last executing test programs: 20.682055686s ago: executing program 2 (id=1865): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@initdev, @local}, &(0x7f0000000440)=0xc) syz_emit_ethernet(0x2a, &(0x7f0000000a40)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @local}, {0x0, 0x4e23, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e5cea00403c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c9"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8, 0x0, 0x8000, 0x1004, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) syz_open_dev$midi(0x0, 0x10000000000002, 0x2040) syz_open_dev$amidi(&(0x7f0000000000), 0x4, 0x0) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="ebcb580558e3a2dccfb6769cdf", 0xd}, {&(0x7f00000002c0)="17efc9d288e2418a63bdcc509a3c5a6cefceb7562a5f36da981f281fc77cf8285b1a721dd4e1ae69f1a8e7", 0x2b}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x50) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r4, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r5, 0x5100) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r6, 0x5100) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19.649540199s ago: executing program 2 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="06a62a93b428a099ed83370455e0676fcadde7f941c328306525de3e179cccb89368b6183b84bac042e5d08f2593d6e824eaeb6d78a33ae08cb526e8e785b5aa14d62046647c5b777c7d5728e7"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) r4 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000280)={0x0, 0x7ff, 0x5, '\x00', &(0x7f00000001c0)=0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)='W', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r7, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) listen(r7, 0x100101) r8 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x24) accept4(r7, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 17.694207071s ago: executing program 3 (id=1877): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00149400000045"], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0xb1, &(0x7f0000000300)=@generic={0x8, 0x0, 0xa9, "9729699b", "fe0c2aa4da805ae63dc421c1149fb70cda592fd9324fb65cbe956dbab64bf5f2880483aebd101005dfbf4da717529f2882443f575dde2022d8fa9d1dfce5e641d2943aa3222a850dcf6cd55690d435ab58a75d832a0f12e531314f39dc894dd30057fffcb41a6e990354e7b2417751517f845e3d01167f91de7ee4eb9984c5c8c71ba02079eb7fd9cbaede4a2c8ed097422fc1563869e68311200527f35b4db9d7d8819c8b51c4a444"}) 16.496859528s ago: executing program 2 (id=1879): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x6f8, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x2a0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {0x400000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 16.350051987s ago: executing program 2 (id=1880): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81a100850000006d000000040000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000f80)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004340)={0x50, 0x0, r4}, 0x50) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000002140)={0x20, 0x0, r5}, 0x20) read$FUSE(r2, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000002200)) write$FUSE_LK(r2, &(0x7f00000021c0)={0x28, 0x0, r6}, 0x28) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = syz_io_uring_setup(0x5ef4, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r12, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r10, 0x184c, 0x0, 0x0, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800300000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000006000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f20000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4, r8}, 0x10) 15.69843848s ago: executing program 2 (id=1883): socket$nl_generic(0x10, 0x3, 0x10) chmod(&(0x7f0000000000)='./file0\x00', 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x90) ioctl$CEC_DQEVENT(r1, 0x40046109, &(0x7f0000000240)) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, '{/{\x00'}]}, 0x24}, 0x1, 0x7000000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_open_dev$sg(0x0, 0x0, 0x8102) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0xfffffff8, 0x0, 0x0, 0x0}) write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2) read$rfkill(r6, 0x0, 0x0) r7 = creat(0x0, 0x0) sendmsg$tipc(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x2}}, 0x10, 0x0, 0x0, &(0x7f0000000800)="fa3a005610014a19d3041989fe450581b86a3a89101187b9f0da43ea79d2825265ab38eca371f89289e8f5c70b077ea1bf57afd5de0fbceef5fe0c4fc131303ea356145afa05ae24e48be5c39178", 0x4e, 0x20000000}, 0x10) 15.265643465s ago: executing program 2 (id=1885): r0 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) close_range(r0, 0xffffffffffffffff, 0x4000000) 14.699356292s ago: executing program 4 (id=1888): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$sock(r0, &(0x7f00000036c0)=[{{&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x7, @private2, 0xfffeffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}], 0x29, 0x4000014) 14.526011467s ago: executing program 4 (id=1889): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0xff, 0x0, 0x0, 0x9, 0x6000000}, 0x20) 14.422853649s ago: executing program 3 (id=1890): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x20, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) read$FUSE(0xffffffffffffffff, &(0x7f0000003ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = fanotify_init(0x200, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/223, 0xdf}], 0x1) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x4800107b, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r8, 0x0) preadv2(r7, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e00010077697265"], 0x40}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000000db07e01091ce6ab4e936e213995b34a430c39943d424edcc72e43b7be82afd7711ce0788fbc67dd0c3b19c9d41fa68ecf3b4d0244670e2f692de28756d2464f3f3637d4274bc0925b7366f017087a645ebdcccd8c7dd3d63c7abd9a8b50a7a504c8d96804b412c7712c20dc6f1ca0a5df892ec6ca71408f5b8ea3eabc943e7ad57a6fd7fee4f52e38481e8620f040ac164f951688d0ad7b3a61cd6d16407a6e8d2cbdf41bbb0751d8ac9de20d85a58f7a6c7b52b7e82c6e00"], 0xc8, 0x10}, 0xc800) socket$pppoe(0x18, 0x1, 0x0) 14.234288401s ago: executing program 4 (id=1891): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="f7c9c928cc280180c200000086dd6000ed04003a00fe000000000000000000000000020000000200000000000000008000000000018c0004000000000000000000000000034993992750c877d97d0dc48f00"], 0x0) preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}, {&(0x7f0000000440)=""/105, 0x69}], 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x4}) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @timestamp, @timestamp, @timestamp, @window, @sack_perm], 0x2132) sendmmsg$inet(r3, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001"], 0x24}}, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000180)={0x0, 0x20, 0x4, {0x4, @sliced}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000200)={0x7, 'netpci0\x00', {0x5}, 0x8}) shutdown(r3, 0x1) migrate_pages(0x0, 0x6, &(0x7f0000000240)=0x100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)) 13.369761582s ago: executing program 3 (id=1892): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000003900)=[{{&(0x7f0000000580)=@xdp={0x2c, 0x1, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f00000017c0)=[{0x100, 0x10d, 0xfeea, "0d678463a6f4fc0a7bdfbf942f34f7ac98a50b85646ee37d85ccaa1ea259a3a841e4892daccfaa7243e86e740126c38bfd604ecd86a36a41e86037ab2610ea3316036134ad6f95ec5b382b13ea33d7066b1d0cab0afcd5cb4f011541dd3ca563dbdb346fd128fb61b54ef04f774d0af1f7861839b98e2f1d590f0cfc187bbeef8aabdfc9bb4c7c6930eaa6ca96dbdc829b0ba3d813d3167fb1b77ec27485f7ec509daaac53c16ee192c9f5cf03a73484cf8858abc3b081d2de0b1bd744776b2896442df9751f5573f09ab8f5a3d60b1c8b0cb594450db0c607dd3935532568a0fc63a102a614f8b1ccf2"}, {0x28, 0x1, 0x800, "74b542f252109f9e28f29242bdbeaef9f71b7069"}, {0x108, 0x1, 0x7, "9566a3eb5489ec92406bacf6d48f25ebbee27f0da184e7325bbb1afa3b847df43962014381ab5e7ddf778f13dd77430be54c96f0a60b05e3663a49a8cd2580fad94d64e0d1af91c821a8c855b18e24975031199a4f9bfc85da1afd215d2eed1e2ffa167be51ff21b2829f433490dad5fedc4958608372cffb259b8d64106ace1517a3c0613070999b16cd32503ad01279b8f7903910e1e2ab501ab7eb41694d5ed3745c622a499859ec2ef56e4876c509c009a4ae41f61f92a8f73d0385ce28cbf1112beea74ad35874dd5bdd4110b7ea2ac131502085241f4c7bffaffc9e40ab922e17f5ef936c7141077719be3f58b849bdd4198"}, {0x20, 0x11f, 0x5, "c8962899180c63b6d0d2"}, {0x60, 0x10b, 0x7, "8698a7b183c6c3f4cb6633b7c6b75164cca9ce34ec37b9bb01012753dc51a367feedcde1a6b179ddf9f70eeff0cdbeac4fc2218b76b80cf91005a73d60c6b44db92072a21d1ddb373c"}, {0x70, 0x1, 0x0, "6118688a7d0be37d188878c2b9ec77ef484dfb41ac19215f16b5bbed84b09b983d89a54ff147df1005ce787f2f0083cd779da5bbe0ceb3820591361a4fdd12f58a3b27943e6fae8a7d24db290f72b68aa9ac0d966260de5183d66f3d8b84d94b"}, {0xc0, 0x88, 0x0, "d1a8288b305a2ad58a87003f9192716c4ec138c69c8217b182052dba979d6823344c64c86a8fb6b4850f3dc9fd16684e0f66283b6b12c27edcede85f95d54bbdde26bd2abeae0bf2e0e98d8bc57cb5c2ef9a90597d761c09e3e923e47eb13ce35de01d8376df89ca5ba0291ae51e0e6215f8e5e85210a00f481ad1a9812cc91fce91b7b7f119a36182fc98e8a90cbc88dddf0c30859c2b7dbb24dc9960e2b9dfb04b2112c2635bea36db88c3f5"}], 0x3e0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d40)=[{0x10, 0x10f, 0x14}], 0x10}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002fc0)="5799bd91723799bc907f18be8bf748b1b2f825ea75a7", 0x16}], 0x1}}], 0x3, 0x0) 13.212517846s ago: executing program 4 (id=1893): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0xf1056e22f41b4098, 0x0, 0x0, 0x0, 0x3000000}}, 0x50) 12.907481054s ago: executing program 4 (id=1894): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x70, 0x138, 0x0, {0x0, 0x1c8}, [@common=@inet=@dscp={{0x28}, {0x6c}}, @common=@set={{0x40}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [], 0x0, 0x4}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x6]}, {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x300) 11.91424532s ago: executing program 4 (id=1897): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xffffffffffffffcc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#X\x85\xacc\xa5\xf3\xa7\x05q~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, 0xffffffffffffffff) creat(&(0x7f0000000100)='./bus\x00', 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x2}, &(0x7f0000000800)='c', 0x1, 0xffffffffffffffff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186ee"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000440)={[0xfffffffffffffc00]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="340000003b0007010000002000000000047c00000c00e10008000700040000001400018006000600880a0000080011"], 0x34}}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000180)={0xc, r0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x0, r5, r5, 0x8000000000000001, 0x122600, 0x5, 0x287622}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x24101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.564583519s ago: executing program 3 (id=1901): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ff1ec608402000d3a332010203010902120001000000040904"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r2) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x6081, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'veth1_to_bond\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) epoll_create(0x0) 8.422277449s ago: executing program 3 (id=1906): bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) (async, rerun: 32) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x18, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) (async) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.947295797s ago: executing program 3 (id=1908): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget$private(0x0, 0x5000, 0x0, &(0x7f0000ffb000/0x5000)=nil) r2 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) shmdt(r2) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="58000000140091d427323b4725458db45602117fffefff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7100003ffffffffffff00000001100003000000deff0000000200000000000000000000f5e1d1a4d290cad25b240e58247c4d153e9e9304b27c95c0e1293765d6ec52aad9dd9ca788ce997cbe42fd306bc87d04d08bbf75b77e", 0x8f}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x40051) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="0d1bd19dfd99ddbfa463fcc614d97b221eccf78a0c77288724ee55e9801ca9f212170fa323fc6bf4a84bd31ec1d10062bfec55332fd693bb06f6bff6b9f3b7a474078a6168adcbe28d65e7fae76c26b52c612f55621e96b725b7bf285229238a5c655cc4220eff2b9129543699056d143bcedae400629f82b4a3e577bc154d1df916c87fda9486f446cfbe1dcf", @ANYRESHEX=r5], 0x6c}, 0x1, 0x0, 0x0, 0x20000801}, 0x24004844) 6.698523174s ago: executing program 1 (id=1912): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) syz_open_pts(r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x7, 0x77, 0x3, 0x5, 0x1, "1edd243107e039bd22bc3b7485d774f1f00e8a"}) 5.952837076s ago: executing program 0 (id=1915): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x81000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x3c}}, 0x0) 5.81416189s ago: executing program 1 (id=1916): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x28) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffd77, 0x0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) fanotify_init(0x200, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x6157, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280)={0x0, 0x7d3f, 0x100}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x34}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x100) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)=0x28ad) syz_pidfd_open(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', r3) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0xffff2674, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x80080400) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, 0x0, 0x0) getsockopt$inet_int(r5, 0x10d, 0x0, 0x0, &(0x7f0000000080)) 5.762837518s ago: executing program 0 (id=1917): pipe2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x6b, &(0x7f0000000480)=0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004ac0)) getpid() pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockname$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000280)=0x6e) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="6800000000020101000000004c0002801400018008000100ac1414bb08000200d800000106000340000100002200018014000300fc010000000000000000000000000001140004000000000000000000000000000000000108000b0073697000"/112], 0x68}, 0x1, 0x0, 0x0, 0x4060}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_flowlabel\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000ac0)=""/100, 0x64}, {&(0x7f0000000180)=""/250, 0xfa}], 0x2, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000900)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a23000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 4.442816959s ago: executing program 0 (id=1918): socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x100}, 0x1c) dup(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r2) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r4], 0x20}}, 0x0) close_range(r5, r5, 0x2) 4.182076393s ago: executing program 1 (id=1919): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@snprintf={{}, {0x3, 0x3, 0x6, 0x2, 0x8, 0xfff8, 0xf1}, {0x5}}]}, 0x0}, 0x90) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x38, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) bind$packet(r3, &(0x7f0000000400)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r3, &(0x7f0000000080)="1555f6acfd136f8ed06375bd86dd", 0xe, 0x0, 0x0, 0x0) 3.440215073s ago: executing program 0 (id=1920): r0 = syz_usb_connect(0x3, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12017da66ab80e100cc63133000000010902290001005b4712748b123444db"], 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r3 = socket$kcm(0x10, 0xf, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000000c0)={0xa, {0x0, 0x80, 0x51}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc1013a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200), &(0x7f0000000940)=0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) syz_usb_connect$cdc_ecm(0x3, 0xab, &(0x7f0000000100)=ANY=[@ANYRES32=r0], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x66, 0x0, 0x9e, 0x8, 0x5}, 0x149, &(0x7f0000000ac0)={0x5, 0xf, 0x149, 0x6, [@generic={0xf8, 0x10, 0x2, "c3e66d1a9e69bde5811e3c63d97174c10324a1ba20ef7606391690cdb442ce0763e917e98fde7e76841407a5c79714ed8639f1f41c664343afecc2ef9df7a7b61524929e81e089559262f03017566d9510ccf290e82dd420fe20cb702fa5163ffe07948ecb2fdf7155614d50de209b7a50d53e268e9a236c331d1986d6c30cff812c893074078b23887a569cfd0e4fa766cbca966e4ee5d65a02281457b96d761bcc2e86fadee6d7adeb784b99d895de9d5573b2fd2fbce2b026201cbb747a1ba440bfe38548b8a84b8b113b77de95ac9110a5f1faad1270a19a67b172d52e115f590ed1beb617e365057b10bac5dcaa3fa85fed1d"}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x7, 0x7700, 0xfffd, [0xff30, 0x0, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x23, 0xff, 0x401}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8963280a9fb6c5bd4009e4606af4512e"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xe, 0x3, 0x1, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xa}}, {0xeb, &(0x7f0000000840)=ANY=[@ANYRESHEX]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3001}}, {0xa3, &(0x7f00000006c0)=ANY=[@ANYBLOB="a303153687c926d19326cbf3fd1e0352ef98af1573e1d61086cc2c321bcb01c7ef18cd53b9efa1befe488f06e16ca0fc0c2829c76adda064063a365b8285e500d7cfd4ad24fc6ee895d1e24fa11289d9f03220446f1063b74b76eb81bc68068a71cb87d3093f93886bf8bc468fd470ad2553aa5c88efcfb73078a512bd52e26a3cfdf1e9f38953db000000800000000046ba367378e59288352871b2c5d5f83be0317d5ddaa7bc1255f65385939ed949890a0117b2d71363f117fb5d30a92d9bc6700f2ed1c7f07e738b474d2c77f22bbcf7dbd77dd77c9bb023c44ad8085e6ad7270f7bfe497a6c76cd8427319eb8c285147105da7fffbb97a3454b8ec378c0e9ef96c2ad26f63ba30f218738d3a1e7f267780aec029c8b1ecd4ce4b3ca67d07ea6c2d6e86797e70792000aa4cc42e9c12616536c33b7636fb2245dcffb212d14c30f76a0c02f334ff5ec506be6ba7880617b0c3d34445384d8491a65949164f18c2f894049508c335c43df"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1e}}, {0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="14bac27515d6f462"]}, {0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="f303e2d9759263d13ab17b1050c8859561f76717d5281d60c0f9fd1e10a2940275226109907b46767d0b4f6aeb837eb4ef75ebf447064acfd71f303a725a3bb52bdc161d8a8c7eee0c9bb132ec4259e6002bd8a8b6a0d154f3251b8ca2a34c4b96a9ea8ea4624ecfdcb2cccb382a657b95eb8eeebe9b06b2c695554943224b611ba6aee99b863a5af8296ef64044eb292dfaf81cd04f8ed86496a610dc1ae452fe8da45b56411261a3215113f4ebad5313f7bf09a1eefa7be89d164cc9c8cde23069d2da68ed46bc5cbe0b474744ddd980cbbbb93eb1252efde5f86522f9ee5931e95a56d0e75ad4fe204232a80df4fc00ef2b"]}]}) 3.309192409s ago: executing program 1 (id=1921): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000200)="7ae3d1d22d5d2134a35f76555bc3c305fccc59b57b02aaaaa346d72a7da91f2d50bf3a2e8b53ad8fa56ffebe3b88f111805729f8", 0x34}], 0x1}}], 0x1, 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) read$FUSE(r0, &(0x7f0000008d00)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001f0ffff080003008cdd254202a80ae9bccb5d6193082ccc666d8be86f50c7df843bddbea1b5d8ebcb1a199513dd4dbbe759f1143cbac6028389e2291c0cd1ac56de2eefd91b40d563a127f553b3b42231c7500fffc39c9277e8a9d509f021cf70626f9dd0bdd335252689faddff4bb693af6b4026701194c62ab4fae686fffaf1bc243d585c1047981282fa5f10995cb66607c894a085c4cd15b000c00fb2125badae2c2ebe742728b6de8144bb9712c92421849526a325a8f17e2bd8de61d4f65340d7d03f4f1b7d58b9976916466f3fd4965f96514a3c8b3c9097dac8a17557917d462ae2386dd147cedcdd3bd2", @ANYRES32=r8, @ANYBLOB="000019010b000000080026008009000000009f00040000000000270001000000"], 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r10, 0x601, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) r11 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r11, &(0x7f0000000040)="e2", 0x2250) 1.590243438s ago: executing program 1 (id=1922): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000c3ffffff0a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) 1.297708779s ago: executing program 1 (id=1923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) syz_open_pts(r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000200)={0x7, 0x77, 0x3, 0x5, 0x1, "1edd243107e039bd22bc3b7485d774f1f00e8a"}) 926.222276ms ago: executing program 0 (id=1925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x20) syz_io_uring_setup(0x6359, &(0x7f0000000300)={0x0, 0xa28, 0x100, 0x0, 0x1, 0x0, r5}, &(0x7f0000000380), &(0x7f00000003c0)) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYRES8], 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="012e58", @ANYRES64=0x0, @ANYRES64, @ANYRES32=r4, @ANYRES64=r2, @ANYBLOB="3bf81b7bb5"], 0x20000600}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x800) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb904021d08000b000000000000070a000a000900142603600e1208001e0000050401a8430400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0x103}], 0x1}, 0x0) pipe2(0x0, 0x0) 0s ago: executing program 0 (id=1926): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) dup2(r3, 0xffffffffffffffff) chmod(0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x80000) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000080)={0xa3, 