSP: 002b:00007f35004e9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1377.841514][T27617] RAX: ffffffffffffffda RBX: 00007f34ff903f60 RCX: 00007f34ff775bd9 [ 1377.849519][T27617] RDX: 0000000000000008 RSI: 0000000020000240 RDI: 0000000000000004 [ 1377.857592][T27617] RBP: 00007f35004e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.865660][T27617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.873653][T27617] R13: 000000000000000b R14: 00007f34ff903f60 R15: 00007f34ffa2fa68 [ 1377.881656][T27617] [ 1377.898890][T26004] Bluetooth: hci4: command tx timeout [ 1378.009543][T27629] xt_TCPMSS: Only works on TCP SYN packets [ 1378.079397][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.141424][T27488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.162475][T27488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1378.225232][T27488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.890763][T27488] hsr_slave_0: entered promiscuous mode [ 1378.958655][T27488] hsr_slave_1: entered promiscuous mode [ 1379.006351][T27488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1379.014058][T27488] Cannot create hsr debugfs directory [ 1379.495685][ T51] bridge_slave_1: left allmulticast mode [ 1379.501403][ T51] bridge_slave_1: left promiscuous mode [ 1379.524723][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.557691][ T51] bridge_slave_0: left allmulticast mode [ 1379.566652][ T51] bridge_slave_0: left promiscuous mode [ 1379.572572][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.128420][T27667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1380.558053][T27675] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4492'. [ 1380.570532][T27676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1380.756328][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.779049][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.793213][ T51] bond0 (unregistering): Released all slaves [ 1381.153359][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1381.153380][ T29] audit: type=1326 audit(1720037828.481:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.184940][ T29] audit: type=1326 audit(1720037828.481:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.220086][ T29] audit: type=1326 audit(1720037828.491:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.293505][ T29] audit: type=1326 audit(1720037828.491:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.319046][ T29] audit: type=1326 audit(1720037828.491:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.325440][ T7241] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1381.348476][ T29] audit: type=1326 audit(1720037828.491:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.402016][ T29] audit: type=1326 audit(1720037828.491:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.428068][ T29] audit: type=1326 audit(1720037828.491:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.521085][ T29] audit: type=1326 audit(1720037828.491:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.549732][ T29] audit: type=1326 audit(1720037828.491:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27678 comm="syz.4.4493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1381.687733][ T7241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1381.700375][ T7241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1381.743240][ T7241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1381.771533][ T7241] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1381.850319][ T51] hsr_slave_0: left promiscuous mode [ 1381.857794][ T51] hsr_slave_1: left promiscuous mode [ 1381.864609][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.882446][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.889655][ T7241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.904796][ T7241] usb 1-1: config 0 descriptor?? [ 1381.965494][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.986987][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.061425][ T51] veth1_macvtap: left promiscuous mode [ 1382.072662][ T51] veth0_macvtap: left promiscuous mode [ 1382.084939][ T51] veth1_vlan: left promiscuous mode [ 1382.092515][ T51] veth0_vlan: left promiscuous mode [ 1382.335004][ T7241] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 1382.354679][ T7241] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 1382.364733][ T7241] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving [ 1382.389868][T27692] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1382.403474][ T7241] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1382.630908][ T7241] usb 1-1: USB disconnect, device number 112 [ 1382.789718][ T25] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1382.985395][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1383.001689][ T25] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1383.021844][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1383.033764][ T25] usb 5-1: string descriptor 0 read error: -22 [ 1383.048269][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1383.058112][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.074925][ T25] usbhid 5-1:1.0: can't add hid device: -22 [ 1383.081508][ T25] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 1383.158882][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1383.278491][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1384.074587][ T7241] usb 5-1: USB disconnect, device number 113 [ 1384.657853][T27719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4502'. [ 1384.762727][T27488] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1384.809242][T27488] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1384.896067][T27488] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1384.935848][T27488] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1385.193751][T27471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.229291][T27471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.263482][T27471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.364750][T27471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.488492][T27488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.582577][T27728] netlink: 'syz.0.4504': attribute type 3 has an invalid length. [ 1385.621418][T27728] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1385.666911][T27488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.726094][ T933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.733334][ T933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1385.773156][ T933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.780322][ T933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.207497][T27471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.367876][T27471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.482918][ T5183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.490098][ T5183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.533855][ T5183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.541132][ T5183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.642371][T27488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1386.923811][T27471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1387.112630][T27488] veth0_vlan: entered promiscuous mode [ 1387.149911][T27471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.176823][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4514'. [ 1387.213255][T27488] veth1_vlan: entered promiscuous mode [ 1387.276973][ T933] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1387.429309][T27488] veth0_macvtap: entered promiscuous mode [ 1387.458104][T27488] veth1_macvtap: entered promiscuous mode [ 1387.506497][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 1387.528318][T27471] veth0_vlan: entered promiscuous mode [ 1387.546576][ T933] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 1387.566751][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.588329][ T933] usb 1-1: Product: syz [ 1387.592554][ T933] usb 1-1: Manufacturer: syz [ 1387.599604][T27471] veth1_vlan: entered promiscuous mode [ 1387.614628][ T933] usb 1-1: SerialNumber: syz [ 1387.630452][ T933] usb 1-1: config 0 descriptor?? [ 1387.638279][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.658653][ T933] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 1387.670834][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.686633][ T933] pctv452e: pctv452e_power_ctrl: 1 [ 1387.686633][ T933] [ 1387.704658][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.718107][ T933] usb 1-1: selecting invalid altsetting 3 [ 1387.723882][ T933] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1387.723882][ T933] [ 1387.736564][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.747282][ T933] dvb-usb: bulk message failed: -22 (5/0) [ 1387.772739][ T933] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1387.782876][ T933] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 1387.789815][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.789840][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.791996][T27488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.801735][ T933] usb 1-1: media controller created [ 1387.850022][ T933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1387.952753][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.984656][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.999638][ T933] DVB: Unable to find symbol stb0899_attach() [ 1388.015142][ T933] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 1388.022222][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.034989][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.065184][T27488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1388.095148][T27488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.117142][T27488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1388.155470][ T933] rc_core: IR keymap rc-dib0700-rc5 not found [ 1388.161608][ T933] Registered IR keymap rc-empty [ 1388.196193][T27488] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.216717][ T933] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1388.229437][T27488] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.248003][ T933] input: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input57 [ 1388.257202][T27488] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.277695][T27488] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1388.295929][ T933] dvb-usb: schedule remote query interval to 100 msecs. [ 1388.303020][ T933] pctv452e: pctv452e_power_ctrl: 0 [ 1388.303020][ T933] [ 1388.324126][T27471] veth0_macvtap: entered promiscuous mode [ 1388.345353][ T933] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 1388.407133][ T5145] dvb-usb: bulk message failed: -22 (4/0) [ 1388.413440][ T5145] dvb-usb: error -22 while querying for an remote control event. [ 1388.423002][ T933] usb 1-1: USB disconnect, device number 113 [ 1388.477504][T27471] veth1_macvtap: entered promiscuous mode [ 1388.599840][ T933] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 1388.617952][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.624486][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 1388.624507][ T29] audit: type=1326 audit(1720037835.951:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.645127][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.685478][ T29] audit: type=1326 audit(1720037836.021:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.731187][ T29] audit: type=1326 audit(1720037836.021:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.741675][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.786891][ T29] audit: type=1326 audit(1720037836.021:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.795164][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.834608][ T29] audit: type=1326 audit(1720037836.021:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.865531][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.892023][ T29] audit: type=1326 audit(1720037836.021:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1388.922307][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1388.948432][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1388.976705][ T29] audit: type=1326 audit(1720037836.021:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1389.008478][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.032716][T27471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1389.058014][ T29] audit: type=1326 audit(1720037836.021:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1389.094413][ T29] audit: type=1326 audit(1720037836.021:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1389.124691][T11802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.147437][T11802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.181834][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.193134][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.212456][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.239368][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.252310][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.271090][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.281992][T27471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1389.293221][T27471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1389.312034][T27471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1389.437807][T27471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.455631][ T29] audit: type=1326 audit(1720037836.781:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27803 comm="syz.3.4520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7f2575bd9 code=0x7ffc0000 [ 1389.476158][T27471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.525258][T27471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.570720][T27471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.633391][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1389.644325][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.835682][ T4493] Bluetooth: hci1: command 0x0406 tx timeout [ 1390.088831][T11802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.491361][T11802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.568474][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.615721][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.664970][T27841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.767450][T11802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.795397][ T5183] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1390.978878][T27845] input: syz1 as /devices/virtual/input/input58 [ 1391.023235][ T5183] usb 3-1: string descriptor 0 read error: -22 [ 1391.042768][ T5183] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1391.084530][ T5183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.087018][T11802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.135540][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1391.151548][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1391.168026][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1391.182114][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1391.197128][ T5183] usb 3-1: config 0 descriptor?? [ 1391.203187][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1391.217375][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1391.233676][ T5183] usb 3-1: Found UVC 0.00 device (30c9:0093) [ 1391.243002][ T5183] usb 3-1: No valid video chain found. [ 1391.271278][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.280470][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.721030][T11802] team0: left allmulticast mode [ 1391.736939][T11802] team_slave_0: left allmulticast mode [ 1391.767179][T11802] team_slave_1: left allmulticast mode [ 1391.801626][T11802] team0: left promiscuous mode [ 1391.829975][T11802] team_slave_0: left promiscuous mode [ 1391.859751][T11802] team_slave_1: left promiscuous mode [ 1391.873650][T11802] bridge0: port 3(team0) entered disabled state [ 1391.901506][T11802] bridge_slave_1: left allmulticast mode [ 1391.913657][T11802] bridge_slave_1: left promiscuous mode [ 1391.937760][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.966514][T11802] bridge_slave_0: left allmulticast mode [ 1391.976451][T11802] bridge_slave_0: left promiscuous mode [ 1391.992597][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.276689][T26004] Bluetooth: hci2: command tx timeout [ 1393.432764][ T5145] usb 3-1: USB disconnect, device number 124 [ 1393.679851][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1393.679873][ T29] audit: type=1326 audit(1720037841.011:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1393.767279][ T29] audit: type=1326 audit(1720037841.011:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1393.854256][ T29] audit: type=1326 audit(1720037841.041:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1393.937569][ T29] audit: type=1326 audit(1720037841.041:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.024149][ T29] audit: type=1326 audit(1720037841.041:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.138603][ T29] audit: type=1326 audit(1720037841.051:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.271793][ T29] audit: type=1326 audit(1720037841.051:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.320515][T11802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.378427][ T29] audit: type=1326 audit(1720037841.051:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.415908][T11802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.493133][T11802] bond0 (unregistering): Released all slaves [ 1394.515554][ T29] audit: type=1326 audit(1720037841.051:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.598418][ T29] audit: type=1326 audit(1720037841.051:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27885 comm="syz.4.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda38f75bd9 code=0x7ffc0000 [ 1394.777484][T27937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.834318][T27947] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4545'. [ 1394.844026][T27947] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1394.916754][T27942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.924078][T27942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.217446][ T5145] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1395.230762][T27958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4547'. [ 1395.355352][T26004] Bluetooth: hci2: command tx timeout [ 1395.448529][ T933] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1395.487479][ T5145] usb 2-1: string descriptor 0 read error: -22 [ 1395.521353][ T5145] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1395.566819][ T5145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.603058][ T5145] usb 2-1: config 0 descriptor?? [ 1395.611823][T11802] hsr_slave_0: left promiscuous mode [ 1395.643249][ T5145] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 1395.668830][ T5145] usb 2-1: No valid video chain found. [ 1395.675288][ T933] usb 3-1: Using ep0 maxpacket: 32 [ 1395.681792][T11802] hsr_slave_1: left promiscuous mode [ 1395.704870][ T933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.733309][T11802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.753672][ T933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.767074][T11802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.785290][ T933] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1395.798103][T11802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.813571][ T933] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1395.825785][T11802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.846792][ T933] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1395.872202][ T933] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1395.920002][ T933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1395.945792][T11802] veth1_macvtap: left promiscuous mode [ 1395.955251][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.971448][T11802] veth0_macvtap: left promiscuous mode [ 1395.982558][ T933] usb 3-1: Product: syz [ 1395.987102][T11802] veth1_vlan: left promiscuous mode [ 1395.997656][ T933] usb 3-1: Manufacturer: syz [ 1396.003598][T11802] veth0_vlan: left promiscuous mode [ 1396.017712][ T933] usb 3-1: SerialNumber: syz [ 1396.695384][ T25] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1396.791880][T27987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1396.905257][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1396.942450][T27990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1396.970537][ T25] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1396.992379][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.017541][ T25] usb 5-1: Product: syz [ 1397.029845][ T25] usb 5-1: Manufacturer: syz [ 1397.042597][ T25] usb 5-1: SerialNumber: syz [ 1397.085004][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1397.094293][T27992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.127733][T27990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1397.437745][T26004] Bluetooth: hci2: command tx timeout [ 1397.718739][ T25] gspca_stk1135: reg_w 0x3 err -71 [ 1397.734230][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.750329][ T25] gspca_stk1135: Sensor write failed [ 1397.779790][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.810045][ T25] gspca_stk1135: Sensor write failed [ 1397.825165][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.878891][ T25] gspca_stk1135: Sensor read failed [ 1397.884181][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.901624][ T5183] usb 2-1: USB disconnect, device number 116 [ 1397.909683][ T25] gspca_stk1135: Sensor read failed [ 1397.915019][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 1397.937036][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.943415][ T25] gspca_stk1135: Sensor read failed [ 1397.954931][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1397.980621][ T25] gspca_stk1135: Sensor read failed [ 1397.989164][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1398.009221][ T25] gspca_stk1135: Sensor write failed [ 1398.014619][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 1398.028657][T11802] team0 (unregistering): Port device team_slave_1 removed [ 1398.036714][ T25] gspca_stk1135: Sensor write failed [ 1398.042117][ T25] stk1135 5-1:2.0: probe with driver stk1135 failed with error -71 [ 1398.069473][ T25] usb 5-1: USB disconnect, device number 114 [ 1398.154810][T11802] team0 (unregistering): Port device team_slave_0 removed [ 1398.346680][T27999] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1398.356892][T27999] FAULT_INJECTION: forcing a failure. [ 1398.356892][T27999] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.369595][T27999] CPU: 1 PID: 27999 Comm: syz.4.4553 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1398.379787][T27999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1398.389882][T27999] Call Trace: [ 1398.393196][T27999] [ 1398.396160][T27999] dump_stack_lvl+0x241/0x360 [ 1398.400893][T27999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1398.406144][T27999] ? __pfx__printk+0x10/0x10 [ 1398.410778][T27999] ? __lock_acquire+0x1346/0x1fd0 [ 1398.415846][T27999] should_fail_ex+0x3b0/0x4e0 [ 1398.420568][T27999] ? __alloc_skb+0x1c3/0x440 [ 1398.425194][T27999] should_failslab+0x9/0x20 [ 1398.429744][T27999] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1398.435603][T27999] __alloc_skb+0x1c3/0x440 [ 1398.440041][T27999] ? __pfx___alloc_skb+0x10/0x10 [ 1398.445005][T27999] tcp_make_synack+0x10c/0x24a0 [ 1398.449875][T27999] ? mark_lock+0x9a/0x350 [ 1398.454243][T27999] ? __pfx_tcp_make_synack+0x10/0x10 [ 1398.459560][T27999] ? __pfx_lock_acquire+0x10/0x10 [ 1398.464603][T27999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1398.470947][T27999] ? get_random_u32+0x521/0xab0 [ 1398.475817][T27999] ? lockdep_hardirqs_on+0x99/0x150 [ 1398.481041][T27999] ? get_random_u32+0x1a3/0xab0 [ 1398.485919][T27999] tcp_v4_send_synack+0x107/0xcf0 [ 1398.490973][T27999] ? __pfx_tcp_v4_send_synack+0x10/0x10 [ 1398.496545][T27999] ? __pfx_tcp_openreq_init_rwin+0x10/0x10 [ 1398.502362][T27999] ? __cookie_v4_init_sequence+0x274/0x520 [ 1398.508200][T27999] tcp_conn_request+0x1a5a/0x32f0 [ 1398.513271][T27999] ? __pfx_tcp_conn_request+0x10/0x10 [ 1398.518681][T27999] ? subflow_v4_conn_request+0x1a1/0x220 [ 1398.524327][T27999] ? tcp_rcv_state_process+0x20a/0x4570 [ 1398.529887][T27999] tcp_rcv_state_process+0x1bd1/0x4570 [ 1398.535357][T27999] ? tcp_do_parse_auth_options+0x29b/0x330 [ 1398.541190][T27999] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 1398.547008][T27999] ? sk_filter_trim_cap+0x5bf/0xa80 [ 1398.552222][T27999] ? __inet_lookup_listener+0x27a/0x3f0 [ 1398.557789][T27999] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 1398.563372][T27999] tcp_v4_do_rcv+0x778/0xc60 [ 1398.567982][T27999] ? tcp_v4_fill_cb+0x1de/0x460 [ 1398.572859][T27999] tcp_v4_rcv+0x2ad7/0x37b0 [ 1398.577528][T27999] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1398.582493][T27999] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1398.587367][T27999] ip_protocol_deliver_rcu+0x225/0x430 [ 1398.592852][T27999] ? ip_local_deliver_finish+0x22e/0x5f0 [ 1398.598504][T27999] ip_local_deliver_finish+0x33f/0x5f0 [ 1398.603984][T27999] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1398.609989][T27999] NF_HOOK+0x3a4/0x450 [ 1398.614081][T27999] ? NF_HOOK+0x9a/0x450 [ 1398.618248][T27999] ? __pfx_NF_HOOK+0x10/0x10 [ 1398.622859][T27999] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1398.628878][T27999] ? ip_rcv_finish+0x406/0x560 [ 1398.633662][T27999] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1398.638810][T27999] NF_HOOK+0x3a4/0x450 [ 1398.642898][T27999] ? NF_HOOK+0x9a/0x450 [ 1398.647075][T27999] ? __pfx_NF_HOOK+0x10/0x10 [ 1398.651685][T27999] ? ip_rcv_core+0x7ff/0xd10 [ 1398.656294][T27999] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1398.661464][T27999] ? __pfx_ip_rcv+0x10/0x10 [ 1398.665991][T27999] __netif_receive_skb+0x2bf/0x650 [ 1398.671136][T27999] ? __pfx_lock_acquire+0x10/0x10 [ 1398.676181][T27999] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 1398.682467][T27999] ? __pfx___netif_receive_skb+0x10/0x10 [ 1398.688126][T27999] ? __kasan_slab_alloc+0x66/0x80 [ 1398.693171][T27999] ? read_tsc+0x9/0x20 [ 1398.697257][T27999] ? timekeeping_get_ns+0x2c0/0x420 [ 1398.702495][T27999] ? netif_receive_skb+0x131/0x890 [ 1398.707625][T27999] ? netif_receive_skb+0x131/0x890 [ 1398.712754][T27999] netif_receive_skb+0x1e8/0x890 [ 1398.717723][T27999] ? tun_rx_batched+0x160/0x8f0 [ 1398.722592][T27999] ? __pfx_netif_receive_skb+0x10/0x10 [ 1398.728088][T27999] ? tun_rx_batched+0x160/0x8f0 [ 1398.732968][T27999] tun_rx_batched+0x1b7/0x8f0 [ 1398.737667][T27999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1398.744016][T27999] ? __pfx_lock_acquire+0x10/0x10 [ 1398.749052][T27999] ? __pfx_tun_rx_batched+0x10/0x10 [ 1398.754285][T27999] tun_get_user+0x2f35/0x4560 [ 1398.758990][T27999] ? tun_get_user+0x2a2f/0x4560 [ 1398.763872][T27999] ? __pfx_tun_get_user+0x10/0x10 [ 1398.768918][T27999] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1398.774488][T27999] ? tun_get+0x1e/0x2f0 [ 1398.778679][T27999] ? tun_get+0x1e/0x2f0 [ 1398.782879][T27999] ? tun_get+0x27d/0x2f0 [ 1398.787141][T27999] tun_chr_write_iter+0x113/0x1f0 [ 1398.792272][T27999] vfs_write+0xa72/0xc90 [ 1398.796549][T27999] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1398.802126][T27999] ? __pfx_vfs_write+0x10/0x10 [ 1398.806934][T27999] ksys_write+0x1a0/0x2c0 [ 1398.811295][T27999] ? __pfx_ksys_write+0x10/0x10 [ 1398.816257][T27999] ? do_syscall_64+0x100/0x230 [ 1398.821052][T27999] ? do_syscall_64+0xb6/0x230 [ 1398.825753][T27999] do_syscall_64+0xf3/0x230 [ 1398.830280][T27999] ? clear_bhb_loop+0x35/0x90 [ 1398.834973][T27999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.840901][T27999] RIP: 0033:0x7fda38f7475f [ 1398.845328][T27999] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 1398.864955][T27999] RSP: 002b:00007fda39df3010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1398.873383][T27999] RAX: ffffffffffffffda RBX: 00007fda39103f60 RCX: 00007fda38f7475f [ 1398.881363][T27999] RDX: 0000000000000082 RSI: 0000000020000080 RDI: 00000000000000c8 [ 1398.889351][T27999] RBP: 00007fda39df30a0 R08: 0000000000000000 R09: 0000000000000000 [ 1398.897332][T27999] R10: 0000000000000082 R11: 0000000000000293 R12: 0000000000000001 [ 1398.905317][T27999] R13: 000000000000000b R14: 00007fda39103f60 R15: 00007fda3922fa68 [ 1398.913322][T27999] [ 1399.049874][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 1399.049894][ T29] audit: type=1326 audit(1720037846.381:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.083320][ T29] audit: type=1326 audit(1720037846.391:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.153659][ T29] audit: type=1326 audit(1720037846.411:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.183964][ T29] audit: type=1326 audit(1720037846.411:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.219828][ T29] audit: type=1326 audit(1720037846.411:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.298202][ T29] audit: type=1326 audit(1720037846.441:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.434038][ T29] audit: type=1326 audit(1720037846.441:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.498985][ T29] audit: type=1326 audit(1720037846.441:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.525374][ T29] audit: type=1326 audit(1720037846.461:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1399.526696][T26004] Bluetooth: hci2: command tx timeout [ 1399.548553][ T29] audit: type=1326 audit(1720037846.461:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27996 comm="syz.1.4552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c8175bd9 code=0x7ffc0000 [ 1400.259315][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4558'. [ 1400.460499][ T933] cdc_ncm 3-1:1.0: bind() failure [ 1400.499401][T27856] chnl_net:caif_netlink_parms(): no params data found [ 1400.551168][ T933] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1400.582627][ T933] cdc_ncm 3-1:1.1: bind() failure [ 1400.622506][ T933] usb 3-1: USB disconnect, device number 125 [ 1401.075759][T27856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.082428][ T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1401.088471][T27856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.137438][T27856] bridge_slave_0: entered allmulticast mode [ 1401.154422][T27856] bridge_slave_0: entered promiscuous mode [ 1401.222252][T27856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.230330][ T933] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1401.271879][T27856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.295021][T27856] bridge_slave_1: entered allmulticast mode [ 1401.302697][T27856] bridge_slave_1: entered promiscuous mode [ 1401.350249][ T25] usb 4-1: string descriptor 0 read error: -22 [ 1401.374222][ T25] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1401.421749][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1401.468789][ T25] usb 4-1: config 0 descriptor?? [ 1401.469825][ T933] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1401.498390][ T25] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 1401.516361][ T25] usb 4-1: No valid video chain found. [ 1401.538640][T27856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1401.574647][ T933] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1401.608311][ T933] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1401.635184][ T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.639746][T27856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.659317][T28033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1401.922081][T28049] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4562'. [ 1401.979364][ T933] usb 2-1: USB disconnect, device number 117 [ 1402.091709][T27856] team0: Port device team_slave_0 added [ 1402.143634][T27856] team0: Port device team_slave_1 added [ 1402.258237][T27856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1402.272542][T27856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.348441][T27856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1402.408250][T27856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1402.423635][T27856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1402.427848][ T7241] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1402.460999][T27856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1402.695310][ T7241] usb 5-1: Using ep0 maxpacket: 16 [ 1402.700065][T27856] hsr_slave_0: entered promiscuous mode [ 1402.705600][ T7241] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1402.729867][T27856] hsr_slave_1: entered promiscuous mode [ 1402.744533][T27856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1402.761106][ T7241] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1402.769264][T27856] Cannot create hsr debugfs directory [ 