last executing test programs: 33.300671784s ago: executing program 0 (id=3167): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r2 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@ip_tos_u8={{0xd, 0xff97, 0x1, 0x2}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x28}}], 0x1, 0x0) 33.14663147s ago: executing program 0 (id=3168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x3) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x67, 0x4, 0x2, 0x0, 0x1000, 0x8000, 0xe}, 0x1c) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f00000014c0)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r8, 0x0) splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048004000100090000000c00038005000100d30000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) 32.869425245s ago: executing program 0 (id=3172): syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000740)={{}, {@host}, 0x400, "16d0503e69c656d1d3de4388539aab6bfc3f915349cb03d9a444d485a43277c592ef2fd14e471d9af71a4ccc30f16bda013924c0f56b7162873cae7b0af3d2d1245ad547b39c5d259bde25cbdc9f112fa592bde41b5b9da952489667ca4df48308e876d73e968a440277f518ea7d4600c33f6331834a419907886bc29535a91bdd762e02ee8ab167a0aad9fe4c79e1e2c8cc99b6a799cf6aa36e1205eaea31b687f06f4a4b4610a5b6417fba0244604349e706e88669645b29d9a185c6d67f370294a3d5255bb9e5f5dc11670f75b73a97c5272a77c1dc8633ecf628bac105e632ccdf1cc560b8fb3020f5a11027a2bcbe80670083db2ab6599a5d2653c938084170a91c85c307ff3d928b49e8865b2ab051df0f4638053cfddad55100584d667ba17e0864244bf72694e60c474e6cd2cd1e090f9b2c65b74c26a56b733625c5e256fc24818476e5f92a79a70dd0f635265161e8bf91cc75c4990aed542f4e8f0e87bdeb505fcdd545b3461bd423ee7498465e1c9ff1df5e1fd62949098a92855ea4db07cfe0e9584b6e107976405997622534f51f1c7fe2966c092e2e5a3ef23a40adb38d25ad58fd97b2d92eb9680c966e40c6c07159b53ead00c445f65e9b20e9fdc419186c962370a7f232343a3d32aa3934f2b221ca6f49ac2e1cd44ddd166be68f4da8c94e0d77181a6ebe96a957e8fcc15fb566bf61c19ae0bcce7ef1b80d63b8a64a81d02d5ffcd1baa5deb88998215265c6603ef9dd233ed33336d28c85a0e719e5374efe295321663105bad12513abc5738a5a6e1eb9281298fe9c4c4797105e7298ff7933e853193aa691c27a134c255e9f1b9d9c1628a9cc400d05768fcbaf1563a05408225e87ff9a4acf9fdb06b75438721a1a38ea4d4be88063c717ad64bd8cd6786ca35a3a756494be8365d17341437094faea1a6d49117df1376ce7917d411bc0bb37e6ce408ae384f824c90e2acfffa193fe7c27233c71f40d467e5c4bb65c2d34c6eb418cf622da831b800f5bb1731e8f323d27db5018b461ad28bfa319c1754847f9a8feb716a9b0218d281c136dbc1f7d0305a0741e9ac73247076f5b1d01e17b9c241d12c7d8bff6ea210ba5aba9cfe5c3a73adde14c2d6d47ad1fab561b0a4533b48b6ece97b4af18a9f56c6b3bf4520de26b183786b141d80c7d6fba7a63c0ca4fb555bd1cb3471bec8829f199d7593c1d5143e8016c9699102c5edcad28e6ffae05f7f05ee486d603b452617b295a22b7d56515ec4da73f2b024b5f0600268038ba1eb59f6dd7b3d9c974d8fd1dd71790603a46eabba8e656e9273c9b0ea1f7eb637e38ce53202c795ef306b5cba88c151ccf986b41e37528dc0014b3e7afd2a01597d4b75329e5703ca9d532567dd076d41155c7b68beb61f8b3fde22e08a87d8173b23ee856cd453e86af2e7f777654e6f0f2"}, 0x418}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x2, {0x0, 0x1, 0x0, 0x0, 0xfffffffd}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00203c0020010000000000000000000000000000ff02000000000000000000000000000100010000000000009b"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x8) openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 