0xd, 0x0, 0x0, 0x59, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000400)={{0x3}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001440)={0x0, 0x0, "c0dd31b13a8a26511cec1599e642f0ebc218ae00bf531c757304fe6cacde5f6c5721c2e1d4f757670b6b661ca5907a18e0600b8301b59df9ea282626c7316626736f29e168e2167db926939a209aa54600426a1fdf3b2bec8a4a421c072a6e813f189c4ba83f1a1ab084ef2637877d19357934fb157bc00a65f98a73183f0137762f39defd61bff98f5f263145ddbafca22713c37b84df3b7023010db3a68298c7a013316a13293a8981cabab1157df4272607c6868968da9ed01626701940ed34162ba2e604309eb1b62715c6af156e9186c631e283fb49579c3cdfa227fb6c69086985537f7d5bf01c090574cacce0c5b36594ac8a8d047e98069b88120f94", "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"}) r7 = io_uring_setup(0x17fc, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x17, &(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002"], 0x5c}, 0x1, 0x6c}, 0x0) r9 = accept4(r2, &(0x7f0000000200)=@xdp, &(0x7f0000000180)=0x80, 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r9, 0x8983, &(0x7f00000002c0)={0x6, 'ip6erspan0\x00', {}, 0x9ac3}) syz_usb_connect(0x0, 0x2ea, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3cc, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_VFINFO_LIST={0x380, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0x8}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfc8, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x41a7, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x5, 0x8}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x80, 0x5}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0x10001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5}}]}, {0xe0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x9a6, 0x7fff, 0x88a8}}]}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x1}}, @IFLA_VF_VLAN_LIST={0x68, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x629, 0x2, 0x88a8}}, {0x14, 0x1, {0x7, 0xa4c, 0x5, 0x88a8}}, {0x14, 0x1, {0x1, 0x4, 0x1, 0x88a8}}, {0x14, 0x1, {0x8, 0x31, 0x10001, 0x88a8}}, {0x14, 0x1, {0x8, 0xf8b, 0x3f, 0x8100}}]}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @local}}]}, {0x128, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0x20}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x5}}, @IFLA_VF_VLAN_LIST={0xa4, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4, 0x796, 0xffffffc1, 0x8100}}, {0x14, 0x1, {0x3, 0x485, 0x608, 0x8100}}, {0x14, 0x1, {0x1000, 0x6f6, 0x8, 0x8100}}, {0x14, 0x1, {0x4, 0x72, 0x0, 0x88a8}}, {0x14, 0x1, {0x9, 0xbbd, 0x80, 0x9a8}}, {0x14, 0x1, {0xfffffffc, 0x346, 0x2, 0x88a8}}, {0x14, 0x1, {0x5, 0xe6a, 0x1f, 0x8100}}, {0x14, 0x1, {0xf8e, 0x5c8, 0x401, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x269, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fffffff, 0x400}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xffffffff, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x1ff, 0x6, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x5}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x6c8, 0x7, 0x8100}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1e, 0xc61, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x6}}, @IFLA_VF_MAC={0x28}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff, 0x7ff}}, @IFLA_VF_RATE={0x10, 0x6, {0x6, 0x800, 0x5}}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xed, 0x200, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0xf4f8}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x10000, 0x1d0, 0x1}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x0, 0x3ff}}]}]}]}, 0x3cc}, 0x1, 0xba01}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, @in={0x2, 0x0, @broadcast}, @in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58) kernel console output (not intermixed with test programs): 55691][ T5283] ftdi_sio 1-1:87.140: FTDI USB Serial Device converter detected [ 567.167242][ T5283] ftdi_sio ttyUSB1: unknown device type: 0xe9a3 [ 567.179080][ T5283] ftdi_sio 1-1:87.219: FTDI USB Serial Device converter detected [ 567.189739][ T5283] ftdi_sio ttyUSB2: unknown device type: 0xe9a3 [ 567.213548][ T5283] ftdi_sio 1-1:87.144: FTDI USB Serial Device converter detected [ 567.232172][ T5282] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 567.234800][ T5283] ftdi_sio ttyUSB3: unknown device type: 0xe9a3 [ 567.239994][ T5285] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 567.289702][ T5283] usb 1-1: USB disconnect, device number 98 [ 567.334006][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.373101][ T5281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 567.384600][ T5281] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 567.394593][ T5281] usb 4-1: can't read configurations, error -71 [ 567.411467][ T5283] ftdi_sio 1-1:87.233: device disconnected [ 567.411658][ T5285] usb 5-1: config 0 descriptor?? [ 567.447721][ T5283] ftdi_sio 1-1:87.140: device disconnected [ 567.463963][ T5282] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.470556][ T5283] ftdi_sio 1-1:87.219: device disconnected [ 567.473725][ T5282] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.498043][ T5283] ftdi_sio 1-1:87.144: device disconnected [ 567.499584][ T5282] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.515664][ T5282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.530676][ T5282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.557035][ T5282] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.574143][ T5282] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.588346][ T5282] usb 2-1: Product: syz [ 567.598236][ T5282] usb 2-1: Manufacturer: syz [ 567.655761][ T5282] cdc_wdm 2-1:1.0: skipping garbage [ 567.676317][ T5282] cdc_wdm 2-1:1.0: skipping garbage [ 567.720024][ T5282] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 567.738868][ T5282] cdc_wdm 2-1:1.0: Unknown control protocol [ 567.883580][ T5282] usb 2-1: USB disconnect, device number 73 [ 567.930691][T13678] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1715'. [ 568.031743][T13661] ALSA: mixer_oss: invalid OSS volume '—f×Á¹.˜/¬‡Œôç#¨ÄÐøX’=þ@"±û' [ 568.054551][ T5283] usb 3-1: USB disconnect, device number 82 [ 568.106763][T13669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1713'. [ 568.443381][ T5285] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 568.673157][ T5283] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 568.753975][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'. [ 568.842350][ T5283] usb 2-1: device descriptor read/64, error -71 [ 568.902502][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 569.032258][ T7567] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 569.102059][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 569.109352][ T9] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 569.121564][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.132014][ T5283] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 569.158523][ T9] usb 3-1: config 0 descriptor?? [ 569.252048][ T7567] usb 1-1: Using ep0 maxpacket: 8 [ 569.262870][ T7567] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.293852][ T7567] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 569.305508][ T7567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.318073][ T7567] usb 1-1: config 0 descriptor?? [ 569.323511][ T5283] usb 2-1: device descriptor read/64, error -71 [ 569.336843][ T7567] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 569.388626][ T9] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 569.405894][ T9] asix 3-1:0.0: probe with driver asix failed with error -61 [ 569.462618][ T5283] usb usb2-port1: attempt power cycle [ 569.587582][T13685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.596594][T13685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.611638][ T8301] usb 3-1: USB disconnect, device number 83 [ 569.738968][ T5281] usb 5-1: USB disconnect, device number 91 [ 569.782135][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 569.882611][ T5283] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 569.912873][ T5283] usb 2-1: device descriptor read/8, error -71 [ 569.952697][ T9] usb 4-1: device descriptor read/64, error -71 [ 570.202183][ T5281] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 570.242176][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 570.262237][ T7567] gspca_vc032x: reg_r err -110 [ 570.286031][ T7567] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 570.357503][T13719] vlan2: entered promiscuous mode [ 570.363445][T13719] veth1: entered promiscuous mode [ 570.371832][T13719] vlan2: entered allmulticast mode [ 570.378082][T13719] veth1: entered allmulticast mode [ 570.403575][ T9] usb 4-1: device descriptor read/64, error -71 [ 570.445153][ T5281] usb 5-1: config 87 has an invalid interface number: 233 but max is 3 [ 570.459890][ T5281] usb 5-1: config 87 has an invalid interface number: 140 but max is 3 [ 570.491396][ T5281] usb 5-1: config 87 has an invalid interface number: 219 but max is 3 [ 570.503767][ T5281] usb 5-1: config 87 has an invalid interface number: 144 but max is 3 [ 570.514028][ T5281] usb 5-1: config 87 has an invalid descriptor of length 0, skipping remainder of the config [ 570.532394][ T5281] usb 5-1: config 87 has no interface number 0 [ 570.538773][ T5281] usb 5-1: config 87 has no interface number 1 [ 570.545386][ T9] usb usb4-port1: attempt power cycle [ 570.545776][ T5281] usb 5-1: config 87 has no interface number 2 [ 570.559035][ T5281] usb 5-1: config 87 has no interface number 3 [ 570.569725][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 570.589101][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 570.602633][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has an endpoint descriptor with address 0x96, changing to 0x86 [ 570.616361][T13722] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1730'. [ 570.624962][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0x86 has invalid maxpacket 4872, setting to 64 [ 570.637768][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 570.652831][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 570.668378][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 570.702230][ T5283] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 570.730690][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has a duplicate endpoint with address 0x86, skipping [ 570.749193][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 570.750902][ T5283] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.769543][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 570.796158][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 570.825017][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has a duplicate endpoint with address 0x5, skipping [ 570.825125][ T5283] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 570.862414][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has an endpoint descriptor with address 0x73, changing to 0x3 [ 570.869462][ T5283] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.874785][ T5281] usb 5-1: config 87 interface 233 altsetting 2 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 570.900155][ T5281] usb 5-1: config 87 interface 233 altsetting 2 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 570.922561][ T5281] usb 5-1: config 87 interface 140 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 570.932743][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.949537][ T5281] usb 5-1: config 87 interface 140 altsetting 4 has a duplicate endpoint with address 0x3, skipping [ 570.961017][ T5281] usb 5-1: config 87 interface 140 altsetting 4 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 570.973443][ T5281] usb 5-1: config 87 interface 140 altsetting 4 has a duplicate endpoint with address 0x84, skipping [ 570.989255][ T5281] usb 5-1: config 87 interface 219 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 571.000888][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 571.002142][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 571.021531][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 571.039839][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 571.045779][T13718] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.052419][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 571.113040][ T9] usb 4-1: device descriptor read/8, error -71 [ 571.113262][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 571.139255][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 571.152837][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 571.156408][ T5283] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.176009][ T5281] usb 5-1: config 87 interface 144 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 571.199634][ T5281] usb 5-1: config 87 interface 233 has no altsetting 0 [ 571.209682][ T5281] usb 5-1: config 87 interface 140 has no altsetting 0 [ 571.226039][ T5281] usb 5-1: config 87 interface 219 has no altsetting 0 [ 571.256177][ T5281] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice=e9.a3 [ 571.309090][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.332340][ T5281] usb 5-1: Product: 䀊 [ 571.340017][ T5281] usb 5-1: Manufacturer: ည [ 571.357634][T13704] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 571.422073][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 571.425330][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 571.494202][ T9] usb 4-1: device descriptor read/8, error -71 [ 571.633586][ T9] usb usb4-port1: unable to enumerate USB device [ 571.778052][ T5281] ftdi_sio 5-1:87.233: FTDI USB Serial Device converter detected [ 571.791213][ T9] usb 1-1: USB disconnect, device number 99 [ 571.817303][ T5281] ftdi_sio ttyUSB0: unknown device type: 0xe9a3 [ 571.844674][ T5281] ftdi_sio 5-1:87.140: FTDI USB Serial Device converter detected [ 571.855414][ T5281] ftdi_sio ttyUSB1: unknown device type: 0xe9a3 [ 571.867577][ T5281] ftdi_sio 5-1:87.219: FTDI USB Serial Device converter detected [ 571.883316][ T5281] ftdi_sio ttyUSB2: unknown device type: 0xe9a3 [ 571.892881][ T5281] ftdi_sio 5-1:87.144: FTDI USB Serial Device converter detected [ 571.903184][ T5281] ftdi_sio ttyUSB3: unknown device type: 0xe9a3 [ 571.922295][ T5285] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 571.930456][ T5281] usb 5-1: USB disconnect, device number 92 [ 571.959729][ T5281] ftdi_sio 5-1:87.233: device disconnected [ 572.002625][ T5281] ftdi_sio 5-1:87.140: device disconnected [ 572.009651][ T7567] usb 2-1: USB disconnect, device number 77 [ 572.045902][ T5281] ftdi_sio 5-1:87.219: device disconnected [ 572.071110][ T5281] ftdi_sio 5-1:87.144: device disconnected [ 572.136500][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.147770][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.157576][ T5285] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 572.166670][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.180681][ T5285] usb 3-1: config 0 descriptor?? [ 572.312082][ T5283] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 572.524427][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.542343][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.557925][ T5283] usb 1-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.00 [ 572.568700][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.602713][ T5283] usb 1-1: config 0 descriptor?? [ 572.658851][ T5281] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 572.794192][T13728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.803519][T13728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.877909][ T5281] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 572.887501][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.899700][ T5281] usb 5-1: config 0 descriptor?? [ 573.022398][ T7567] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 573.032869][ T8297] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 573.194746][ T8297] usb 2-1: device descriptor read/64, error -71 [ 573.224968][ T5283] usbhid 1-1:0.0: can't add hid device: -71 [ 573.234495][ T5283] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 573.234812][ T7567] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 573.258324][ T5283] usb 1-1: USB disconnect, device number 100 [ 573.270722][ T7567] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.283096][ T7567] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 573.295540][ T7567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.308003][ T7567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.320032][ T7567] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.329438][ T7567] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 573.341330][ T7567] usb 4-1: Product: syz [ 573.345612][ T7567] usb 4-1: Manufacturer: syz [ 573.356148][ T7567] cdc_wdm 4-1:1.0: skipping garbage [ 573.361377][ T7567] cdc_wdm 4-1:1.0: skipping garbage [ 573.369885][ T7567] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 573.376875][ T7567] cdc_wdm 4-1:1.0: Unknown control protocol [ 573.462363][ T8297] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 573.574224][ T5283] usb 4-1: USB disconnect, device number 103 [ 573.623114][ T8297] usb 2-1: device descriptor read/64, error -71 [ 573.763142][ T8297] usb usb2-port1: attempt power cycle [ 573.786812][T13737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1736'. [ 573.918328][ T5281] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 574.092015][ T5282] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 574.202035][ T8297] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 574.232753][ T8297] usb 2-1: device descriptor read/8, error -71 [ 574.301992][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 574.302198][ T7567] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 574.310216][ T5282] usb 1-1: config 64 has an invalid interface number: 38 but max is 2 [ 574.324467][ T5282] usb 1-1: config 64 contains an unexpected descriptor of type 0x2, skipping [ 574.333813][ T5282] usb 1-1: config 64 contains an unexpected descriptor of type 0x1, skipping [ 574.342970][ T5282] usb 1-1: config 64 has an invalid descriptor of length 87, skipping remainder of the config [ 574.355071][ T5282] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 3 [ 574.366473][ T5282] usb 1-1: config 64 has no interface number 0 [ 574.374235][ T5282] usb 1-1: config 64 interface 38 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 574.387532][ T5282] usb 1-1: config 64 interface 38 has no altsetting 0 [ 574.397250][ T5282] usb 1-1: New USB device found, idVendor=14aa, idProduct=0160, bcdDevice=7b.8b [ 574.406544][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.415298][ T5282] usb 1-1: Product: ÑŠ [ 574.419493][ T5282] usb 1-1: Manufacturer: Є [ 574.424648][ T5282] usb 1-1: SerialNumber: ⾶욭㡎é¼ê©ì·ëƒœí€žã¼…á®éž‘ᓵê©Ë䦨ꢣ➎誷阢矆䞢픮燐縻彟î™é³ë¦´ì—뭻爳फ翵爥ꦤⱉ籙㋋㪕䱌烯衟ê‹çŠºîš˜ã¨â…¹ìœç€Ÿîº•å“·ì„¢ë¦…ᮗ厀੆楙 [ 574.473136][ T7567] usb 4-1: device descriptor read/64, error -71 [ 574.522480][ T8297] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 574.536918][ T5285] hid-led 0003:27B8:01ED.0021: probe with driver hid-led failed with error -71 [ 574.564285][ T5285] usb 3-1: USB disconnect, device number 84 [ 574.574303][ T8297] usb 2-1: device descriptor read/8, error -71 [ 574.662949][ T5282] usb 1-1: USB disconnect, device number 101 [ 574.696472][ T8297] usb usb2-port1: unable to enumerate USB device [ 574.752533][ T7567] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 574.922042][ T7567] usb 4-1: device descriptor read/64, error -71 [ 575.042531][ T7567] usb usb4-port1: attempt power cycle [ 575.391087][ T5282] usb 5-1: USB disconnect, device number 93 [ 575.463498][ T7567] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 575.512498][ T8301] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 575.522633][ T7567] usb 4-1: device descriptor read/8, error -71 [ 575.615166][T13756] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1742'. [ 575.723360][ T8301] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 575.738851][ T8301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.783643][ T8301] usb 1-1: config 0 descriptor?? [ 576.312233][ T8300] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 576.502232][ T8300] usb 2-1: device descriptor read/64, error -71 [ 576.516404][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.670745][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.794499][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.806345][ T8300] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 576.972023][ T8300] usb 2-1: device descriptor read/64, error -71 [ 576.983628][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.122416][ T8300] usb usb2-port1: attempt power cycle [ 577.243305][ T7567] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 577.266331][ T52] bridge_slave_1: left allmulticast mode [ 577.281756][ T52] bridge_slave_1: left promiscuous mode [ 577.306595][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.337601][ T52] bridge_slave_0: left allmulticast mode [ 577.349453][ T52] bridge_slave_0: left promiscuous mode [ 577.372336][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.373257][T12714] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.394247][T12714] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.410945][T12714] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 