1402.790153][ T7241] usb 5-1: string descriptor 0 read error: -22 [ 1402.806036][ T7241] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.40 [ 1402.833256][ T7241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.886849][ T7241] usbhid 5-1:1.0: can't add hid device: -22 [ 1402.918854][ T7241] usbhid 5-1:1.0: probe with driver usbhid failed with error -22 [ 1403.204212][ T5183] usb 5-1: USB disconnect, device number 115 [ 1403.742266][T15314] usb 4-1: USB disconnect, device number 8 [ 1403.766867][ T5145] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1404.006544][ T5145] usb 2-1: Using ep0 maxpacket: 16 [ 1404.032895][ T5145] usb 2-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 1404.060412][ T5145] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.086898][ T5145] usb 2-1: Product: syz [ 1404.095558][ T5145] usb 2-1: Manufacturer: syz [ 1404.111600][ T5145] usb 2-1: SerialNumber: syz [ 1404.153055][ T5145] usb 2-1: config 0 descriptor?? [ 1404.166367][ T5145] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 1404.186812][ T5145] pctv452e: pctv452e_power_ctrl: 1 [ 1404.186812][ T5145] [ 1404.200629][ T5145] usb 2-1: selecting invalid altsetting 3 [ 1404.207667][ T5145] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1404.207667][ T5145] [ 1404.255857][ T5145] dvb-usb: bulk message failed: -22 (5/0) [ 1404.273655][ T5145] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1404.294613][ T5145] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 1404.321902][ T5145] usb 2-1: media controller created [ 1404.359504][T27856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1404.385295][ T5183] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1404.400871][ T5145] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1404.476440][T27856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1404.554348][ T5145] DVB: Unable to find symbol stb0899_attach() [ 1404.564890][T27856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1404.577489][ T5145] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 1404.653487][T27856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1404.748469][ T5183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 1404.825287][ T5183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 1404.901798][ T5183] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1404.915438][ T5145] rc_core: IR keymap rc-dib0700-rc5 not found [ 1404.934605][ T5183] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1404.938345][ T5145] Registered IR keymap rc-empty [ 1404.984485][ T5183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.002030][ T5145] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1405.044432][ T5183] usb 5-1: config 0 descriptor?? [ 1405.058999][ T5145] input: PCTV HDTV USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input59 [ 1405.076903][T27856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.110363][ T5145] dvb-usb: schedule remote query interval to 100 msecs. [ 1405.142661][ T5145] pctv452e: pctv452e_power_ctrl: 0 [ 1405.142661][ T5145] [ 1405.177382][T27856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.186718][ T5145] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 1405.240427][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.247697][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1405.256211][ T7241] dvb-usb: bulk message failed: -22 (4/0) [ 1405.262099][ T7241] dvb-usb: error -22 while querying for an remote control event. [ 1405.280489][T15314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.287694][T15314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.456712][T15314] dvb-usb: bulk message failed: -22 (4/0) [ 1405.496180][T15314] dvb-usb: error -22 while querying for an remote control event. [ 1405.553906][T27856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1405.576106][ T5183] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0 [ 1405.628387][ T5183] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x0 [ 1405.649651][T27856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1405.693543][ T7241] dvb-usb: bulk message failed: -22 (4/0) [ 1405.706244][ T5183] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 1405.721110][ T7241] dvb-usb: error -22 while querying for an remote control event. [ 1405.798269][ T5183] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1405.813717][T27856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.862574][ T7241] usb 2-1: USB disconnect, device number 118 [ 1405.923522][ T5183] usb 5-1: USB disconnect, device number 116 [ 1406.022915][T27856] veth0_vlan: entered promiscuous mode [ 1406.132402][ T7241] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 1406.154505][T27856] veth1_vlan: entered promiscuous mode [ 1406.252353][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1406.317229][T26004] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1406.327611][T26004] Bluetooth: hci3: Injecting HCI hardware error event [ 1406.341680][T26004] Bluetooth: hci3: hardware error 0x00 [ 1406.433120][T27856] veth0_macvtap: entered promiscuous mode [ 1406.467803][T27856] veth1_macvtap: entered promiscuous mode [ 1406.574975][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.574998][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.575009][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.575021][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.575031][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.575043][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.575052][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.575199][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.586349][T27856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.628119][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.628149][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.628165][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.628183][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.628199][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.628217][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.628230][T27856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.628247][T27856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.630050][T27856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.633890][T27856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.633929][T27856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.633960][T27856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.633992][T27856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.901257][T23072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.901278][T23072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.054418][ T2868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.054448][ T2868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.430182][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1407.468558][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 1407.468579][ T29] audit: type=1326 audit(1720037854.801:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28129 comm="syz.4.4576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda38f75bd9 code=0x0 [ 1407.555231][ T5183] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1407.737459][ T5183] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 1407.737499][ T5183] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.748565][ T5183] usb 4-1: config 0 descriptor?? [ 1407.907055][ T58] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1408.013133][ T2868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.041017][ T5183] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 1408.095414][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 1408.103319][ T58] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.103353][ T58] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1408.103403][ T58] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1408.110522][ T58] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1408.110558][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.110584][ T58] usb 5-1: Product: syz [ 1408.110602][ T58] usb 5-1: Manufacturer: syz [ 1408.110629][ T58] usb 5-1: SerialNumber: syz [ 1408.137178][ T58] cdc_ncm 5-1:1.0: skipping garbage [ 1408.137206][ T58] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1408.137251][ T58] cdc_ncm 5-1:1.0: bind() failure [ 1408.156154][ T25] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1408.308164][ T2868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.455702][ T25] usb 1-1: string descriptor 0 read error: -22 [ 1408.455862][ T25] usb 1-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 1408.455891][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.468899][ T25] usb 1-1: config 0 descriptor?? [ 1408.481178][T26004] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1408.493482][T26004] [ 1408.493497][T26004] ============================================ [ 1408.493508][T26004] WARNING: possible recursive locking detected [ 1408.493519][T26004] 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1408.493535][T26004] -------------------------------------------- [ 1408.493544][T26004] kworker/u9:0/26004 is trying to acquire lock: [ 1408.493559][T26004] ffff888063bd2948 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 1408.493640][T26004] [ 1408.493640][T26004] but task is already holding lock: [ 1408.493650][T26004] ffff888063bd2948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1408.493707][T26004] [ 1408.493707][T26004] other info that might help us debug this: [ 1408.493717][T26004] Possible unsafe locking scenario: [ 1408.493717][T26004] [ 1408.493726][T26004] CPU0 [ 1408.493733][T26004] ---- [ 1408.493740][T26004] lock((wq_completion)hci3); [ 1408.493757][T26004] lock((wq_completion)hci3); [ 1408.493775][T26004] [ 1408.493775][T26004] *** DEADLOCK *** [ 1408.493775][T26004] [ 1408.493783][T26004] May be due to missing lock nesting notation [ 1408.493783][T26004] [ 1408.493793][T26004] 2 locks held by kworker/u9:0/26004: [ 1408.493809][T26004] #0: ffff888063bd2948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1408.493870][T26004] #1: ffffc90009187d00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1408.493925][T26004] [ 1408.493925][T26004] stack backtrace: [ 1408.493934][T26004] CPU: 0 PID: 26004 Comm: kworker/u9:0 Not tainted 6.10.0-rc6-syzkaller-00061-ge9d22f7a6655 #0 [ 1408.493956][T26004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1408.493971][T26004] Workqueue: hci3 hci_error_reset [ 1408.494001][T26004] Call Trace: [ 1408.494011][T26004] [ 1408.494021][T26004] dump_stack_lvl+0x241/0x360 [ 1408.494057][T26004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1408.494093][T26004] ? print_deadlock_bug+0x479/0x620 [ 1408.494125][T26004] validate_chain+0x15d3/0x5900 [ 1408.494168][T26004] ? __pfx_validate_chain+0x10/0x10 [ 1408.494197][T26004] ? __pfx_validate_chain+0x10/0x10 [ 1408.494227][T26004] ? __pfx_validate_chain+0x10/0x10 [ 1408.494259][T26004] ? __pfx_validate_chain+0x10/0x10 [ 1408.494291][T26004] ? mark_lock+0x9a/0x350 [ 1408.494322][T26004] ? mark_lock+0x9a/0x350 [ 1408.494348][T26004] __lock_acquire+0x1346/0x1fd0 [ 1408.494381][T26004] lock_acquire+0x1ed/0x550 [ 1408.494404][T26004] ? __flush_workqueue+0x1b0/0x1710 [ 1408.494435][T26004] ? __pfx_lock_acquire+0x10/0x10 [ 1408.494459][T26004] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1408.494490][T26004] ? __init_swait_queue_head+0xae/0x150 [ 1408.494524][T26004] ? __flush_workqueue+0x1b0/0x1710 [ 1408.494549][T26004] __flush_workqueue+0x1c9/0x1710 [ 1408.494576][T26004] ? __flush_workqueue+0x1b0/0x1710 [ 1408.494610][T26004] ? rcu_is_watching+0x15/0xb0 [ 1408.494636][T26004] ? trace_contention_end+0x3c/0x120 [ 1408.494670][T26004] ? __pfx___flush_workqueue+0x10/0x10 [ 1408.494705][T26004] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1408.494731][T26004] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1408.494758][T26004] drain_workqueue+0xc9/0x3a0 [ 1408.494785][T26004] destroy_workqueue+0xba/0xc40 [ 1408.494810][T26004] ? destroy_workqueue+0x86f/0xc40 [ 1408.494839][T26004] hci_release_dev+0x169/0x16b0 [ 1408.494867][T26004] ? devres_release_all+0x1eb/0x250 [ 1408.494890][T26004] ? __pfx_hci_release_dev+0x10/0x10 [ 1408.494918][T26004] ? rcu_is_watching+0x15/0xb0 [ 1408.494939][T26004] ? device_release+0x66/0x1c0 [ 1408.494965][T26004] bt_host_release+0x83/0x90 [ 1408.494988][T26004] ? __pfx_bt_host_release+0x10/0x10 [ 1408.495013][T26004] device_release+0x99/0x1c0 [ 1408.495038][T26004] kobject_put+0x22f/0x480 [ 1408.495076][T26004] ? process_scheduled_works+0x945/0x1830 [ 1408.495098][T26004] process_scheduled_works+0xa2c/0x1830 [ 1408.495137][T26004] ? __pfx_process_scheduled_works+0x10/0x10 [ 1408.495166][T26004] ? assign_work+0x364/0x3d0 [ 1408.495191][T26004] worker_thread+0x86d/0xd50 [ 1408.495220][T26004] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1408.495246][T26004] ? __kthread_parkme+0x169/0x1d0 [ 1408.495272][T26004] ? __pfx_worker_thread+0x10/0x10 [ 1408.495296][T26004] kthread+0x2f0/0x390 [ 1408.495323][T26004] ? __pfx_worker_thread+0x10/0x10 [ 1408.495346][T26004] ? __pfx_kthread+0x10/0x10 [ 1408.495374][T26004] ret_from_fork+0x4b/0x80 [ 