32.468448297s ago: executing program 0 (id=3174): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x44, &(0x7f00000001c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000004c0)={0x18, &(0x7f0000000200)={0x40, 0x22, 0x52, {0x52, 0x11, "a1627a619c028adef9a256dd29a0084f747b879e2ce64a172850125e9c826b96dd5b02411925044f666a6a6b8d900c2fc67b2279c97a519f94e212b041e3adf29f54974c021402c9e60cdb8d2252bacd"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000380)={0x0, 0xf, 0xbe, {0x5, 0xf, 0xbe, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x7, 0xf00, 0x10, [0xc03f, 0xff0000, 0xc000, 0x30, 0x3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x8, 0x0, 0x7, 0xfd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x5, 0x7f, 0x9c5}, @generic={0x84, 0x10, 0xa, "849fce650ab01870a44316ea3e7e80bb67abaec1edd51b4fcf3c6490a73919feaa2598318c587501d6e6aa0f69d3c1a8e80e92a3de77bc77c55fe915ce0c7a833ce539b20bba218d5cc6fa9c4c102e854d510c8f48c854ea5070edf9fe1856acedbb7ff3a3c1d222b851b1c9d798d5481b2e5199897c4260c70d95c1ced9adf712"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x40, 0xd, "a49d4d0e", "584d4e89"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x18, 0x5, 0x6, 0xb6, 0xe, 0x200}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000540)={0x0, 0x5, 0xa8, "fc856a86fa1478f9b7cb85406a10b4809bed7c71b9aaa19c540aba518eae4efaa9b319d31bb3cdc3a1b957330fe0f4547fe0aa2b5c6958920169be750bbd328f3bba1cfa2df4dd8caf544d86dbdc6083641c8dcadebb54fe680135eef004a2ee281518f43c2ed71e5f44c01930979fa23f4bf4df9b28f7f9b5a26521fcb73f381a95dd4f03a48ec34aea48bc2bdb73c19f966fcc13e44d3c5207b59ac3b94794053b33bfbbdb90c2"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xc5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x2, 0x20, [0xf780]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "7885"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000840)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="e4038185b518"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "2dbf"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x91}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x81}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xa}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0x7}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000500)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x5f, &(0x7f0000000100)=""/95, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0xa0000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, 0x0, 0x0, 0x4040000) userfaultfd(0x801) 31.52229375s ago: executing program 0 (id=3181): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x31, 0x57, 0xda, 0x10, 0x2013, 0x24f, 0xa0b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xad, 0x0, 0x2, 0x3d, 0x81, 0xb4, 0x0, [], [{{0x9, 0x5, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2}}]}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001811000014c2dc036311640c0029164a0a698cb318a9d2761ed5f0a9436f0b8c1a3f9e828405150e78f7ae86cd676e5f5ec7bc0f6e4838e716ea7f000000000000d05c307ba54c4668181c1b4874b418dbf876935cf9bce68766"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560000005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000f7000000000000000000002c"], 