577.421634][T12714] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 577.429943][T12714] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 577.440356][T12714] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 577.466917][ T8301] pegasus 1-1:0.0: can't reset MAC [ 577.487801][ T8301] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 577.503257][ T7567] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 577.543179][ T8300] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 577.566369][ T8301] usb 1-1: USB disconnect, device number 102 [ 577.584576][ T8300] usb 2-1: device descriptor read/8, error -71 [ 577.594853][ T7567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.637003][ T7567] usb 3-1: config 0 descriptor?? [ 577.878017][ T8300] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 577.965775][ T8300] usb 2-1: device descriptor read/8, error -71 [ 578.092555][ T8300] usb usb2-port1: unable to enumerate USB device [ 578.421370][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.437041][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.442208][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 578.467598][ T52] bond0 (unregistering): Released all slaves [ 578.484874][ T52] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 578.496407][ T52] bond1 (unregistering): Released all slaves [ 578.654200][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 578.672574][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.692540][ T7567] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 578.709449][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 578.728825][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.772110][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.822178][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 578.843719][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 578.878504][ T9] usb 1-1: Product: syz [ 578.886078][ T9] usb 1-1: Manufacturer: syz [ 578.927171][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 578.940787][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 578.961289][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 578.980171][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 579.079748][ T8300] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 579.144830][ T5282] usb 1-1: USB disconnect, device number 103 [ 579.165139][ T52] hsr_slave_0: left promiscuous mode [ 579.188833][ T52] hsr_slave_1: left promiscuous mode [ 579.200247][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.213421][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.229440][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.244685][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.282239][ T8300] usb 5-1: Using ep0 maxpacket: 32 [ 579.303502][ T8300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 579.325423][ T52] veth1_macvtap: left promiscuous mode [ 579.330992][ T52] veth0_macvtap: left promiscuous mode [ 579.337602][ T8300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 579.348152][T13797] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 579.376450][ T8300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 579.400294][ T8300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 579.431479][ T8300] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 579.452195][ T8300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.460239][ T8300] usb 5-1: Product: syz [ 579.483248][ T8300] usb 5-1: Manufacturer: syz [ 579.487892][ T8300] usb 5-1: SerialNumber: syz [ 579.507656][ T8300] usb 5-1: config 0 descriptor?? [ 579.517541][ T8300] cypress_m8 5-1:0.0: HID->COM RS232 Adapter converter detected [ 579.539936][ T8300] cyphidcom ttyUSB0: required endpoint is missing [ 579.556823][ T5237] Bluetooth: hci5: command tx timeout [ 579.612860][ T5285] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 579.731284][ T9] usb 5-1: USB disconnect, device number 94 [ 579.748745][ T9] cypress_m8 5-1:0.0: device disconnected [ 579.792919][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 579.873722][ T8300] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 579.929771][T13826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.943236][T13826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.986121][ T8297] usb 3-1: USB disconnect, device number 85 [ 580.069262][ T8300] usb 1-1: device descriptor read/64, error -71 [ 580.319748][ T52] team0 (unregistering): Port device team_slave_1 removed [ 580.362373][ T8300] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 580.592442][ T8300] usb 1-1: device descriptor read/64, error -71 [ 580.619155][ T52] team0 (unregistering): Port device team_slave_0 removed [ 580.742884][ T8300] usb usb1-port1: attempt power cycle [ 580.907757][T13833] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1760'. [ 581.649865][ T8297] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 581.652244][ T5237] Bluetooth: hci5: command tx timeout [ 581.849836][ T8297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.870859][ T8297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.884195][ T8297] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 581.896828][ T8297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 581.915264][ T8297] usb 3-1: SerialNumber: syz [ 581.925390][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1764'. [ 581.942168][ T5285] usb 2-1: unable to get BOS descriptor or descriptor too short [ 581.962648][ T5285] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 581.970426][ T5285] usb 2-1: can't read configurations, error -71 [ 582.018091][T13847] bond1: entered promiscuous mode [ 582.065047][T13848] wg2: entered promiscuous mode [ 582.096290][T13848] bond1: (slave wg2): The slave device specified does not support setting the MAC address [ 582.133782][T13848] bond1: (slave wg2): Error -95 calling set_mac_address [ 582.151716][T13782] chnl_net:caif_netlink_parms(): no params data found [ 582.187641][ T8297] usb 3-1: 0:2 : does not exist [ 582.204364][ T8297] usb 3-1: unit 5 not found! [ 582.238010][ T8297] usb 3-1: USB disconnect, device number 86 [ 582.375628][T13782] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.383203][T13782] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.390569][T13782] bridge_slave_0: entered allmulticast mode [ 582.397958][T13782] bridge_slave_0: entered promiscuous mode [ 582.408906][T13782] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.416419][T13782] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.423982][T13782] bridge_slave_1: entered allmulticast mode [ 582.431186][T13782] bridge_slave_1: entered promiscuous mode [ 582.482592][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.532250][ T8300] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 582.542986][T13782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.572107][ T5282] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 582.587976][T13782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.733798][T13782] team0: Port device team_slave_0 added [ 582.743045][ T5282] usb 5-1: device descriptor read/64, error -71 [ 582.761377][ T8300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.788377][T13782] team0: Port device team_slave_1 added [ 582.803007][ T8300] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 582.830603][ T8300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.860298][ T8300] usb 1-1: config 0 descriptor?? [ 582.880720][ T8300] pwc: Askey VC010 type 2 USB webcam detected. [ 582.899903][ T52] bridge_slave_1: left allmulticast mode [ 582.913818][ T52] bridge_slave_1: left promiscuous mode [ 582.919798][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.948520][ T52] bridge_slave_0: left allmulticast mode [ 582.962121][ T52] bridge_slave_0: left promiscuous mode [ 582.969859][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.029657][ T5282] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 583.074057][ T8300] pwc: send_video_command error -71 [ 583.079459][ T8300] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 583.087553][ T8300] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 583.113390][ T8300] usb 1-1: USB disconnect, device number 107 [ 583.122163][ T5285] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 583.182060][ T5282] usb 5-1: device descriptor read/64, error -71 [ 583.329228][ T5282] usb usb5-port1: attempt power cycle [ 583.342529][ T5285] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 583.360074][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.391473][ T5285] usb 2-1: config 0 descriptor?? [ 583.542222][ T8300] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 583.712309][ T5237] Bluetooth: hci5: command tx timeout [ 583.765853][ T8300] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.776711][ T5282] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 583.815937][ T8300] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 583.846800][ T5282] usb 5-1: device descriptor read/8, error -71 [ 583.866271][ T8300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.868581][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.877431][ T8300] usb 1-1: config 0 descriptor?? [ 583.948732][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.949564][ T8300] pwc: Askey VC010 type 2 USB webcam detected. [ 583.976836][ T52] bond0 (unregistering): Released all slaves [ 584.004601][T13782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.012275][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.039276][T13782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.161448][ T5282] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 584.180860][T13782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.211752][T13782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.252017][ T5282] usb 5-1: device descriptor read/8, error -71 [ 584.260994][T13782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.299164][ T8300] pwc: recv_control_msg error -32 req 02 val 2b00 [ 584.356478][ T8300] pwc: recv_control_msg error -71 req 02 val 2700 [ 584.366993][ T8300] pwc: recv_control_msg error -71 req 02 val 2c00 [ 584.373841][ T5282] usb usb5-port1: unable to enumerate USB device [ 584.394999][ T8300] pwc: recv_control_msg error -71 req 04 val 1000 [ 584.405909][ T8300] pwc: recv_control_msg error -71 req 04 val 1300 [ 584.422078][ T8300] pwc: recv_control_msg error -71 req 04 val 1400 [ 584.434499][ T8300] pwc: recv_control_msg error -71 req 02 val 2000 [ 584.441376][ T5285] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 584.470795][ T8300] pwc: recv_control_msg error -71 req 02 val 2100 [ 584.489696][ T8300] pwc: recv_control_msg error -71 req 04 val 1500 [ 584.505075][T13782] hsr_slave_0: entered promiscuous mode [ 584.508485][ T8300] pwc: recv_control_msg error -71 req 02 val 2500 [ 584.522420][ T8300] pwc: recv_control_msg error -71 req 02 val 2400 [ 584.529407][T13782] hsr_slave_1: entered promiscuous mode [ 584.530551][ T8300] pwc: recv_control_msg error -71 req 02 val 2600 [ 584.543475][T13782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.547125][ T8300] pwc: recv_control_msg error -71 req 02 val 2900 [ 584.560042][T13782] Cannot create hsr debugfs directory [ 584.566082][ T8300] pwc: recv_control_msg error -71 req 02 val 2800 [ 584.577649][ T8300] pwc: recv_control_msg error -71 req 04 val 1100 [ 584.595450][ T8300] pwc: recv_control_msg error -71 req 04 val 1200 [ 584.620117][ T8300] pwc: Registered as video71. [ 584.636777][ T8300] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input38 [ 584.656711][ T8300] usb 1-1: USB disconnect, device number 108 [ 584.752437][ T5283] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 584.815531][ T52] hsr_slave_0: left promiscuous mode [ 584.833474][ T52] hsr_slave_1: left promiscuous mode [ 584.843268][T13899] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1773'. [ 584.857265][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.879432][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.959022][ T5283] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 584.981445][ T5283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.000422][ T5283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 585.018225][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.036828][ T5283] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.061234][ T5283] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 585.087852][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 585.116606][ T5283] usb 3-1: Product: syz [ 585.123912][ T5283] usb 3-1: Manufacturer: syz [ 585.145970][ T5283] cdc_wdm 3-1:1.0: skipping garbage [ 585.162125][ T5283] cdc_wdm 3-1:1.0: skipping garbage [ 585.203370][ T5283] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 585.211472][ T5283] cdc_wdm 3-1:1.0: Unknown control protocol [ 585.397492][ T8301] usb 3-1: USB disconnect, device number 87 [ 585.624873][T13891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1771'. [ 585.707124][T13909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1774'. [ 585.794239][ T5237] Bluetooth: hci5: command tx timeout [ 585.807231][ T8300] usb 2-1: USB disconnect, device number 87 [ 586.203563][ T5285] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 586.400206][ T5285] usb 3-1: device descriptor read/64, error -71 [ 586.446485][ T52] team0 (unregistering): Port device team_slave_1 removed [ 586.628243][ T52] team0 (unregistering): Port device team_slave_0 removed [ 586.674204][ T5285] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 586.874457][ T5285] usb 3-1: device descriptor read/64, error -71 [ 587.016130][ T5285] usb usb3-port1: attempt power cycle [ 587.502190][ T5285] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 587.562250][ T5285] usb 3-1: device descriptor read/8, error -71 [ 588.102364][ T5285] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 588.169142][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 588.178844][ T5285] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 588.215629][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.248503][ T5285] usb 3-1: Product: syz [ 588.262011][ T5285] usb 3-1: Manufacturer: syz [ 588.266641][ T5285] usb 3-1: SerialNumber: syz [ 588.293939][ T5285] usb 3-1: config 0 descriptor?? [ 588.709052][ T5285] airspy 3-1:0.0: Board ID: 00 [ 588.718726][ T5285] airspy 3-1:0.0: Firmware version: [ 588.798139][ T29] audit: type=1326 audit(1723173852.351:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 588.874703][ T29] audit: type=1326 audit(1723173852.351:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 588.899235][ T29] audit: type=1326 audit(1723173852.371:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8121d76390 code=0x7ffc0000 [ 588.927996][ T29] audit: type=1326 audit(1723173852.371:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8121d775fb code=0x7ffc0000 [ 589.000590][ T29] audit: type=1326 audit(1723173852.371:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 589.077496][T13945] sch_fq: defrate 0 ignored. [ 589.083195][ T29] audit: type=1326 audit(1723173852.371:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 589.163889][ T29] audit: type=1326 audit(1723173852.371:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 589.197404][ T29] audit: type=1326 audit(1723173852.371:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 589.235815][ T29] audit: type=1326 audit(1723173852.371:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8121d779f9 code=0x7ffc0000 [ 589.385556][ T7567] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 589.547491][ T7567] usb 1-1: device descriptor read/64, error -71 [ 589.702663][T13962] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1784'. [ 589.872104][ T7567] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 589.887122][ T5285] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 589.939904][ T5285] airspy 3-1:0.0: Registered as swradio16 [ 589.949294][ T5285] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 589.998113][ T5285] usb 3-1: USB disconnect, device number 91 [ 590.063006][ T7567] usb 1-1: device descriptor read/64, error -71 [ 590.202829][ T7567] usb usb1-port1: attempt power cycle [ 590.247486][T13782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.292803][T13782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.328171][T13782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.379059][T13782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.632502][ T7567] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 590.670570][T13984] FAULT_INJECTION: forcing a failure. [ 590.670570][T13984] name failslab, interval 1, probability 0, space 0, times 0 [ 590.688217][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.2.1787 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 590.688921][ T7567] usb 1-1: device descriptor read/8, error -71 [ 590.698985][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 590.699002][T13984] Call Trace: [ 590.699013][T13984] [ 590.699021][T13984] dump_stack_lvl+0x241/0x360 [ 590.699056][T13984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.699080][T13984] ? __pfx__printk+0x10/0x10 [ 590.699103][T13984] ? __kmalloc_noprof+0xb0/0x400 [ 590.699121][T13984] ? __pfx___might_resched+0x10/0x10 [ 590.699147][T13984] should_fail_ex+0x3b0/0x4e0 [ 590.699171][T13984] ? kmp_init+0x45/0x990 [ 590.699194][T13984] should_failslab+0xac/0x100 [ 590.699221][T13984] ? kmp_init+0x45/0x990 [ 590.699244][T13984] __kmalloc_noprof+0xd8/0x400 [ 590.699270][T13984] kmp_init+0x45/0x990 [ 590.699296][T13984] ? lookup_ts_algo+0x1e/0x270 [ 590.699320][T13984] ? lookup_ts_algo+0x250/0x270 [ 590.699369][T13984] textsearch_prepare+0x81/0x170 [ 590.699397][T13984] string_mt_check+0x174/0x260 [ 590.699420][T13984] xt_check_match+0x368/0xa40 [ 590.699445][T13984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 590.699473][T13984] ? __pfx_xt_check_match+0x10/0x10 [ 590.699509][T13984] ? xt_find_match+0x1d3/0x210 [ 590.699538][T13984] translate_table+0x15c5/0x2260 [ 590.771268][T13782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.773313][T13984] ? __pfx_translate_table+0x10/0x10 [ 590.773352][T13984] ? __might_fault+0xaa/0x120 [ 590.773377][T13984] ? __pfx_lock_release+0x10/0x10 [ 590.773410][T13984] ? __might_fault+0xc6/0x120 [ 590.773436][T13984] ? _copy_from_user+0xa6/0xe0 [ 590.801183][T13782] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.803295][T13984] ? copy_from_sockptr_offset+0x6b/0xb0 [ 590.803336][T13984] do_ipt_set_ctl+0xe3d/0x1250 [ 590.803366][T13984] ? __pfx___might_resched+0x10/0x10 [ 590.822331][ T5283] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.824790][T13984] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 590.830198][ T5283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.834725][T13984] ? __pfx_lock_release+0x10/0x10 [ 590.834766][T13984] ? __mutex_unlock_slowpath+0x21d/0x750 [ 590.834793][T13984] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 590.865871][ T5283] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.866308][T13984] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 590.871699][ T5283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.878569][T13984] ? __pfx_aa_sk_perm+0x10/0x10 [ 590.878595][T13984] ? module_put+0x13a/0x2d0 [ 590.878619][T13984] nf_setsockopt+0x295/0x2c0 [ 590.914984][T13782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.919940][T13984] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 590.919973][T13984] do_sock_setsockopt+0x3af/0x720 [ 590.927389][T13782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.931981][T13984] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 590.932004][T13984] ? __fget_files+0x29/0x470 [ 590.932030][T13984] ? __fget_files+0x3f6/0x470 [ 590.932062][T13984] __sys_setsockopt+0x1ae/0x250 [ 590.932085][T13984] __x64_sys_setsockopt+0xb5/0xd0 [ 590.997445][T13984] do_syscall_64+0xf3/0x230 [ 590.999999][T13782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.001957][T13984] ? clear_bhb_loop+0x35/0x90 [ 591.001986][T13984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.002006][T13984] RIP: 0033:0x7f88607779f9 [ 591.002025][T13984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.002043][T13984] RSP: 002b:00007f8861571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 591.002066][T13984] RAX: ffffffffffffffda RBX: 00007f8860906058 RCX: 00007f88607779f9 [ 591.002081][T13984] RDX: 0000000000000040 RSI: 9003000000000000 RDI: 000000000000000c [ 591.002095][T13984] RBP: 00007f8861571090 R08: 0000000000000328 R09: 0000000000000000 [ 591.002108][T13984] R10: 0000000020000b40 R11: 0000000000000246 R12: 0000000000000001 [ 591.002122][T13984] R13: 0000000000000000 R14: 00007f8860906058 R15: 00007f8860a2fa38 [ 591.002149][T13984] [ 591.098607][ T8301] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 591.106388][ T7567] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 591.163846][ T7567] usb 1-1: device descriptor read/8, error -71 [ 591.284675][ T7567] usb usb1-port1: unable to enumerate USB device [ 591.296487][T13782] veth0_vlan: entered promiscuous mode [ 591.318007][ T8301] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 591.327158][ T8301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.336579][ T5231] IPVS: starting estimator thread 0... [ 591.374661][T13782] veth1_vlan: entered