1408.495402][T26004] ? __pfx_kthread+0x10/0x10 [ 1408.495430][T26004] ret_from_fork_asm+0x1a/0x30 [ 1408.495470][T26004] [ 1408.540334][ T2868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.557456][ T25] usb 1-1: Found UVC 0.00 device (30c9:0093) [ 1408.557496][ T25] usb 1-1: No valid video chain found. [ 1408.642832][ T2868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.957439][ T2868] bridge_slave_1: left allmulticast mode [ 1408.957469][ T2868] bridge_slave_1: left promiscuous mode [ 1408.957664][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.046004][ T2868] bridge_slave_0: left allmulticast mode [ 1409.046033][ T2868] bridge_slave_0: left promiscuous mode [ 1409.046224][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.717646][ T2868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1409.720019][ T2868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1409.721726][ T2868] bond0 (unregistering): Released all slaves [ 1410.108902][T23590] usb 4-1: USB disconnect, device number 9 [ 1410.153346][ T2868] hsr_slave_0: left promiscuous mode [ 1410.163345][ T2868] hsr_slave_1: left promiscuous mode [ 1410.172185][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1410.180964][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.210335][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.235700][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.275486][ T2868] veth1_macvtap: left promiscuous mode [ 1410.281061][ T2868] veth0_macvtap: left promiscuous mode [ 1410.304170][ T2868] veth1_vlan: left promiscuous mode [ 1410.317264][ T2868] veth0_vlan: left promiscuous mode [ 1410.623653][ T2868] team0 (unregistering): Port device team_slave_1 removed [ 1410.661489][ T2868] team0 (unregistering): Port device team_slave_0 removed [ 1411.155201][ T933] usb 1-1: USB disconnect, device number 114 [ 1411.316518][ T2868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.362801][ T2868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.433736][ T2868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.504307][ T2868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.625624][ T2868] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.696721][ T2868] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.743710][ T2868] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.813272][ T2868] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.941393][ T2868] bridge_slave_1: left allmulticast mode [ 1411.950752][ T2868] bridge_slave_1: left promiscuous mode [ 1411.957575][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.967843][ T2868] bridge_slave_0: left allmulticast mode [ 1411.973522][ T2868] bridge_slave_0: left promiscuous mode [ 1411.981057][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.992344][ T2868] bridge_slave_1: left allmulticast mode [ 1411.999124][ T2868] bridge_slave_1: left promiscuous mode [ 1412.004857][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.013948][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.282930][ T2868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.293379][ T2868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.304912][ T2868] bond0 (unregistering): Released all slaves [ 1412.322006][ T2868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.337220][ T2868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.348009][ T2868] bond0 (unregistering): Released all slaves [ 1412.780304][ T2868] hsr_slave_0: left promiscuous mode [ 1412.786689][ T2868] hsr_slave_1: left promiscuous mode [ 1412.792518][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.802051][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.810747][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.818484][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.829046][ T2868] hsr_slave_0: left promiscuous mode [ 1412.834874][ T2868] hsr_slave_1: left promiscuous mode [ 1412.841884][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.853633][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.861609][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.869726][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.881268][ T2868] veth1_macvtap: left promiscuous mode [ 1412.887050][ T2868] veth0_macvtap: left promiscuous mode [ 1412.892642][ T2868] veth1_vlan: left promiscuous mode [ 1412.904710][ T2868] veth0_vlan: left promiscuous mode [ 1412.910955][ T2868] veth1_macvtap: left promiscuous mode [ 1412.916528][ T2868] veth0_macvtap: left promiscuous mode [ 1412.922129][ T2868] veth1_vlan: left promiscuous mode [ 1412.927474][ T2868] veth0_vlan: left promiscuous mode [ 1413.220510][ T2868] team0 (unregistering): Port device team_slave_1 removed [ 1413.250690][ T2868] team0 (unregistering): Port device team_slave_0 removed [ 1413.489993][ T2868] team0 (unregistering): Port device team_slave_1 removed [ 1413.531812][ T2868] team0 (unregistering): Port device team_slave_0 removed [ 1414.264836][ T2868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.320227][ T2868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.384203][ T2868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.442218][ T2868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.570568][ T2868] bridge_slave_1: left allmulticast mode [ 1414.579503][ T2868] bridge_slave_1: left promiscuous mode [ 1414.587051][ T2868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.597197][ T2868] bridge_slave_0: left allmulticast mode [ 1414.602877][ T2868] bridge_slave_0: left promiscuous mode [ 1414.608910][ T2868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.803681][ T2868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.814067][ T2868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.824332][ T2868] bond0 (unregistering): Released all slaves [ 1414.907053][ T2868] tipc: Disabling bearer [ 1414.912662][ T2868] tipc: Left network mode [ 1415.110464][ T2868] hsr_slave_0: left promiscuous mode [ 1415.116855][ T2868] hsr_slave_1: left promiscuous mode [ 1415.122835][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.130792][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.142174][ T2868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.150018][ T2868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.159969][ T2868] veth1_macvtap: left promiscuous mode [ 1415.166327][ T2868] veth0_macvtap: left promiscuous mode [ 1415.171952][ T2868] veth1_vlan: left promiscuous mode [ 1415.177335][ T2868] veth0_vlan: left promiscuous mode [ 1415.385357][ T2868] team0 (unregistering): Port device team_slave_1 removed [ 1415.412055][ T2868] team0 (unregistering): Port device team_slave_0 removed