0xfdef) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x1205076, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000002d00)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000700)="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", 0x1000}], 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="ac000000ff00000001000080dee07794aaabd711b3fda6b725834d4f8d58cd1824103cdfa1f26a1e20f790c21c9455bea774436e0842c17f1f529ec6db8ec7ad3e5fb548cd52fbc8a6da38093ee1c31eda92f72bc5a612d2e7e3ef4e8e6389e1a49738cb74b2ab5c5c81520a8f7b5d153323f39d2189cf963dd82b6d480024fe712579cfc2350ff484becd80caa392996ced21274238ef987d3940663b7dd6e20ed83fe719130d8d33000000f80000000600000001000000eeb3d99466e8658da991e972eab0298ecbb05a74794e1ad8311056f1e24eac645b17b519a5b4d826a0d7ddf84a45c2d594840ef9174d6885e201d118248e4bd75b19b0bd3b3eaa8f8d37cd7e2a3e09fdd4fad696032def1a9e1d6ea9f27f3a1ad74141b46608de5ba28041696924068ab2622556934469188ec363a07b8a4d332be57e119cafd330241addbd8d035ba82be471162372261c59ae99328374aba23eb23cf32e5a90fcc0e9ab259bb74f8259e86f49bd112426579f7ff7b62f059aa17dadddd5a2b40a5066ce0e25254e8a32ec6ae98555747432b2e3db369b016a27e3cebfd1fa8e325cac0000"], 0x1a4}}, {{&(0x7f0000000380)=@phonet={0x23, 0x8, 0x2, 0x7}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000400)="cd95123a761d65518db8cae9c5275d86df66c4e449d972697c1b8ab83fedc3d8bb981742c4296c57565234718e24402a2c2a5156ac3091e8115aed719408b7862c8bfd08d796913f89d7e7b98e52064006df6d7caa5fcdddb714548d66114cc4d991ffcf84697db42c804640ee736563a477e0870a4c25e598", 0x79}, {&(0x7f00000004c0)="ebe3d4bb0795b307883089e6b543dea1716c9ff2c912f154f44d854528fa99da148329be1c105a1207e4925c658c1315a08e25ce32bcafefca12e1262edba16040cf468f95c8e53e266f405f73b3af6d981bc66ce43b93e7ccfdcd337627e4bb8cb59969bd9375adea08d8f43b4fc07a901a95514a3779df9765ac339870", 0x7e}], 0x2}}, {{&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="72019b4c444248bd96d39fb85c1c3427fef94a512400f0947b86b19dd6c41bafb7b0123da77dcd263648e83ad721f6c60bfa1162526e6340ef2a6ad14f4cd8c454a2e1f76d459e0b960ab14e58af223e2c0acbf02ebab801e293c55a8649fec677173ada9089ec7349d38455e63cd73822", 0x71}, {&(0x7f0000001940)="bebc2cf92cbe254c8570db38c830a6a94f8ca4ac1fd5990fc8b714f7c600b8764ee2c3af8f32f814d360c81804528d269317e7f11534d4adfa82fbbc0820c840a573fe6355d2f03dc8af1d0ac965d5d141f7ed3cd16ad859ee371750e92269f997cab9a5847bd1fd579004a24890104295a1048cd15c2ff44de9e9f3fd05c5388ffd736d0df1f6a8f3811c630b04325a874481917d8005adbd74f1f527a20735eec1f025933987a908c2ea424c2447d583106bd91ad0fb26d089a8f7e552b27c648b4c8cf830d61a9684", 0xca}, {&(0x7f0000001a40)="b27c5e03000b5ce366b04d6c37dd35c8681caf8d80801528fb5c3f062298e8668a91aa57f29e01da55fc417611023db33beff673a7cbb09cb52adaa81aae665c63674df40f13d92abea736a673e1704180b7d2354d957b43b01523e6b070a349cc40bf55bb5e6d0e5c0faf2927ed2e29501666b892e76b5a93", 0x79}, {&(0x7f0000000640)="41c2e9306d836db785fa08b07bb8883b082d08ee9e20dd66f5ff756c5b508d9dccd989bc8815330b891eaef209c1", 0x2e}], 0x4, &(0x7f0000001b00)=[{0x70, 0x104, 0xe, "b9948161fe8a8123d3f8f43eed3e7fef18258395e25d325294c8226c83a700bee079616de18911ee0eec7082a9bc23606cfed0ed7d77f7e68e0469f9be55e2f2c43675910339117ba3fcb4de6ae4f1a4636f8bd4f59d79bf5129714ac17a3c6acc85be6a"}, {0x100c, 0x0, 