promiscuous mode [ 591.382724][ T8301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 591.405989][ T8301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.438292][ T8301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.452794][T13991] IPVS: using max 21 ests per chain, 50400 per kthread [ 591.490896][ T8301] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 591.501336][T13782] veth0_macvtap: entered promiscuous mode [ 591.508449][ T8301] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 591.530153][T13782] veth1_macvtap: entered promiscuous mode [ 591.533828][ T8301] usb 5-1: Product: syz [ 591.567629][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.579430][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.580744][ T8301] usb 5-1: Manufacturer: syz [ 591.594130][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.615686][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.617362][ T8301] cdc_wdm 5-1:1.0: skipping garbage [ 591.629953][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.639953][ T8301] cdc_wdm 5-1:1.0: skipping garbage [ 591.642890][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.654896][ T8301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 591.657439][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.675889][ T8301] cdc_wdm 5-1:1.0: Unknown control protocol [ 591.681719][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.695114][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.714458][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.724464][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 591.735549][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.746872][T13782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.763104][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.777265][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.789452][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.802427][ T5283] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 591.811522][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.835112][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.853914][ T8301] usb 5-1: USB disconnect, device number 99 [ 591.875014][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.898162][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.909261][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.919877][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.930963][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.944531][T13782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.957200][T13782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.969185][T13782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.983673][ T5283] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 592.021025][T13782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.030308][ T5283] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 592.041500][T13782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.064401][T13986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1788'. [ 592.073631][ T5283] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.107273][T13782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.121502][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.145441][T13782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.172352][T13998] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 592.200259][ T5283] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 592.237283][T14010] netlink: 'syz.1.1792': attribute type 21 has an invalid length. [ 592.245617][T14010] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1792'. [ 592.337310][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.347898][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.470123][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.483482][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.592848][ T5285] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 592.603496][ T7567] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 592.664012][T14019] xt_NFQUEUE: number of total queues is 0 [ 592.698583][T13998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.744037][T13998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.764394][ T7567] usb 5-1: device descriptor read/64, error -71 [ 592.792971][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 592.820894][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.854775][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.917903][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 592.968339][ T5285] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 592.987530][ T5231] usb 3-1: USB disconnect, device number 92 [ 593.033621][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.062675][ T5283] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 593.065333][ T5285] usb 2-1: config 0 descriptor?? [ 593.092741][ T7567] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 593.273229][ T7567] usb 5-1: device descriptor read/64, error -71 [ 593.307807][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.350297][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.396971][ T5283] usb 4-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.00 [ 593.418106][ T7567] usb usb5-port1: attempt power cycle [ 593.429978][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.468602][ T5283] usb 4-1: config 0 descriptor?? [ 593.550301][ T5285] microsoft 0003:045E:07DA.0022: collection stack underflow [ 593.568716][ T5285] microsoft 0003:045E:07DA.0022: item 0 0 0 12 parsing failed [ 593.605453][ T5285] microsoft 0003:045E:07DA.0022: parse failed [ 593.643230][ T5285] microsoft 0003:045E:07DA.0022: probe with driver microsoft failed with error -22 [ 593.834408][T14041] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1795'. [ 593.846783][ T7567] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 594.112195][ T7567] usb 5-1: device not accepting address 102, error -71 [ 594.120496][ T5283] usbhid 4-1:0.0: can't add hid device: -71 [ 594.142608][ T5283] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 594.202753][ T5283] usb 4-1: USB disconnect, device number 108 [ 595.700598][ T8300] usb 2-1: USB disconnect, device number 88 [ 595.806084][T14088] netlink: 'syz.2.1801': attribute type 4 has an invalid length. [ 596.052026][ T5285] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 596.073115][ T5231] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 596.212138][ T5285] usb 4-1: device descriptor read/64, error -71 [ 596.292201][ T8300] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 596.300113][ T5231] usb 1-1: Using ep0 maxpacket: 32 [ 596.320668][ T5231] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 596.338925][ T5231] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 596.398919][ T5231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.513704][ T5285] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 596.552620][ T8300] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 596.571564][ T8300] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.601957][ T8300] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 596.627849][ T8300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.659527][ T8300] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.687537][ T8300] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 596.698302][ T5285] usb 4-1: device descriptor read/64, error -71 [ 596.735032][ T8300] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 596.756860][ T8300] usb 2-1: Product: syz [ 596.761104][ T8300] usb 2-1: Manufacturer: syz [ 596.794379][ T8300] cdc_wdm 2-1:1.0: skipping garbage [ 596.814026][ T8300] cdc_wdm 2-1:1.0: skipping garbage [ 596.824408][ T8300] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 596.830599][ T8300] cdc_wdm 2-1:1.0: Unknown control protocol [ 596.838222][ T5285] usb usb4-port1: attempt power cycle [ 597.024553][ T9] usb 2-1: USB disconnect, device number 89 [ 597.243447][T14102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 597.272101][ T5285] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 597.335650][ T5285] usb 4-1: device descriptor read/8, error -71 [ 597.632630][ T5285] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 597.681513][T14131] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1807'. [ 597.723648][ T5285] usb 4-1: device descriptor read/8, error -71 [ 597.842066][ T5282] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 597.872359][ T5285] usb usb4-port1: unable to enumerate USB device [ 597.910194][T14138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.934348][T14138] batadv_slave_0: entered allmulticast mode [ 598.014694][ T5282] usb 2-1: device descriptor read/64, error -71 [ 598.312263][ T5282] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 598.518815][ T5282] usb 2-1: device descriptor read/64, error -71 [ 598.662720][ T5282] usb usb2-port1: attempt power cycle [ 598.785527][ T5231] usb 1-1: string descriptor 0 read error: -71 [ 598.814310][ T5231] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.843432][T14166] FAULT_INJECTION: forcing a failure. [ 598.843432][T14166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.874994][ T5231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.909002][T14166] CPU: 0 UID: 0 PID: 14166 Comm: syz.2.1812 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 598.913973][ T5231] usb 1-1: can't set config #1, error -71 [ 598.919775][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 598.919821][T14166] Call Trace: [ 598.938879][T14166] [ 598.941822][T14166] dump_stack_lvl+0x241/0x360 [ 598.946529][T14166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.951754][T14166] ? __pfx__printk+0x10/0x10 [ 598.956373][T14166] ? snprintf+0xda/0x120 [ 598.960624][T14166] should_fail_ex+0x3b0/0x4e0 [ 598.965299][T14166] _copy_to_user+0x2f/0xb0 [ 598.969726][T14166] simple_read_from_buffer+0xca/0x150 [ 598.975095][T14166] proc_fail_nth_read+0x1e9/0x250 [ 598.980113][T14166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.985651][T14166] ? rw_verify_area+0x52a/0x6b0 [ 598.990503][T14166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.996042][T14166] vfs_read+0x204/0xbc0 [ 599.000189][T14166] ? __pfx_lock_release+0x10/0x10 [ 599.005214][T14166] ? __pfx_vfs_read+0x10/0x10 [ 599.009886][T14166] ? __fget_files+0x29/0x470 [ 599.014473][T14166] ? __fget_files+0x3f6/0x470 [ 599.019158][T14166] ksys_read+0x1a0/0x2c0 [ 599.023397][T14166] ? __pfx_ksys_read+0x10/0x10 [ 599.028151][T14166] ? do_syscall_64+0x100/0x230 [ 599.032910][T14166] ? do_syscall_64+0xb6/0x230 [ 599.037582][T14166] do_syscall_64+0xf3/0x230 [ 599.042090][T14166] ? clear_bhb_loop+0x35/0x90 [ 599.046774][T14166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.052663][T14166] RIP: 0033:0x7f886077643c [ 599.057071][T14166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 599.076670][T14166] RSP: 002b:00007f8861571030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 599.085078][T14166] RAX: ffffffffffffffda RBX: 00007f8860906058 RCX: 00007f886077643c [ 599.093043][T14166] RDX: 000000000000000f RSI: 00007f88615710a0 RDI: 0000000000000009 [ 599.101004][T14166] RBP: 00007f8861571090 R08: 0000000000000000 R09: 0000000000000000 [ 599.108967][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.116930][T14166] R13: 0000000000000000 R14: 00007f8860906058 R15: 00007f8860a2fa38 [ 599.124903][T14166] [ 599.151576][ T5231] usb 1-1: USB disconnect, device number 113 [ 599.249638][T14171] team_slave_0: entered promiscuous mode [ 599.255435][T14171] team_slave_1: entered promiscuous mode [ 599.255637][ T5282] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 599.294132][T14175] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 599.313598][T14175] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 599.327694][T14179] FAULT_INJECTION: forcing a failure. [ 599.327694][T14179] name failslab, interval 1, probability 0, space 0, times 0 [ 599.344298][T14175] ALSA: mixer_oss: invalid OSS volume '' [ 599.355745][T14171] macvtap1: entered promiscuous mode [ 599.355934][T14179] CPU: 1 UID: 0 PID: 14179 Comm: syz.2.1816 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 599.361045][T14171] team0: entered promiscuous mode [ 599.371995][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 599.372014][T14179] Call Trace: [ 599.372024][T14179] [ 599.372033][T14179] dump_stack_lvl+0x241/0x360 [ 599.372066][T14179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.372092][T14179] ? __pfx__printk+0x10/0x10 [ 599.372117][T14179] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 599.372139][T14179] ? __pfx___might_resched+0x10/0x10 [ 599.372169][T14179] should_fail_ex+0x3b0/0x4e0 [ 599.372194][T14179] should_failslab+0xac/0x100 [ 599.372222][T14179] ? __alloc_skb+0x1c3/0x440 [ 599.372242][T14179] kmem_cache_alloc_node_noprof+0x71/0x320 [ 599.372263][T14179] ? aa_label_sk_perm+0x4f0/0x6d0 [ 599.372287][T14179] __alloc_skb+0x1c3/0x440 [ 599.372311][T14179] ? __pfx___alloc_skb+0x10/0x10 [ 599.372339][T14179] pfkey_sendmsg+0x1da/0x1050 [ 599.372361][T14179] ? __pfx___might_resched+0x10/0x10 [ 599.372394][T14179] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 599.372416][T14179] ? aa_sk_perm+0x967/0xab0 [ 599.372444][T14179] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.372465][T14179] ? __might_fault+0xaa/0x120 [ 599.372490][T14179] ? __pfx_lock_release+0x10/0x10 [ 599.372514][T14179] ? __import_iovec+0x536/0x820 [ 599.372543][T14179] ? aa_sock_msg_perm+0x91/0x160 [ 599.372567][T14179] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 599.372588][T14179] ? security_socket_sendmsg+0x87/0xb0 [ 599.372616][T14179] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 599.372632][T14179] __sock_sendmsg+0x221/0x270 [ 599.372660][T14179] ____sys_sendmsg+0x525/0x7d0 [ 599.372691][T14179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.372728][T14179] __sys_sendmmsg+0x3b2/0x740 [ 599.372757][T14179] ? __pfx___sys_sendmmsg+0x10/0x10 [ 599.372809][T14179] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 599.489049][T14171] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 599.492624][T14179] ? ksys_write+0x23e/0x2c0 [ 599.492655][T14179] ? __pfx_lock_release+0x10/0x10 [ 599.492686][T14179] ? vfs_write+0x7c4/0xc90 [ 599.492712][T14179] ? __mutex_unlock_slowpath+0x21d/0x750 [ 599.492740][T14179] ? __pfx_vfs_write+0x10/0x10 [ 599.492787][T14179] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 599.492815][T14179] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 599.492841][T14179] ? do_syscall_64+0x100/0x230 [ 599.492871][T14179] __x64_sys_sendmmsg+0xa0/0xb0 [ 599.492896][T14179] do_syscall_64+0xf3/0x230 [ 599.492922][T14179] ? clear_bhb_loop+0x35/0x90 [ 599.492945][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.492964][T14179] RIP: 0033:0x7f88607779f9 [ 599.492983][T14179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.493000][T14179] RSP: 002b:00007f8861592038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 599.493022][T14179] RAX: ffffffffffffffda RBX: 00007f8860905f80 RCX: 00007f88607779f9 [ 599.493038][T14179] RDX: 00000000000003ef RSI: 0000000020000180 RDI: 0000000000000003 [ 599.493052][T14179] RBP: 00007f8861592090 R08: 0000000000000000 R09: 0000000000000000 [ 599.493065][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.493078][T14179] R13: 0000000000000000 R14: 00007f8860905f80 R15: 00007f8860a2fa38 [ 599.493106][T14179] [ 599.493235][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.693595][ C1] vkms_vblank_simulate: vblank timer overrun [ 599.702939][ T5282] usb 2-1: device not accepting address 92, error -71 [ 599.842553][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1820'. [ 600.011837][T14195] fuse: Unknown parameter 'Taˆ' [ 600.042312][ T58] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 600.057981][T14200] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1821'. [ 600.083734][ T5282] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 600.125087][ T5282] usb 2-1: Using ep0 maxpacket: 16 [ 600.145467][ T5282] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.163574][ T5282] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.177186][ T5282] usb 2-1: config 0 interface 0 has no altsetting 0 [ 600.198817][ T5282] usb 2-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 600.245088][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.255660][ T5282] usb 2-1: config 0 descriptor?? [ 600.262115][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 600.286129][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 600.297259][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 600.311250][ T58] usb 5-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=cf.27 [ 600.320575][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.339205][ T58] usb 5-1: Product: syz [ 600.350946][ T58] usb 5-1: Manufacturer: syz [ 600.369520][ T58] usb 5-1: SerialNumber: syz [ 600.392880][ T58] usb 5-1: config 0 descriptor?? [ 600.410897][ T58] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 600.609547][ T58] usb 5-1: USB disconnect, device number 104 [ 600.676142][ T5282] kye 0003:0458:500F.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 600.705634][ T5282] kye 0003:0458:500F.0023: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.1-1/input0 [ 600.720412][ T5282] kye 0003:0458:500F.0023: tablet-enabling feature report not found [ 600.730478][ T5282] kye 0003:0458:500F.0023: tablet enabling failed [ 600.895286][T14176] netlink: 'syz.1.1815': attribute type 12 has an invalid length. [ 600.906381][ T58] usb 2-1: USB disconnect, device number 93 [ 600.912211][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 601.082289][ T9] usb 3-1: device descriptor read/64, error -71 [ 601.124019][ T7567] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 601.259778][T14224] program syz.4.1828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 601.326614][ T7567] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 601.342073][ T7567] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.362047][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 601.372083][ T7567] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 601.391523][ T7567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.422001][ T7567] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.448219][ T7567] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 601.488387][ T7567] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 601.535979][ T9] usb 3-1: device descriptor read/64, error -71 [ 601.547000][ T7567] usb 4-1: Product: syz [ 601.555423][ T7567] usb 4-1: Manufacturer: syz [ 601.571197][ T7567] cdc_wdm 4-1:1.0: skipping garbage [ 601.578921][ T7567] cdc_wdm 4-1:1.0: skipping garbage [ 601.606152][ T7567] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 601.615857][ T7567] cdc_wdm 4-1:1.0: Unknown control protocol [ 601.684223][ T9] usb usb3-port1: attempt power cycle [ 601.742052][ T58] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 601.785007][ T7567] usb 4-1: USB disconnect, device number 113 [ 601.922032][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 601.947903][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.982010][ T58] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 602.002405][T14217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1825'. [ 602.024902][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.043863][ T58] usb 1-1: config 0 descriptor?? [ 602.061404][ T58] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 602.110436][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 602.163291][ T9] usb 3-1: device descriptor read/8, error -71 [ 602.442059][ T9] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 602.521012][ T9] usb 3-1: device descriptor read/8, error -71 [ 602.542095][ T7567] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 602.654631][T12714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 602.662899][ T9] usb usb3-port1: unable to enumerate USB device [ 602.679998][T12714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 602.689330][T12714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 602.697694][T12714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 602.712174][ T7567] usb 4-1: device descriptor read/64, error -71 [ 602.721123][T12714] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 602.731276][T12714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.002804][ T7567] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 603.003082][ T58] gspca_vc032x: reg_r err -110 [ 603.015704][ T58] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 603.177761][T14237] chnl_net:caif_netlink_parms(): no params data found [ 603.192069][ T8301] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 603.199834][ T7567] usb 4-1: device descriptor read/64, error -71 [ 603.322500][ T7567] usb usb4-port1: attempt power cycle [ 603.347290][T14237] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.354603][ T8301] usb 5-1: device descriptor read/64, error -71 [ 603.364776][T14237] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.373103][T14237] bridge_slave_0: entered allmulticast mode [ 603.381834][T14237] bridge_slave_0: entered promiscuous mode [ 603.396879][T14237] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.421841][T14237] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.445662][T14237] bridge_slave_1: entered allmulticast mode [ 603.464188][T14237] bridge_slave_1: entered promiscuous mode [ 603.531790][T14237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.562976][T14237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.622192][ T8301] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 603.670783][T14237] team0: Port device team_slave_0 added [ 603.695359][T14237] team0: Port device team_slave_1 added [ 603.756442][ T7567] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 603.792589][ T8301] usb 5-1: device descriptor read/64, error -71 [ 603.802479][ T7567] usb 4-1: device descriptor read/8, error -71 [ 603.837393][T14237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.847111][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.882503][T14237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.900943][T14237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.908541][T14237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.941387][T14237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.943037][ T8301] usb usb5-port1: attempt power cycle [ 604.138396][T14237] hsr_slave_0: entered promiscuous mode [ 604.177635][T14237] hsr_slave_1: entered promiscuous mode [ 604.187625][T14254] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1835'. [ 604.197809][T14237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.212134][T14237] Cannot create hsr debugfs directory [ 604.462101][ T8301] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 604.522652][ T8301] usb 5-1: device descriptor read/8, error -71 [ 604.578774][ T58] usb 1-1: USB disconnect, device number 114 [ 604.745580][T14237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.756655][ T5237] Bluetooth: hci1: command tx timeout [ 604.853126][ T8301] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 604.943972][ T8301] usb 5-1: device descriptor read/8, error -71 [ 605.045676][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 605.054837][T14237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.097541][ T8301] usb usb5-port1: unable to enumerate USB device [ 605.102054][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 605.157432][T14262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1838'. [ 605.247122][T14237] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.411344][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.434538][T14237] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.562738][ T8301] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 605.713776][ T5231] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 605.724136][T14237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 605.739621][T14237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 605.770554][T14237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 605.817745][ T8301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.855672][T14237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 605.862714][ T8301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.885719][ T8301] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 605.928329][ T5231] usb 5-1: Using ep0 maxpacket: 16 [ 605.934010][ T8301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 605.949033][ T5231] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.972376][ T8301] usb 1-1: SerialNumber: syz [ 605.979370][ T5231] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.030615][ T5231] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 606.048435][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.059181][ T5231] usb 5-1: config 0 descriptor?? [ 606.220483][T14237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.264740][ T8301] usb 1-1: 0:2 : does not exist [ 606.290414][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 606.295792][T14237] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.318555][ T8301] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 606.336084][ T8301] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 606.350846][ T8301] usb 1-1: 5:0: failed to get current value for ch 14 (-22) [ 606.364183][T14268] dccp_close: ABORT with 1964 bytes unread [ 606.399891][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.407153][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.410546][ T8301] usb 1-1: USB disconnect, device number 115 [ 606.495473][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 606.503993][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.511087][ T5282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.527825][ T5231] HID 045e:07da: Invalid code 65791 type 1 [ 606.568886][ T5231] HID 045e:07da: Invalid code 768 type 1 [ 606.608373][ T5231] HID 045e:07da: Invalid code 769 type 1 [ 606.632636][ T5231] HID 045e:07da: Invalid code 770 type 1 [ 606.650780][ T5231] HID 045e:07da: Invalid code 771 type 1 [ 606.682799][ T5231] HID 045e:07da: Invalid code 772 type 1 [ 606.703972][ T5231] HID 045e:07da: Invalid code 773 type 1 [ 606.709650][ T5231] HID 045e:07da: Invalid code 774 type 1 [ 606.765982][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.766124][ T5231] HID 045e:07da: Invalid code 775 type 1 [ 606.832392][ T5237] Bluetooth: hci1: command tx timeout [ 606.836202][T14237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.898377][ T5231] HID 045e:07da: Invalid code 776 type 1 [ 607.036665][ T5231] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0024/input/input41 [ 607.143726][T14237] veth0_vlan: entered promiscuous mode [ 607.165504][T14237] veth1_vlan: entered promiscuous mode [ 607.204425][ T5231] microsoft 0003:045E:07DA.0024: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 607.285524][T14237] veth0_macvtap: entered promiscuous mode [ 607.344659][T14237] veth1_macvtap: entered promiscuous mode [ 607.464579][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.551114][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.583141][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.607186][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.647482][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.687425][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.727123][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.759943][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.773323][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.792996][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.818571][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.844134][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.912811][T14237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.992181][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.005027][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.070855][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.125149][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.145312][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.175905][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.221340][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.241268][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.252970][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.274784][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.285409][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.296448][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.309287][T14237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.322586][T14237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.366546][T14237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.400122][T14300] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1847'. [ 608.467555][T14237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.506156][T14237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.522635][ T5282] usb 5-1: USB disconnect, device number 109 [ 608.549299][T14237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.593029][T14237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.703620][T14309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.893040][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.912596][ T5237] Bluetooth: hci1: command tx timeout [ 608.946232][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.069842][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.095410][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.134073][ T5282] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 609.254313][ T8297] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 609.353364][ T5282] usb 5-1: Using ep0 maxpacket: 8 [ 609.361082][ T5282] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.377295][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 609.417070][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.465041][ T5282] usb 5-1: config 0 descriptor?? [ 609.491392][ T8297] usb 1-1: not running at top speed; connect to a high speed hub [ 609.504557][ T5282] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 609.529038][ T8297] usb 1-1: config 0 has an invalid interface number: 6 but max is 1 [ 609.545807][ T8297] usb 1-1: config 0 has an invalid interface number: 225 but max is 1 [ 609.557523][ T8297] usb 1-1: config 0 has no interface number 0 [ 609.564202][ T8297] usb 1-1: config 0 has no interface number 1 [ 609.570751][ T8297] usb 1-1: config 0 interface 6 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 609.584989][ T8297] usb 1-1: config 0 interface 225 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 609.616107][ T8297] usb 1-1: config 0 interface 225 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 609.636744][ T8297] usb 1-1: config 0 interface 225 altsetting 143 endpoint 0xC has invalid maxpacket 60800, setting to 64 [ 609.672681][ T8297] usb 1-1: config 0 interface 225 altsetting 143 endpoint 0x3 has invalid wMaxPacketSize 0 [ 609.706247][ T8297] usb 1-1: config 0 interface 225 altsetting 143 has a duplicate endpoint with address 0xB, skipping [ 609.728501][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 609.757913][ T8297] usb 1-1: config 0 interface 225 altsetting 143 has an invalid descriptor for endpoint zero, skipping [ 609.762336][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 609.800140][ T8297] usb 1-1: config 0 interface 225 altsetting 143 has a duplicate endpoint with address 0x2, skipping [ 609.808208][ T9] usb 3-1: can't read configurations, error -71 [ 609.852132][ T8297] usb 1-1: config 0 interface 6 has no altsetting 0 [ 609.889222][ T8297] usb 1-1: config 0 interface 225 has no altsetting 0 [ 609.917914][ T8297] usb 1-1: New USB device found, idVendor=2639, idProduct=0101, bcdDevice=76.ea [ 609.949964][ T8297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.971012][ T8297] usb 1-1: Product: syz [ 609.983428][ T8297] usb 1-1: Manufacturer: ﰶ딮噬盰⑼䥓岅áºåƒî·šè½ãº”ᬿ䃧åµæŒ°ë¨†î¦ã´¯á–¬ä¢ƒé„²î”“ ä è›‘æ·¾ç®ì›¨äº•è¾¤è™µé©®ã•ªèœ«á‚šâ½•ç âª…浄鴬î“苞䭚鰲㡪↺ê–狱ỗ︎ᬫ挽Ĝ戴쟃創艎á¯à£œæ’§à¼²ê»ëž©îŒ«ï˜¦è Šë• [ 610.066747][ T8297] usb 1-1: SerialNumber: syz [ 610.095196][ T8297] usb 1-1: config 0 descriptor?? [ 610.368742][ T8297] ftdi_sio 1-1:0.6: FTDI USB Serial Device converter detected [ 610.385425][ T8297] ftdi_sio ttyUSB0: unknown device type: 0x76ea [ 610.396975][ T8297] ftdi_sio 1-1:0.225: FTDI USB Serial Device converter detected [ 610.412346][ T5282] gspca_vc032x: reg_r err -110 [ 610.421960][ T5282] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 610.432327][ T8297] ftdi_sio ttyUSB1: unknown device type: 0x76ea [ 610.463514][ T8297] usb 1-1: USB disconnect, device number 116 [ 610.473456][ T8297] ftdi_sio 1-1:0.6: device disconnected [ 610.484115][ T8297] ftdi_sio 1-1:0.225: device disconnected [ 610.992728][ T5237] Bluetooth: hci1: command tx timeout [ 611.064587][T14342] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1856'. [ 611.766418][ T7567] usb 5-1: USB disconnect, device number 110 [ 612.114780][T14364] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1861'. [ 612.652355][ T8301] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 612.863166][ T8301] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 612.901477][ T8301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.945880][ T8301] usb 2-1: config 0 descriptor?? [ 612.984748][T14375] FAULT_INJECTION: forcing a failure. [ 612.984748][T14375] name failslab, interval 1, probability 0, space 0, times 0 [ 613.008771][T14375] CPU: 1 UID: 0 PID: 14375 Comm: syz.3.1867 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 613.019578][T14375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 613.029645][T14375] Call Trace: [ 613.032934][T14375] [ 613.035867][T14375] dump_stack_lvl+0x241/0x360 [ 613.040568][T14375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 613.045763][T14375] ? __pfx__printk+0x10/0x10 [ 613.050361][T14375] ? __kmalloc_node_noprof+0xb7/0x440 [ 613.055728][T14375] ? __pfx___might_resched+0x10/0x10 [ 613.061022][T14375] should_fail_ex+0x3b0/0x4e0 [ 613.065697][T14375] should_failslab+0xac/0x100 [ 613.070402][T14375] __kmalloc_node_noprof+0xdf/0x440 [ 613.075620][T14375] ? __kvmalloc_node_noprof+0x72/0x190 [ 613.081090][T14375] __kvmalloc_node_noprof+0x72/0x190 [ 613.086397][T14375] page_pool_create_percpu+0x2b0/0x7c0 [ 613.091880][T14375] __veth_napi_enable_range+0x1d2/0x820 [ 613.097432][T14375] ? __pfx___veth_napi_enable_range+0x10/0x10 [ 613.103506][T14375] ? netif_napi_add_weight+0x96d/0xc30 [ 613.109071][T14375] veth_napi_enable_range+0xce/0x150 [ 613.114360][T14375] veth_set_features+0x1d1/0x2b0 [ 613.119313][T14375] ? __pfx_veth_set_features+0x10/0x10 [ 613.124775][T14375] __netdev_update_features+0x98c/0x18f0 [ 613.130421][T14375] ? __pfx___netdev_update_features+0x10/0x10 [ 613.136489][T14375] ? __pfx___might_resched+0x10/0x10 [ 613.141774][T14375] ? __might_fault+0xaa/0x120 [ 613.146466][T14375] ? __pfx_lock_release+0x10/0x10 [ 613.151498][T14375] ? aa_get_newest_label+0xff/0x6f0 [ 613.156688][T14375] ? __might_fault+0xc6/0x120 [ 613.161354][T14375] ethtool_set_one_feature+0x2d6/0x340 [ 613.166816][T14375] ? apparmor_capable+0x138/0x1b0 [ 613.171851][T14375] ? __pfx_ethtool_set_one_feature+0x10/0x10 [ 613.177935][T14375] ? security_capable+0x90/0xb0 [ 613.182808][T14375] dev_ethtool+0x1605/0x1bc0 [ 613.187410][T14375] ? __pfx_dev_ethtool+0x10/0x10 [ 613.192364][T14375] ? smc_ioctl+0x2e6/0xad0 [ 613.196782][T14375] ? dev_load+0x21/0x1f0 [ 613.201010][T14375] dev_ioctl+0x785/0x1340 [ 613.205339][T14375] sock_do_ioctl+0x240/0x460 [ 613.209939][T14375] ? __pfx_sock_do_ioctl+0x10/0x10 [ 613.215065][T14375] sock_ioctl+0x629/0x8e0 [ 613.219396][T14375] ? __pfx_sock_ioctl+0x10/0x10 [ 613.224233][T14375] ? __fget_files+0x29/0x470 [ 613.228835][T14375] ? __fget_files+0x3f6/0x470 [ 613.233505][T14375] ? __fget_files+0x29/0x470 [ 613.238097][T14375] ? bpf_lsm_file_ioctl+0x9/0x10 [ 613.243047][T14375] ? security_file_ioctl+0x87/0xb0 [ 613.248152][T14375] ? __pfx_sock_ioctl+0x10/0x10 [ 613.252999][T14375] __se_sys_ioctl+0xfc/0x170 [ 613.257599][T14375] do_syscall_64+0xf3/0x230 [ 613.262125][T14375] ? clear_bhb_loop+0x35/0x90 [ 613.266819][T14375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.272713][T14375] RIP: 0033:0x7f197af779f9 [ 613.277135][T14375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.296733][T14375] RSP: 002b:00007f197bcf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.305157][T14375] RAX: ffffffffffffffda RBX: 00007f197b105f80 RCX: 00007f197af779f9 [ 613.313142][T14375] RDX: 0000000020000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 613.321114][T14375] RBP: 00007f197bcf9090 R08: 0000000000000000 R09: 0000000000000000 [ 613.329088][T14375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.337137][T14375] R13: 0000000000000000 R14: 00007f197b105f80 R15: 00007f197b22fa38 [ 613.345129][T14375] [ 613.384827][T14375] page_pool_create_percpu() gave up with errno -12 [ 613.401536][T14375] veth1_vlan: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 613.932153][ T8297] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 613.980725][ T8301] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 614.122172][ T8297] usb 3-1: Using ep0 maxpacket: 8 [ 614.134484][ T8297] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.163378][ T8297] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 614.178833][ T8297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.192871][ T8297] usb 3-1: config 0 descriptor?? [ 614.206745][ T8297] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 614.522298][ T5282] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 614.685211][ T5282] usb 1-1: device descriptor read/64, error -71 [ 614.702525][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 614.892077][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 614.907956][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.938542][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 614.970800][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 614.982076][ T5282] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 614.994616][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.036795][ T9] usb 4-1: config 0 descriptor?? [ 615.112223][ T8297] gspca_vc032x: reg_r err -110 [ 615.129191][ T8297] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 615.142032][ T5282] usb 1-1: device descriptor read/64, error -71 [ 615.274103][ T5282] usb usb1-port1: attempt power cycle [ 615.284987][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 615.311700][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 615.380661][ T9] usb 4-1: USB disconnect, device number 118 [ 615.400343][ T5231] usb 2-1: USB disconnect, device number 94 [ 615.458012][T14407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1875'. [ 615.592202][ T8297] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 615.742034][ T5282] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 615.792758][ T5282] usb 1-1: device descriptor read/8, error -71 [ 615.817419][ T8297] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.842461][ T8297] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 615.864395][ T8297] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 615.884248][ T29] audit: type=1326 audit(1723173879.441:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14408 comm="syz.1.1876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d843779f9 code=0x0 [ 615.908822][ T8297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 615.934446][ T8297] usb 5-1: SerialNumber: syz [ 615.993429][ T5231] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 616.112251][ T5282] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 616.175756][ T5282] usb 1-1: device descriptor read/8, error -71 [ 616.203929][ T5231] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 616.220739][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.274409][ T5231] usb 4-1: config 0 descriptor?? [ 616.302465][ T5282] usb usb1-port1: unable to enumerate USB device [ 616.672406][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 616.730940][ T5285] usb 3-1: USB disconnect, device number 99 [ 616.808933][T14418] x_tables: duplicate underflow at hook 4 [ 617.182053][ T5283] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 617.308011][ T5231] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 617.396149][ T5283] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 617.422828][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.439999][ T5283] usb 2-1: Product: syz [ 617.453351][ T5283] usb 2-1: Manufacturer: syz [ 617.458459][ T5283] usb 2-1: SerialNumber: syz [ 617.501189][ T5283] usb 2-1: config 0 descriptor?? [ 618.003356][ T5283] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 618.024380][ T5283] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 618.064524][ T5283] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 618.234312][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.300745][ T8297] usb 5-1: 0:2 : does not exist [ 618.324443][ T8297] usb 5-1: unit 5: unexpected type 0x09 [ 618.422052][ T5285] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 618.452507][ T8297] usb 5-1: USB disconnect, device number 111 [ 618.513687][T14419] fuse: Unknown parameter '0x0000000000000005' [ 618.535383][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.659610][ T5285] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 618.692089][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.720770][ T5285] usb 1-1: config 0 descriptor?? [ 618.764174][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.802175][ T5283] usb 4-1: USB disconnect, device number 119 [ 618.828455][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.982805][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'. [ 619.141648][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 619.154619][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 619.163966][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 619.172073][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 619.182591][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 619.189917][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.276667][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.301624][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'. [ 619.637032][ T11] bridge_slave_1: left allmulticast mode [ 619.644231][ T11] bridge_slave_1: left promiscuous mode [ 619.650467][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.666655][ T11] bridge_slave_0: left allmulticast mode [ 619.673854][ T11] bridge_slave_0: left promiscuous mode [ 619.680107][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.743899][ T5285] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 620.297638][ T8297] usb 2-1: USB disconnect, device number 95 [ 620.889946][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.917310][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.946463][ T11] bond0 (unregistering): Released all slaves [ 621.151692][ T5285] usb 1-1: USB disconnect, device number 121 [ 621.232198][ T5237] Bluetooth: hci3: command tx timeout [ 621.585097][T14452] chnl_net:caif_netlink_parms(): no params data found [ 621.782000][ T29] audit: type=1326 audit(1723173885.331:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f55f779f9 code=0x7ffc0000 [ 621.890329][ T29] audit: type=1326 audit(1723173885.331:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f55f779f9 code=0x7ffc0000 [ 621.944334][ T29] audit: type=1326 audit(1723173885.341:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f55f76390 code=0x7ffc0000 [ 621.996503][ T29] audit: type=1326 audit(1723173885.341:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.020197][ T8301] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 622.044308][ T29] audit: type=1326 audit(1723173885.341:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.082093][ T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 622.132304][ T29] audit: type=1326 audit(1723173885.341:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.212334][ T8301] usb 4-1: Using ep0 maxpacket: 8 [ 622.223612][T12714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 622.232059][ T29] audit: type=1326 audit(1723173885.341:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.245529][ T8301] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3 [ 622.266150][T12714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 622.280157][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 622.296356][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.297505][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 622.315946][ T5229] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 622.322229][ T29] audit: type=1326 audit(1723173885.481:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.326392][ T5229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 622.362240][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.381965][ T8301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.409723][ T29] audit: type=1326 audit(1723173885.581:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.413171][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 622.432514][ T29] audit: type=1326 audit(1723173885.651:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14496 comm="syz.0.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f55f775fb code=0x7ffc0000 [ 622.472357][ T8301] usb 4-1: Product: syz [ 622.478316][ T11] hsr_slave_0: left promiscuous mode [ 622.487134][ T8301] usb 4-1: Manufacturer: syz [ 622.513312][ T8301] usb 4-1: SerialNumber: syz [ 622.519335][ T11] hsr_slave_1: left promiscuous mode [ 622.530720][ T8301] usb 4-1: config 0 descriptor?? [ 622.539700][ T11] batman_adv: batadv0: Removing interface: team0 [ 622.561183][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.572155][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.588643][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.609624][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.618611][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.631127][ T9] usb 1-1: config 0 descriptor?? [ 622.656393][ T11] veth1: left allmulticast mode [ 622.660500][ T8301] msi2500 4-1:0.0: Registered as swradio16 [ 622.661278][ T11] veth1: left promiscuous mode [ 622.671426][ T8301] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 622.673352][ T11] veth1_macvtap: left promiscuous mode [ 622.688574][ T11] veth0_macvtap: left promiscuous mode [ 623.087888][ T9] wacom 0003:056A:0031.0025: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.0-1/input0 [ 623.329914][ T9] usb 1-1: USB disconnect, device number 122 [ 623.331996][ T5229] Bluetooth: hci3: command tx timeout [ 623.889658][ T11] team0 (unregistering): Port device team_slave_1 removed [ 624.006326][ T11] team0 (unregistering): Port device team_slave_0 removed [ 624.446973][ T5229] Bluetooth: hci2: command tx timeout [ 624.618131][ T8297] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 624.785981][ T9] usb 4-1: USB disconnect, device number 120 [ 624.842111][ T8297] usb 2-1: Using ep0 maxpacket: 8 [ 624.850613][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.857078][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.883391][ T8297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 624.892713][ T8297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.900740][ T8297] usb 2-1: Product: syz [ 624.906285][ T8297] usb 2-1: Manufacturer: syz [ 624.911002][ T8297] usb 2-1: SerialNumber: syz [ 625.020930][T14528] tipc: Started in network mode [ 625.043090][T14528] tipc: Node identity f7, cluster identity 4711 [ 625.049590][T14528] tipc: Node number set to 247 [ 625.135731][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.143401][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.150782][T14452] bridge_slave_0: entered allmulticast mode [ 625.160955][T14452] bridge_slave_0: entered promiscuous mode [ 625.161257][ T8297] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 625.171394][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.198844][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.208778][T14452] bridge_slave_1: entered allmulticast mode [ 625.221480][T14452] bridge_slave_1: entered promiscuous mode [ 625.339154][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.394786][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.404375][ T5229] Bluetooth: hci3: command tx timeout [ 625.507478][ T8296] usb 2-1: USB disconnect, device number 96 [ 625.526683][ T8296] usblp0: removed [ 625.631864][T14452] team0: Port device team_slave_0 added [ 625.686284][T14452] team0: Port device team_slave_1 added [ 625.973890][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.980890][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.069434][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.106652][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.129654][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.197796][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.278039][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 626.289939][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 626.298540][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 626.388312][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 626.391448][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.414486][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 626.422015][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 626.514935][ T5237] Bluetooth: hci2: command tx timeout [ 626.737748][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.012772][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.069987][T14452] hsr_slave_0: entered promiscuous mode [ 627.089532][T14575] input: syz0 as /devices/virtual/input/input45 [ 627.105195][T14452] hsr_slave_1: entered promiscuous mode [ 627.123644][T14452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.145585][T14452] Cannot create hsr debugfs directory [ 627.255531][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.329747][T14513] chnl_net:caif_netlink_parms(): no params data found [ 627.476729][ T5237] Bluetooth: hci3: command tx timeout [ 627.710283][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.729718][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.744223][T14513] bridge_slave_0: entered allmulticast mode [ 627.752220][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 627.761860][T14513] bridge_slave_0: entered promiscuous mode [ 627.779615][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.793901][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.808270][T14513] bridge_slave_1: entered allmulticast mode [ 627.834765][T14513] bridge_slave_1: entered promiscuous mode [ 627.882400][T14590] netlink: 'syz.0.1917': attribute type 4 has an invalid length. [ 627.946275][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.964750][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 628.004158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.035972][ T9] usb 2-1: config 0 descriptor?? [ 628.038916][T14513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.056106][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 628.285271][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.443310][T14513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.460394][ T9] pwc: send_video_command error -71 [ 628.472075][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 628.482404][ T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 628.513662][ T9] usb 2-1: USB disconnect, device number 97 [ 628.522451][ T5237] Bluetooth: hci5: command tx timeout [ 628.592235][ T5237] Bluetooth: hci2: command tx timeout [ 628.674745][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.830578][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 628.830595][ T29] audit: type=1326 audit(1723173892.381:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14607 comm="syz.0.1918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f55f779f9 code=0x0 [ 628.899936][T14513] team0: Port device team_slave_0 added [ 628.924369][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.944537][T14513] team0: Port device team_slave_1 added [ 629.100608][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.127291][T14564] chnl_net:caif_netlink_parms(): no params data found [ 629.254195][T14513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.261198][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.288169][T14513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.303685][T14513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.310849][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.337590][T14513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.530845][T14513] hsr_slave_0: entered promiscuous mode [ 629.539106][T14513] hsr_slave_1: entered promiscuous mode [ 629.547090][T14513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.558014][T14513] Cannot create hsr debugfs directory [ 629.569716][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.589829][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.601609][T14564] bridge_slave_0: entered allmulticast mode [ 629.608937][T14564] bridge_slave_0: entered promiscuous mode [ 629.677679][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.690470][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.699213][T14564] bridge_slave_1: entered allmulticast mode [ 629.711747][T14564] bridge_slave_1: entered promiscuous mode [ 629.807853][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.851193][ T11] bridge_slave_1: left allmulticast mode [ 629.858464][ T11] bridge_slave_1: left promiscuous mode [ 629.867168][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.877289][ T11] bridge_slave_0: left allmulticast mode [ 629.883270][ T11] bridge_slave_0: left promiscuous mode [ 629.888985][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.900720][ T11] bridge_slave_1: left allmulticast mode [ 629.909194][ T11] bridge_slave_1: left promiscuous mode [ 629.916267][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.929897][ T11] bridge_slave_0: left allmulticast mode [ 629.938225][ T11] bridge_slave_0: left promiscuous mode [ 629.958548][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.124401][ T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 630.143813][T14623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1921'. [ 630.336248][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 630.479390][T14626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.515086][T14626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.593691][ T5237] Bluetooth: hci5: command tx timeout [ 630.672362][ T5229] Bluetooth: hci2: command tx timeout [ 631.171763][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.184278][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.197669][ T11] bond0 (unregistering): Released all slaves [ 631.367239][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.380154][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.396650][ T11] bond0 (unregistering): Released all slaves [ 631.415353][ T11] bond1 (unregistering): Released all slaves [ 631.448111][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.545480][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 631.566648][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 631.590533][ T9] usb 1-1: can't read configurations, error -71 [ 631.630337][T14564] team0: Port device team_slave_0 added [ 631.733996][T14564] team0: Port device team_slave_1 added [ 631.858942][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.866417][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.897245][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.915051][T14452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 632.016017][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.033856][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.074957][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.111378][T14452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 632.182780][T14452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.392194][T14452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.537873][T14564] hsr_slave_0: entered promiscuous mode [ 632.563677][T14564] hsr_slave_1: entered promiscuous mode [ 632.590856][T14564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.613019][T14564] Cannot create hsr debugfs directory [ 632.672204][ T5229] Bluetooth: hci5: command tx timeout [ 632.691204][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.701010][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.711223][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.720625][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.728391][ T5237] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.736908][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.827547][T14631] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1925'. [ 633.012235][ T11] hsr_slave_0: left promiscuous mode [ 633.032395][ T11] hsr_slave_1: left promiscuous mode [ 633.051807][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.062156][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.079298][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.088153][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.108734][ T11] hsr_slave_0: left promiscuous mode [ 633.115740][ T11] hsr_slave_1: left promiscuous mode [ 633.121998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.131377][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.147868][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.200046][ T11] team0: left promiscuous mode [ 633.212500][ T11] team_slave_0: left promiscuous mode [ 633.217938][ T11] team_slave_1: left promiscuous mode [ 633.232051][ T11] veth1_macvtap: left promiscuous mode [ 633.252030][ T11] veth0_macvtap: left promiscuous mode [ 633.257717][ T11] veth1_vlan: left promiscuous mode [ 633.263657][ T11] veth0_vlan: left promiscuous mode [ 633.289858][T14637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1926'. [ 633.582035][ T58] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 633.774914][ T58] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 633.783199][ T58] usb 1-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config [ 633.795105][ T58] usb 1-1: config 0 has no interface number 0 [ 633.801286][ T58] usb 1-1: config 0 interface 17 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 633.813293][ T58] usb 1-1: config 0 interface 17 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 633.823694][ T58] usb 1-1: config 0 interface 17 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 13 [ 633.837050][ T58] usb 1-1: New USB device found, idVendor=1044, idProduct=8001, bcdDevice=53.fc [ 633.846202][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.858158][ T58] usb 1-1: config 0 descriptor?? [ 633.865218][T14637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 634.752026][ T5229] Bluetooth: hci5: command tx timeout [ 634.832363][ T5229] Bluetooth: hci1: command tx timeout [ 636.921439][ T5229] Bluetooth: hci1: command tx timeout [ 639.002166][ T5229] Bluetooth: hci1: command tx timeout [ 641.072661][ T5229] Bluetooth: hci1: command tx timeout [ 643.525941][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 643.540758][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 643.550459][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 643.560217][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 643.573119][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 643.580427][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 645.633006][ T5237] Bluetooth: hci6: command tx timeout [ 647.722005][ T5237] Bluetooth: hci6: command tx timeout [ 649.794850][ T5237] Bluetooth: hci6: command tx timeout [ 651.882062][ T5237] Bluetooth: hci6: command tx timeout [ 679.042974][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 679.053026][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 679.063210][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 679.081190][ T5229] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 679.090165][ T5229] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 679.097691][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 681.153092][ T5237] Bluetooth: hci7: command tx timeout [ 682.036082][ T5229] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 682.045101][ T5229] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 682.062221][ T5229] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 682.070310][ T5229] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 682.078851][ T5229] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 682.088056][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 683.232098][ T5229] Bluetooth: hci7: command tx timeout [ 684.192150][ T5229] Bluetooth: hci8: command tx timeout [ 685.322015][ T5229] Bluetooth: hci7: command tx timeout [ 686.046811][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 686.055826][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 686.065996][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 686.079648][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 686.095979][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 686.103611][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 686.275321][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.275913][ T5229] Bluetooth: hci8: command tx timeout [ 686.281641][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.392285][ T5229] Bluetooth: hci7: command tx timeout [ 688.192442][ T5229] Bluetooth: hci9: command tx timeout [ 688.353568][ T5229] Bluetooth: hci8: command tx timeout [ 690.272745][ T5229] Bluetooth: hci9: command tx timeout [ 690.442094][ T5229] Bluetooth: hci8: command tx timeout [ 692.352782][ T5229] Bluetooth: hci9: command tx timeout [ 692.550467][ T5237] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 692.560239][ T5237] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 692.570189][ T5237] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 692.580425][ T5237] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 692.588557][ T5237] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 692.603134][ T5237] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 694.432331][ T5229] Bluetooth: hci9: command tx timeout [ 694.672492][ T5229] Bluetooth: hci10: command tx timeout [ 695.664101][ T4685] udevd[4685]: worker [5238] /devices/netdevsim4 is taking a long time [ 696.752342][ T5229] Bluetooth: hci10: command tx timeout [ 698.832271][ T5229] Bluetooth: hci10: command tx timeout [ 700.912363][ T5229] Bluetooth: hci10: command tx timeout [ 703.581131][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 703.592979][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 703.602345][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 703.611616][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 703.619613][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 703.628114][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 705.719387][ T5237] Bluetooth: hci11: command tx timeout [ 707.792401][ T5237] Bluetooth: hci11: command tx timeout [ 709.872114][ T5237] Bluetooth: hci11: command tx timeout [ 711.952123][ T5237] Bluetooth: hci11: command tx timeout [ 739.184404][ T5229] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 739.194485][ T5229] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 739.203599][ T5229] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 739.214150][ T5229] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 739.222882][ T5229] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 739.233094][ T5229] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 741.312389][ T5237] Bluetooth: hci12: command tx timeout [ 742.732265][ T5239] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 742.742628][ T5239] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 742.751058][ T5239] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 742.760249][ T5239] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 742.768042][ T5239] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 742.775771][ T5239] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 743.392163][T12714] Bluetooth: hci12: command tx timeout [ 744.672375][T12714] Bluetooth: hci3: command 0x0406 tx timeout [ 744.676240][ T5239] Bluetooth: hci2: command 0x0406 tx timeout [ 744.832141][ T5237] Bluetooth: hci13: command tx timeout [ 745.472078][ T5237] Bluetooth: hci12: command tx timeout [ 746.728100][ T5229] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 746.738168][ T5229] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 746.751105][ T5229] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 746.761469][ T5229] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 746.770391][ T5229] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 746.778007][ T5229] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 746.912079][ T5229] Bluetooth: hci13: command tx timeout [ 747.552427][ T5229] Bluetooth: hci12: command tx timeout [ 747.722789][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.729859][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.832261][ T5237] Bluetooth: hci14: command tx timeout [ 748.992118][ T5237] Bluetooth: hci13: command tx timeout [ 749.792033][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 750.912334][ T5229] Bluetooth: hci14: command tx timeout [ 751.082116][ T5229] Bluetooth: hci13: command tx timeout [ 752.716605][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 752.727209][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 752.736413][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 752.745687][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 752.754235][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 752.770549][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 752.992002][ T5237] Bluetooth: hci14: command tx timeout [ 754.832286][ T5237] Bluetooth: hci15: command tx timeout [ 754.912067][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 755.082064][ T5229] Bluetooth: hci14: command tx timeout [ 756.912358][ T5229] Bluetooth: hci15: command tx timeout [ 758.992352][ T5229] Bluetooth: hci15: command tx timeout [ 761.082339][ T5229] Bluetooth: hci15: command tx timeout [ 763.646335][ T5237] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 763.662184][ T5237] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 763.671128][ T5237] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 763.679353][ T5237] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 763.687498][ T5237] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 763.695152][ T5237] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 765.792480][ T5229] Bluetooth: hci16: command tx timeout [ 767.882394][ T5229] Bluetooth: hci16: command tx timeout [ 769.952066][ T5229] Bluetooth: hci16: command tx timeout [ 770.272218][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 772.031987][ T5237] Bluetooth: hci16: command tx timeout [ 791.872675][ T30] INFO: task kworker/u8:5:1102 blocked for more than 143 seconds. [ 791.880628][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 791.889935][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 791.898775][ T30] task:kworker/u8:5 state:D stack:20880 pid:1102 tgid:1102 ppid:2 flags:0x00004000 [ 791.909056][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 791.915160][ T30] Call Trace: [ 791.918459][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 791.921408][ T30] __schedule+0x1800/0x4a60 [ 791.926246][ T30] ? __pfx___schedule+0x10/0x10 [ 791.931370][ T30] ? __pfx_lock_release+0x10/0x10 [ 791.936757][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 791.942552][ T30] ? kthread_data+0x52/0xd0 [ 791.947087][ T30] ? schedule+0x90/0x320 [ 791.951343][ T30] ? wq_worker_sleeping+0x66/0x240 [ 791.957321][ T30] ? schedule+0x90/0x320 [ 791.964005][ T30] schedule+0x14b/0x320 [ 791.968203][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.018897][ T30] __mutex_lock+0x6a4/0xd70 [ 792.028484][ T30] ? mark_lock+0x9a/0x350 [ 792.033526][ T30] ? __mutex_lock+0x527/0xd70 [ 792.038301][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 792.043587][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 792.048665][ T30] addrconf_dad_work+0xd0/0x16f0 [ 792.054673][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 792.060153][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 792.067715][ T30] ? process_scheduled_works+0x945/0x1830 [ 792.073622][ T30] process_scheduled_works+0xa2c/0x1830 [ 792.079204][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 792.085407][ T30] ? assign_work+0x364/0x3d0 [ 792.090014][ T30] worker_thread+0x86d/0xd40 [ 792.094780][ T30] ? __kthread_parkme+0x169/0x1d0 [ 792.099823][ T30] ? __pfx_worker_thread+0x10/0x10 [ 792.105213][ T30] kthread+0x2f0/0x390 [ 792.109305][ T30] ? __pfx_worker_thread+0x10/0x10 [ 792.114664][ T30] ? __pfx_kthread+0x10/0x10 [ 792.119503][ T30] ret_from_fork+0x4b/0x80 [ 792.124043][ T30] ? __pfx_kthread+0x10/0x10 [ 792.128658][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.133626][ T30] [ 792.136763][ T30] INFO: task dhcpcd:4898 blocked for more than 143 seconds. [ 792.144142][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 792.151777][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.160642][ T30] task:dhcpcd state:D stack:23664 pid:4898 tgid:4898 ppid:1 flags:0x00000002 [ 792.173690][ T30] Call Trace: [ 792.176993][ T30] [ 792.179930][ T30] __schedule+0x1800/0x4a60 [ 792.184513][ T30] ? __pfx___schedule+0x10/0x10 [ 792.189397][ T30] ? __pfx_lock_release+0x10/0x10 [ 792.195192][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 792.200685][ T30] ? schedule+0x90/0x320 [ 792.205061][ T30] schedule+0x14b/0x320 [ 792.209231][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.214851][ T30] __mutex_lock+0x6a4/0xd70 [ 792.219393][ T30] ? __mutex_lock+0x527/0xd70 [ 792.224569][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 792.229799][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 792.234976][ T30] ? __might_fault+0xc6/0x120 [ 792.239686][ T30] vlan_ioctl_handler+0x112/0x9d0 [ 792.245013][ T30] ? sock_ioctl+0x664/0x8e0 [ 792.249535][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 792.255612][ T30] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 792.261194][ T30] sock_ioctl+0x683/0x8e0 [ 792.265931][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 792.271674][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 792.277466][ T30] ? security_file_ioctl+0x87/0xb0 [ 792.283793][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 792.288677][ T30] __se_sys_ioctl+0xfc/0x170 [ 792.293812][ T30] do_syscall_64+0xf3/0x230 [ 792.298346][ T30] ? clear_bhb_loop+0x35/0x90 [ 792.303505][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.309415][ T30] RIP: 0033:0x7fdddb1d7d49 [ 792.314356][ T30] RSP: 002b:00007ffdcc04e7f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.323087][ T30] RAX: ffffffffffffffda RBX: 0000558d6d2f42b0 RCX: 00007fdddb1d7d49 [ 792.331070][ T30] RDX: 00007ffdcc04e800 RSI: 0000000000008982 RDI: 0000000000000011 [ 792.339211][ T30] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 792.351532][ T30] R10: 00007ffdcc05ee80 R11: 0000000000000246 R12: 00007ffdcc04e800 [ 792.364947][ T30] R13: 00007ffdcc04e8c0 R14: 0000558d6d2f42b0 R15: 0000558d6d3e6760 [ 792.379508][ T30] [ 792.386177][ T30] INFO: task udevd:5238 blocked for more than 143 seconds. [ 792.399655][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 792.410033][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.425302][ T30] task:udevd state:D stack:21632 pid:5238 tgid:5238 ppid:4685 flags:0x00000002 [ 792.446980][ T30] Call Trace: [ 792.450361][ T30] [ 792.457812][ T30] __schedule+0x1800/0x4a60 [ 792.462554][ T30] ? __pfx___schedule+0x10/0x10 [ 792.467434][ T30] ? __pfx_lock_release+0x10/0x10 [ 792.481948][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 792.487440][ T30] ? schedule+0x90/0x320 [ 792.491679][ T30] schedule+0x14b/0x320 [ 792.503893][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.509379][ T30] __mutex_lock+0x6a4/0xd70 [ 792.520913][ T30] ? __mutex_lock+0x527/0xd70 [ 792.528024][ T30] ? uevent_show+0x17d/0x340 [ 792.538840][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 792.544013][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 792.548796][ T30] ? uevent_show+0x163/0x340 [ 792.561961][ T30] uevent_show+0x17d/0x340 [ 792.566415][ T30] dev_attr_show+0x55/0xc0 [ 792.570851][ T30] ? __pfx_dev_attr_show+0x10/0x10 [ 792.577326][ T30] sysfs_kf_seq_show+0x331/0x4c0 [ 792.582365][ T30] seq_read_iter+0x445/0xd60 [ 792.586993][ T30] vfs_read+0x9bd/0xbc0 [ 792.591174][ T30] ? __pfx_vfs_read+0x10/0x10 [ 792.596218][ T30] ? vfs_fstatat+0xfd/0x190 [ 792.600754][ T30] ? __x64_sys_newfstatat+0x145/0x1a0 [ 792.606525][ T30] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 792.612983][ T30] ksys_read+0x1a0/0x2c0 [ 792.617256][ T30] ? __pfx_ksys_read+0x10/0x10 [ 792.623329][ T30] ? do_syscall_64+0x100/0x230 [ 792.628136][ T30] ? do_syscall_64+0xb6/0x230 [ 792.633179][ T30] do_syscall_64+0xf3/0x230 [ 792.637715][ T30] ? clear_bhb_loop+0x35/0x90 [ 792.642880][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.648789][ T30] RIP: 0033:0x7fd464116b6a [ 792.653689][ T30] RSP: 002b:00007fffe0e24618 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.662421][ T30] RAX: ffffffffffffffda RBX: 000055ab3e69f0f0 RCX: 00007fd464116b6a [ 792.670415][ T30] RDX: 0000000000001000 RSI: 000055ab3e699930 RDI: 0000000000000008 [ 792.681214][ T30] RBP: 000055ab3e69f0f0 R08: 0000000000000008 R09: 0000000000000000 [ 792.689514][ T30] R10: 000000000000010f R11: 0000000000000246 R12: 0000000000000000 [ 792.697619][ T30] R13: 0000000000003fff R14: 00007fffe0e24af8 R15: 000000000000000a [ 792.705660][ T30] [ 792.708753][ T30] INFO: task kworker/0:7:7567 blocked for more than 144 seconds. [ 792.716962][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 792.725005][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.734870][ T30] task:kworker/0:7 state:D stack:19896 pid:7567 tgid:7567 ppid:2 flags:0x00004000 [ 792.745363][ T30] Workqueue: events linkwatch_event [ 792.750593][ T30] Call Trace: [ 792.754449][ T30] [ 792.757407][ T30] __schedule+0x1800/0x4a60 [ 792.762036][ T30] ? __pfx___schedule+0x10/0x10 [ 792.767223][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 792.773576][ T30] ? __pfx_lock_release+0x10/0x10 [ 792.778629][ T30] ? kick_pool+0x45c/0x620 [ 792.784368][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 792.789776][ T30] ? schedule+0x90/0x320 [ 792.794542][ T30] schedule+0x14b/0x320 [ 792.798730][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.804610][ T30] __mutex_lock+0x6a4/0xd70 [ 792.809139][ T30] ? __mutex_lock+0x527/0xd70 [ 792.814311][ T30] ? linkwatch_event+0xe/0x60 [ 792.819013][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 792.824496][ T30] ? process_scheduled_works+0x945/0x1830 [ 792.830243][ T30] linkwatch_event+0xe/0x60 [ 792.835256][ T30] process_scheduled_works+0xa2c/0x1830 [ 792.840856][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 792.848244][ T30] ? assign_work+0x364/0x3d0 [ 792.853201][ T30] worker_thread+0x86d/0xd40 [ 792.857833][ T30] ? __kthread_parkme+0x169/0x1d0 [ 792.863129][ T30] ? __pfx_worker_thread+0x10/0x10 [ 792.868261][ T30] kthread+0x2f0/0x390 [ 792.872972][ T30] ? __pfx_worker_thread+0x10/0x10 [ 792.878110][ T30] ? __pfx_kthread+0x10/0x10 [ 792.883090][ T30] ret_from_fork+0x4b/0x80 [ 792.888460][ T30] ? __pfx_kthread+0x10/0x10 [ 792.893663][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.898468][ T30] [ 792.901503][ T30] INFO: task syz-executor:14452 blocked for more than 144 seconds. [ 792.909464][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 792.917823][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 792.926554][ T30] task:syz-executor state:D stack:21584 pid:14452 tgid:14452 ppid:1 flags:0x00004004 [ 792.936874][ T30] Call Trace: [ 792.940164][ T30] [ 792.943396][ T30] __schedule+0x1800/0x4a60 [ 792.947954][ T30] ? __pfx___schedule+0x10/0x10 [ 792.954268][ T30] ? __pfx_lock_release+0x10/0x10 [ 792.959325][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 792.965254][ T30] ? schedule+0x90/0x320 [ 792.969515][ T30] schedule+0x14b/0x320 [ 792.974156][ T30] schedule_preempt_disabled+0x13/0x30 [ 792.979642][ T30] __mutex_lock+0x6a4/0xd70 [ 792.984644][ T30] ? __mutex_lock+0x527/0xd70 [ 792.990103][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 792.995759][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 793.000832][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 793.007095][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 793.015740][ T30] ? __lock_acquire+0x137a/0x2040 [ 793.020793][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.026901][ T30] netlink_rcv_skb+0x1e3/0x430 [ 793.031696][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.037699][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.043381][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 793.048614][ T30] netlink_unicast+0x7f0/0x990 [ 793.053891][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 793.059198][ T30] ? __virt_addr_valid+0x183/0x530 [ 793.065751][ T30] ? __check_object_size+0x49c/0x900 [ 793.071072][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 793.076878][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 793.081683][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.087454][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.094843][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 793.099814][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 793.105565][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 793.111061][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.116863][ T30] __sock_sendmsg+0x221/0x270 [ 793.121573][ T30] __sys_sendto+0x3a4/0x4f0 [ 793.126173][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 793.131384][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.137596][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 793.144053][ T30] __x64_sys_sendto+0xde/0x100 [ 793.148990][ T30] do_syscall_64+0xf3/0x230 [ 793.153907][ T30] ? clear_bhb_loop+0x35/0x90 [ 793.158612][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.164610][ T30] RIP: 0033:0x7ffa2977978c [ 793.169041][ T30] RSP: 002b:00007ffa29a2f670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 793.178535][ T30] RAX: ffffffffffffffda RBX: 00007ffa2a434620 RCX: 00007ffa2977978c [ 793.186843][ T30] RDX: 0000000000000028 RSI: 00007ffa2a434670 RDI: 0000000000000003 [ 793.196352][ T30] RBP: 0000000000000000 R08: 00007ffa29a2f6c4 R09: 000000000000000c [ 793.204664][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 793.212994][ T30] R13: 0000000000000000 R14: 00007ffa2a434670 R15: 0000000000000000 [ 793.221010][ T30] [ 793.225167][ T30] INFO: task syz-executor:14513 blocked for more than 144 seconds. [ 793.234175][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 793.241811][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.250705][ T30] task:syz-executor state:D stack:21728 pid:14513 tgid:14513 ppid:1 flags:0x00004004 [ 793.261009][ T30] Call Trace: [ 793.264385][ T30] [ 793.267329][ T30] __schedule+0x1800/0x4a60 [ 793.271863][ T30] ? __pfx___schedule+0x10/0x10 [ 793.276855][ T30] ? __pfx_lock_release+0x10/0x10 [ 793.282240][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 793.297349][ T30] ? schedule+0x90/0x320 [ 793.301619][ T30] schedule+0x14b/0x320 [ 793.310498][ T30] schedule_preempt_disabled+0x13/0x30 [ 793.320610][ T30] __mutex_lock+0x6a4/0xd70 [ 793.325332][ T30] ? __mutex_lock+0x527/0xd70 [ 793.330039][ T30] ? register_nexthop_notifier+0x84/0x290 [ 793.344110][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 793.349146][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 793.361697][ T30] register_nexthop_notifier+0x84/0x290 [ 793.367396][ T30] ? devlink_resource_find+0xba/0xf0 [ 793.372919][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 793.379183][ T30] ? devlink_resource_find+0xc4/0xf0 [ 793.392899][ T30] nsim_fib_create+0x8a6/0xa70 [ 793.398641][ T30] ? __pfx_nsim_fib_create+0x10/0x10 [ 793.405203][ T30] nsim_drv_probe+0x747/0xb80 [ 793.410182][ T30] ? __pfx_nsim_drv_probe+0x10/0x10 [ 793.415552][ T30] ? kernfs_create_link+0x187/0x1f0 [ 793.420777][ T30] ? sysfs_do_create_link_sd+0xdd/0x110 [ 793.426443][ T30] ? driver_sysfs_add+0x1de/0x1f0 [ 793.431488][ T30] ? really_probe+0x147/0xad0 [ 793.436253][ T30] ? __pfx_nsim_bus_probe+0x10/0x10 [ 793.441469][ T30] really_probe+0x2b8/0xad0 [ 793.446661][ T30] __driver_probe_device+0x1a2/0x390 [ 793.452269][ T30] driver_probe_device+0x50/0x430 [ 793.457372][ T30] __device_attach_driver+0x2d6/0x530 [ 793.463210][ T30] bus_for_each_drv+0x24e/0x2e0 [ 793.468092][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 793.481206][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 793.488879][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 793.494297][ T30] __device_attach+0x333/0x520 [ 793.499824][ T30] ? __pfx___device_attach+0x10/0x10 [ 793.505483][ T30] bus_probe_device+0x189/0x260 [ 793.510362][ T30] device_add+0x856/0xbf0 [ 793.516416][ T30] new_device_store+0x3f3/0x890 [ 793.521389][ T30] ? kernfs_fop_write_iter+0x1eb/0x500 [ 793.527392][ T30] ? __pfx_new_device_store+0x10/0x10 [ 793.533186][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 793.538064][ T30] ? bus_attr_store+0x4f/0xa0 [ 793.543311][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 793.548534][ T30] kernfs_fop_write_iter+0x3a1/0x500 [ 793.554406][ T30] vfs_write+0xa72/0xc90 [ 793.558687][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 793.565036][ T30] ? __pfx_vfs_write+0x10/0x10 [ 793.569833][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.576277][ T30] ksys_write+0x1a0/0x2c0 [ 793.580633][ T30] ? __pfx_ksys_write+0x10/0x10 [ 793.585994][ T30] ? do_syscall_64+0x100/0x230 [ 793.590791][ T30] ? do_syscall_64+0xb6/0x230 [ 793.595944][ T30] do_syscall_64+0xf3/0x230 [ 793.601356][ T30] ? clear_bhb_loop+0x35/0x90 [ 793.606599][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.612827][ T30] RIP: 0033:0x7fa6909764df [ 793.617369][ T30] RSP: 002b:00007fa690c2f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 793.627148][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa6909764df [ 793.635578][ T30] RDX: 0000000000000003 RSI: 00007fa690c2f270 RDI: 0000000000000005 [ 793.643996][ T30] RBP: 00007fa6909e6983 R08: 0000000000000000 R09: 00007fa690c2f077 [ 793.652294][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 793.660289][ T30] R13: 00007fa690c2f270 R14: 00007fa691634620 R15: 0000000000000003 [ 793.668812][ T30] [ 793.671861][ T30] INFO: task syz-executor:14564 blocked for more than 145 seconds. [ 793.679814][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 793.687574][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 793.696290][ T30] task:syz-executor state:D stack:21728 pid:14564 tgid:14564 ppid:1 flags:0x00004006 [ 793.707717][ T30] Call Trace: [ 793.711025][ T30] [ 793.714186][ T30] __schedule+0x1800/0x4a60 [ 793.718739][ T30] ? __pfx___schedule+0x10/0x10 [ 793.723741][ T30] ? __pfx_lock_release+0x10/0x10 [ 793.728799][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 793.735507][ T30] ? kasan_check_range+0xb/0x290 [ 793.740493][ T30] ? schedule+0x90/0x320 [ 793.745112][ T30] schedule+0x14b/0x320 [ 793.749384][ T30] schedule_preempt_disabled+0x13/0x30 [ 793.755405][ T30] __mutex_lock+0x6a4/0xd70 [ 793.759945][ T30] ? __mutex_lock+0x527/0xd70 [ 793.765145][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 793.770278][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 793.776075][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 793.781041][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 793.786669][ T30] ? __lock_acquire+0x137a/0x2040 [ 793.791716][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.800619][ T30] netlink_rcv_skb+0x1e3/0x430 [ 793.807227][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 793.813383][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 793.818729][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 793.824505][ T30] netlink_unicast+0x7f0/0x990 [ 793.829299][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 793.835068][ T30] ? __virt_addr_valid+0x183/0x530 [ 793.840212][ T30] ? __check_object_size+0x49c/0x900 [ 793.846913][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 793.852359][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 793.857170][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.863056][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.869067][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 793.874452][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 793.879765][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 793.885753][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 793.891058][ T30] __sock_sendmsg+0x221/0x270 [ 793.896193][ T30] __sys_sendto+0x3a4/0x4f0 [ 793.900727][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 793.906302][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 793.913648][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 793.920019][ T30] __x64_sys_sendto+0xde/0x100 [ 793.925365][ T30] do_syscall_64+0xf3/0x230 [ 793.929894][ T30] ? clear_bhb_loop+0x35/0x90 [ 793.935022][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.940959][ T30] RIP: 0033:0x7fc02437978c [ 793.945972][ T30] RSP: 002b:00007fc02462f670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 793.955887][ T30] RAX: ffffffffffffffda RBX: 00007fc025034620 RCX: 00007fc02437978c [ 793.964368][ T30] RDX: 0000000000000050 RSI: 00007fc025034670 RDI: 0000000000000003 [ 793.972642][ T30] RBP: 0000000000000000 R08: 00007fc02462f6c4 R09: 000000000000000c [ 793.980626][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 793.996993][ T30] R13: 0000000000000000 R14: 00007fc025034670 R15: 0000000000000000 [ 794.008946][ T30] [ 794.013631][ T30] INFO: task syz-executor:14635 blocked for more than 145 seconds. [ 794.021565][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 794.029684][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.041648][ T30] task:syz-executor state:D stack:26048 pid:14635 tgid:14635 ppid:1 flags:0x00004006 [ 794.052114][ T30] Call Trace: [ 794.055412][ T30] [ 794.058355][ T30] __schedule+0x1800/0x4a60 [ 794.063845][ T30] ? __pfx___schedule+0x10/0x10 [ 794.068716][ T30] ? __pfx_lock_release+0x10/0x10 [ 794.073867][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 794.079354][ T30] ? schedule+0x90/0x320 [ 794.083652][ T30] schedule+0x14b/0x320 [ 794.087821][ T30] schedule_preempt_disabled+0x13/0x30 [ 794.093407][ T30] __mutex_lock+0x6a4/0xd70 [ 794.097938][ T30] ? __mutex_lock+0x527/0xd70 [ 794.102772][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 794.107995][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 794.114441][ T30] ? read_word_at_a_time+0xe/0x20 [ 794.119503][ T30] ? sized_strscpy+0x8d/0x220 [ 794.124712][ T30] ip_tunnel_init_net+0x20e/0x710 [ 794.129775][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 794.135783][ T30] ops_init+0x359/0x610 [ 794.139971][ T30] setup_net+0x515/0xca0 [ 794.144751][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 794.150324][ T30] ? __pfx_setup_net+0x10/0x10 [ 794.155589][ T30] copy_net_ns+0x4e2/0x7b0 [ 794.160037][ T30] create_new_namespaces+0x425/0x7b0 [ 794.165759][ T30] ? bpf_lsm_capable+0x9/0x10 [ 794.170456][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 794.177530][ T30] ksys_unshare+0x619/0xc10 [ 794.182334][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 794.187385][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 794.193859][ T30] ? do_syscall_64+0x100/0x230 [ 794.198665][ T30] __x64_sys_unshare+0x38/0x40 [ 794.203950][ T30] do_syscall_64+0xf3/0x230 [ 794.208477][ T30] ? clear_bhb_loop+0x35/0x90 [ 794.221792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.229486][ T30] RIP: 0033:0x7f928e979157 [ 794.234315][ T30] RSP: 002b:00007f928ec2ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 794.242984][ T30] RAX: ffffffffffffffda RBX: 00007f928e9e7036 RCX: 00007f928e979157 [ 794.250976][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 794.259126][ T30] RBP: 0000000000000000 R08: 00007f928f637d60 R09: 0000000000000000 [ 794.267174][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 794.275790][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 794.284755][ T30] [ 794.287797][ T30] INFO: task syz.0.1926:14637 blocked for more than 145 seconds. [ 794.295730][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 794.303415][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.312190][ T30] task:syz.0.1926 state:D stack:25744 pid:14637 tgid:14636 ppid:9987 flags:0x00000004 [ 794.327156][ T30] Call Trace: [ 794.330472][ T30] [ 794.338011][ T30] __schedule+0x1800/0x4a60 [ 794.342714][ T30] ? __pfx___schedule+0x10/0x10 [ 794.347601][ T30] ? __pfx_lock_release+0x10/0x10 [ 794.353479][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 794.359188][ T30] ? schedule+0x90/0x320 [ 794.363520][ T30] schedule+0x14b/0x320 [ 794.367690][ T30] schedule_preempt_disabled+0x13/0x30 [ 794.373258][ T30] __mutex_lock+0x6a4/0xd70 [ 794.377787][ T30] ? __mutex_lock+0x527/0xd70 [ 794.382516][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 794.387653][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 794.393673][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 794.398635][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 794.403824][ T30] ? __lock_acquire+0x137a/0x2040 [ 794.408936][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.414661][ T30] netlink_rcv_skb+0x1e3/0x430 [ 794.420936][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 794.426483][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.431825][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 794.437489][ T30] netlink_unicast+0x7f0/0x990 [ 794.442875][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 794.448186][ T30] ? __virt_addr_valid+0x183/0x530 [ 794.453919][ T30] ? __check_object_size+0x49c/0x900 [ 794.459226][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 794.464813][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 794.469636][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.475449][ T30] ? __import_iovec+0x536/0x820 [ 794.480320][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 794.485665][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 794.490974][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 794.496955][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.503411][ T30] __sock_sendmsg+0x221/0x270 [ 794.508125][ T30] ____sys_sendmsg+0x525/0x7d0 [ 794.523228][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.528569][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 794.533655][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 794.538836][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 794.545619][ T30] ? do_syscall_64+0x100/0x230 [ 794.550416][ T30] ? do_syscall_64+0xb6/0x230 [ 794.555607][ T30] do_syscall_64+0xf3/0x230 [ 794.560139][ T30] ? clear_bhb_loop+0x35/0x90 [ 794.565365][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.571285][ T30] RIP: 0033:0x7f1f55f779f9 [ 794.576113][ T30] RSP: 002b:00007f1f56cfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.584947][ T30] RAX: ffffffffffffffda RBX: 00007f1f56105f80 RCX: 00007f1f55f779f9 [ 794.593428][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 794.601417][ T30] RBP: 00007f1f55fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 794.609438][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.618502][ T30] R13: 0000000000000000 R14: 00007f1f56105f80 R15: 00007f1f5622fa38 [ 794.627834][ T30] [ 794.631051][ T30] INFO: task syz-executor:14641 blocked for more than 146 seconds. [ 794.639078][ T30] Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 794.646784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 794.655835][ T30] task:syz-executor state:D stack:26816 pid:14641 tgid:14641 ppid:1 flags:0x00004004 [ 794.666325][ T30] Call Trace: [ 794.669614][ T30] [ 794.673100][ T30] __schedule+0x1800/0x4a60 [ 794.677659][ T30] ? __pfx___schedule+0x10/0x10 [ 794.682990][ T30] ? __pfx_lock_release+0x10/0x10 [ 794.688045][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 794.694156][ T30] ? schedule+0x90/0x320 [ 794.698427][ T30] schedule+0x14b/0x320 [ 794.703036][ T30] schedule_preempt_disabled+0x13/0x30 [ 794.708520][ T30] __mutex_lock+0x6a4/0xd70 [ 794.713502][ T30] ? __mutex_lock+0x527/0xd70 [ 794.718210][ T30] ? register_nexthop_notifier+0x84/0x290 [ 794.725303][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 794.731232][ T30] ? __asan_memset+0x23/0x50 [ 794.736348][ T30] register_nexthop_notifier+0x84/0x290 [ 794.742205][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 794.748046][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 794.754716][ T30] ? __asan_memset+0x23/0x50 [ 794.759336][ T30] ops_init+0x359/0x610 [ 794.764266][ T30] setup_net+0x515/0xca0 [ 794.768539][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 794.774595][ T30] ? __pfx_setup_net+0x10/0x10 [ 794.779387][ T30] copy_net_ns+0x4e2/0x7b0 [ 794.784239][ T30] create_new_namespaces+0x425/0x7b0 [ 794.789560][ T30] ? bpf_lsm_capable+0x9/0x10 [ 794.794804][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 794.800555][ T30] ksys_unshare+0x619/0xc10 [ 794.805561][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 794.810617][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 794.820800][ T30] ? do_syscall_64+0x100/0x230 [ 794.825907][ T30] __x64_sys_unshare+0x38/0x40 [ 794.831543][ T30] do_syscall_64+0xf3/0x230 [ 794.841502][ T30] ? clear_bhb_loop+0x35/0x90 [ 794.850028][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.860873][ T30] RIP: 0033:0x7f01d1179157 [ 794.869226][ T30] RSP: 002b:00007f01d142ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 794.882033][ T30] RAX: ffffffffffffffda RBX: 00007f01d11e7036 RCX: 00007f01d1179157 [ 794.890031][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 794.906218][ T30] RBP: 0000000000000000 R08: 00007f01d1e37d60 R09: 0000000000000000 [ 794.918382][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 794.926755][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 794.936069][ T30] [ 794.939110][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 794.948985][ T30] [ 794.948985][ T30] Showing all locks held in the system: [ 794.956818][ T30] 4 locks held by kworker/u8:0/11: [ 794.961972][ T30] 1 lock held by khungtaskd/30: [ 794.966826][ T30] #0: ffffffff8e9382a0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 794.976830][ T30] 3 locks held by kworker/u8:5/1102: [ 794.982198][ T30] #0: ffff88802aa32148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 794.994235][ T30] #1: ffffc9000436fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 795.007144][ T30] #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 795.016667][ T30] 2 locks held by dhcpcd/4898: [ 795.021430][ T30] #0: ffffffff8fc66748 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x664/0x8e0 [ 795.030842][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0x112/0x9d0 [ 795.041340][ T30] 2 locks held by getty/4983: [ 795.046469][ T30] #0: ffff88802b44e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 795.057046][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 795.067244][ T30] 4 locks held by udevd/5238: [ 795.072325][ T30] #0: ffff8880127249e0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 795.081275][ T30] #1: ffff88807b593888 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 795.090779][ T30] #2: ffff88803023ed28 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 795.100311][ T30] #3: ffff88805ea050e8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 795.109369][ T30] 3 locks held by kworker/0:7/7567: [ 795.114692][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 795.125803][ T30] #1: ffffc9000461fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 795.137980][ T30] #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 795.147055][ T30] 3 locks held by kworker/0:9/8296: [ 795.152411][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 795.164663][ T30] #1: ffffc90003cc7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 795.176069][ T30] #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 795.186760][ T30] 3 locks held by kworker/1:9/8297: [ 795.192353][ T30] #0: ffff888015881948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 795.204806][ T30] #1: ffffc90003ca7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 795.216352][ T30] #2: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 795.226465][ T30] 1 lock held by syz-executor/14452: [ 795.231757][ T30] #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 795.243301][ T30] 7 locks held by syz-executor/14513: [ 795.248693][ T30] #0: ffff888030728420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 795.257725][ T30] #1: ffff88801dae7088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 795.267871][ T30] #2: ffff888022b303c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 795.278922][ T30] #3: ffffffff8f51e948 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 795.289427][ T30] #4: ffff88805ea050e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 795.298729][ T30] #5: ffff888022bb0250 (&devlink->lock_key#45){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 795.309415][ T30] #6: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.327975][ T30] 1 lock held by syz-executor/14564: [ 795.335762][ T30] #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 795.346802][ T30] 2 locks held by syz-executor/14635: [ 795.352366][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.361802][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x710 [ 795.371349][ T30] 1 lock held by syz.0.1926/14637: [ 795.376563][ T30] #0: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 795.386966][ T30] 2 locks held by syz-executor/14641: [ 795.392512][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.402032][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.412316][ T30] 2 locks held by syz-executor/14645: [ 795.417696][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.427552][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.437959][ T30] 2 locks held by syz-executor/14648: [ 795.445446][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.455269][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.465636][ T30] 2 locks held by syz-executor/14651: [ 795.471026][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.480878][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.491049][ T30] 2 locks held by syz-executor/14654: [ 795.497669][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.507201][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.517561][ T30] 2 locks held by syz-executor/14657: [ 795.523024][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.532617][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.551998][ T30] 2 locks held by syz-executor/14660: [ 795.558202][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.585009][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.601938][ T30] 2 locks held by syz-executor/14664: [ 795.607333][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.625621][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.640810][ T30] 2 locks held by syz-executor/14667: [ 795.649079][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.664982][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.679926][ T30] 2 locks held by syz-executor/14670: [ 795.689241][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.698944][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.709175][ T30] 2 locks held by syz-executor/14673: [ 795.714922][ T30] #0: ffffffff8fc74f90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 795.725452][ T30] #1: ffffffff8fc81b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 795.735639][ T30] [ 795.737980][ T30] ============================================= [ 795.737980][ T30] [ 795.746471][ T30] NMI backtrace for cpu 1 [ 795.750848][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 795.761451][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 795.771513][ T30] Call Trace: [ 795.774812][ T30] [ 795.777732][ T30] dump_stack_lvl+0x241/0x360 [ 795.782413][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.787605][ T30] ? __pfx__printk+0x10/0x10 [ 795.792187][ T30] ? vprintk_emit+0x631/0x770 [ 795.796854][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 795.801872][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 795.806806][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 795.812254][ T30] ? _printk+0xd5/0x120 [ 795.816398][ T30] ? __pfx__printk+0x10/0x10 [ 795.820977][ T30] ? __wake_up_klogd+0xcc/0x110 [ 795.825819][ T30] ? __pfx__printk+0x10/0x10 [ 795.830401][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 795.835417][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 795.841395][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 795.847365][ T30] watchdog+0xfee/0x1030 [ 795.851601][ T30] ? watchdog+0x1ea/0x1030 [ 795.856017][ T30] ? __pfx_watchdog+0x10/0x10 [ 795.860689][ T30] kthread+0x2f0/0x390 [ 795.864770][ T30] ? __pfx_watchdog+0x10/0x10 [ 795.869440][ T30] ? __pfx_kthread+0x10/0x10 [ 795.874025][ T30] ret_from_fork+0x4b/0x80 [ 795.878440][ T30] ? __pfx_kthread+0x10/0x10 [ 795.883025][ T30] ret_from_fork_asm+0x1a/0x30 [ 795.887788][ T30] [ 795.891548][ T30] Sending NMI from CPU 1 to CPUs 0: [ 795.897207][ C0] NMI backtrace for cpu 0 [ 795.897221][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 795.897240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 795.897251][ C0] Workqueue: bat_events batadv_nc_worker [ 795.897274][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 795.897297][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 3c 03 81 00 48 c7 c3 78 7c 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 22 8b 03 65 ff 0d 71 25 8a 7e 74 10 83 e0 04 c1 e8 02 5b [ 795.897311][ C0] RSP: 0018:ffffc900001179c0 EFLAGS: 00000a02 [ 795.897324][ C0] RAX: 0000000000000000 RBX: ffff8880b9237c78 RCX: ffffffff816fbbe4 [ 795.897337][ C0] RDX: 0000000000000000 RSI: ffffffff8c605f20 RDI: ffffffff8c605ee0 [ 795.897349][ C0] RBP: ffffc90000117b40 R08: ffffffff9017c5ef R09: 1ffffffff202f8bd [ 795.897361][ C0] R10: dffffc0000000000 R11: fffffbfff202f8be R12: 1ffff92000022f44 [ 795.897373][ C0] R13: dffffc0000000000 R14: ffffffff8e293a40 R15: dffffc0000000000 [ 795.897386][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 795.897400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.897412][ C0] CR2: 000055fdf28a5058 CR3: 000000000e734000 CR4: 00000000003506f0 [ 795.897427][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.897437][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.897447][ C0] Call Trace: [ 795.897454][ C0] [ 795.897461][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 795.897479][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 795.897501][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 795.897517][ C0] ? nmi_handle+0x2a/0x5a0 [ 795.897541][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 795.897559][ C0] ? nmi_handle+0x14f/0x5a0 [ 795.897574][ C0] ? nmi_handle+0x2a/0x5a0 [ 795.897590][ C0] ? rcu_is_watching+0x5a/0xb0 [ 795.897609][ C0] ? default_do_nmi+0x63/0x160 [ 795.897627][ C0] ? exc_nmi+0x123/0x1f0 [ 795.897643][ C0] ? end_repeat_nmi+0xf/0x53 [ 795.897663][ C0] ? lock_acquire+0xd4/0x550 [ 795.897682][ C0] ? rcu_is_watching+0x5a/0xb0 [ 795.897702][ C0] ? rcu_is_watching+0x5a/0xb0 [ 795.897723][ C0] ? rcu_is_watching+0x5a/0xb0 [ 795.897743][ C0] [ 795.897749][ C0] [ 795.897756][ C0] lock_acquire+0xe3/0x550 [ 795.897778][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 795.897799][ C0] ? batadv_nc_worker+0xcb/0x610 [ 795.897817][ C0] ? __pfx_lock_release+0x10/0x10 [ 795.897837][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 795.897861][ C0] batadv_nc_worker+0xec/0x610 [ 795.897879][ C0] ? batadv_nc_worker+0xcb/0x610 [ 795.897896][ C0] ? batadv_nc_worker+0xcb/0x610 [ 795.897915][ C0] ? process_scheduled_works+0x945/0x1830 [ 795.897933][ C0] process_scheduled_works+0xa2c/0x1830 [ 795.897966][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 795.897994][ C0] ? assign_work+0x364/0x3d0 [ 795.898015][ C0] worker_thread+0x86d/0xd40 [ 795.898041][ C0] ? __kthread_parkme+0x169/0x1d0 [ 795.898062][ C0] ? __pfx_worker_thread+0x10/0x10 [ 795.898081][ C0] kthread+0x2f0/0x390 [ 795.898101][ C0] ? __pfx_worker_thread+0x10/0x10 [ 795.898119][ C0] ? __pfx_kthread+0x10/0x10 [ 795.898140][ C0] ret_from_fork+0x4b/0x80 [ 795.898160][ C0] ? __pfx_kthread+0x10/0x10 [ 795.898180][ C0] ret_from_fork_asm+0x1a/0x30 [ 795.898207][ C0] [ 795.972193][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 795.972211][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc2-syzkaller-00042-gcf6d429eb656 #0 [ 795.972232][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 795.972244][ T30] Call Trace: [ 795.972252][ T30] [ 795.972259][ T30] dump_stack_lvl+0x241/0x360 [ 795.972291][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.972315][ T30] ? __pfx__printk+0x10/0x10 [ 795.972335][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 795.972364][ T30] ? vscnprintf+0x5d/0x90 [ 795.972384][ T30] panic+0x349/0x860 [ 795.972407][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 795.972428][ T30] ? __pfx_panic+0x10/0x10 [ 795.972447][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 795.972468][ T30] ? __irq_work_queue_local+0x137/0x410 [ 795.972491][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 795.972511][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 795.972529][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 795.972551][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 795.972572][ T30] watchdog+0x102d/0x1030 [ 795.972597][ T30] ? watchdog+0x1ea/0x1030 [ 795.972624][ T30] ? __pfx_watchdog+0x10/0x10 [ 795.972646][ T30] kthread+0x2f0/0x390 [ 795.972670][ T30] ? __pfx_watchdog+0x10/0x10 [ 795.972691][ T30] ? __pfx_kthread+0x10/0x10 [ 795.972716][ T30] ret_from_fork+0x4b/0x80 [ 795.972737][ T30] ? __pfx_kthread+0x10/0x10 [ 795.972761][ T30] ret_from_fork_asm+0x1a/0x30 [ 795.972795][ T30] [ 795.980087][ T30] Kernel Offset: disabled [ 796.387375][ T30] Rebooting in 86400 seconds..