0xfffffff9, "17e9c7b3b85b3a4997e1b1dbb6aa47871a878cf3d30692c0b9eec578977440cd02f885f001fc9fe1b9606dc5b9bc575002049490f6827f38351323772418d3582b86f5fe6dd208ef9cad14bd6f790ebc4101d3b796f927ee6546642ba7f0a506303edfe9d03c0679e52650384229e47f27c7d5c73df81741f53894486f6a0ba11e4b066a1945b1c39f8975ff6315cf38aee0ea1d9459c0096f6ab399e2453ae0ca404512b3167c1e06aa4a63786cf2a24311702ce0d4a09facc20824d6c010a85412d817ceb078bdcaac7be7a6b62a272e38f45dc48ed58fc507082823a66d8690b211e7121f5e84013ed7b333fa284c78d6e84c57f1a73800a2ac19d86ef2dc3ffb42188afaaf60d0f23f98a422e1fad1507170bc7b457c96bb28875fc71621a1eb82b2c35dae89a60ca042dd22c1ccc532cfa086864c6a5b6bddccc9bac7b33368b4e2fc2d5fb4009e2fd204a598e98027e23405906bf055273fbe1461180f9797fe152ea7fb65a2a1355b9e4ebc56a2e669ba92ebea6cd6498d9e2c523cbdaae56e0b6eb1da888376ef677dbdff86e4ce602951c9b5540d6bca35541e743d470bf09a47bc47ee33c0811951752ca53b5d2a4540f5d9664e742db71bfe67fb52bec9f868e901a98e4be2e58bcbbf8615b06266b49a89027a52c1aef330d5d81a37f9ee55b5f9eeb53756367b125a79f8f56ba668741de8062412cfa871e766cc67ee0dd0ecd3046a5336743c45f19adcfddbbb79f8db3972be012b0826cc9e1e32bd6f41a9f8bc747c4a2df059866c0493afb8285460e79a21af9df6bc8da5be6a963e2b5b7beae41abd063d137b42f09e353aa067d6afec635490c3dae3afd248db9b8f3fda03d20602f5695ce83297238ad21bc068b553681acccfdf1cbe4e28d66bb631cca3cd440f475a84a23fc13f76658eedea109ba6ee147f51152b0cdacdcdfc5ab95202212939af63dbb63e1ac287936eabad3598eb2809f77b5ce41a46fb81466fbf8d9fac6fe0ff7e8ec2288507f1802bf7e22293524f966cddd11c1b7cab665e288cef5124c4c26883b904558e4715bf695868d1387bb5f324ba3d071fbde592249350888b3b9b142a783c93cfe2718c80c773770c344cee46acb514a96bf2b5a5e5eda5a7e1334dfad6129081fe1739bec37da46dd35ddf171e167bc2d887d9612671d5e2971e08067ca6b7ee30d3937c8c9034967530f0bb3d33b7c03450c7a6a22cfbf8b3a4d4b50043b89716d4bc70bffb8e61bd7f7e8a1d19d54e2fc94a0fc1f3aaf7ef90abe2f01ec85df1039c270faa10d8022238d5a776217393eea2eaaecb78f2b9173a9652ef0ed25e674b0e7941df3d9bc772724d3c2ff02f8fd34d4e6af38a77c54d1e434dd5d9e66cb345091a3ed9c11dbd28743134f4b9cc08ae6ed289110f4f1c51ac31456d4661bb6b945725a6433800af8ea99f9c4a8f04f329da8122aea75b2f82e4834715964ce199c008a489a29767e94135fcb9e31a1bcba95802d7f4d304f70f1cc944f5f52ff8a69b99d7b70b6732cf00e636f805eef61ab320802ed7d70c8abce436f670e08638417e547f85d46d6bb487da03d8fecfc30570db66caccb819ee31b8108a3964a357041e8042f3e7bdb2fa410f9131ec09287eba43eb821ecdd2fea28fb1e4307191a1b37c366a4c875df4b86ced8042ccb14eec7e642974dcb1c2da6a9e8f4d025c3ccd9dc70cde2e8b9d12386b1d157b37499a84fa0995d70e4bb1974427b66836c36a93839c461ab98b0bb30f80891862985e645c7f67ea97c2e1a3dca4545ce60962247a292b7aff42c7ffb3be8dbd90d4091eee3eca5131320bf53c398b15028b1a2904404ac9df058e8456d9814530e8a307315a8f6f49277ce4dbfd3d5efca89844d1a420128bc730a31d811f4acb605c403ac56c885d48fbf6615e57c7532ed57453911513aa79c9c91a03310fc37d1a69aafd11013a96f967849f7147d039bdcaad7681cdc25a246db56f270a4b39386c7a1905773eb1127acd55af9176fcdc9a5a0a989990ab857cf1d756065429bfbc83b31003758dc84ce979117662267edc39a15c2b9de613a21040bb49fb0fe1a252c74f97c5a272cfa92a18a3ddf4c8180f18236b253e14fba6061b60602653157674ba0f77aa8ea7db1f2b9af064ba973903f6895d2ab1838e8b6fcd4fa0209cbbcd193a4d5daa120d2dff6dfb2c9c7b913c7bfa4260c2df438aa47fa07a516748488e1fa2c67141c95ff4bf1ff2056030a58bc46303f3849249cfc76f0bf8b5967ed66680d129eb0fb2d844f00f985cf0c96f0b25a8d700e98b38d8ea01d631a3d676985bbf1016aab3c439b34d20b1d0933f46fdf37a14824f49ca4aa82d90cea4869d96074f199dae16c3a323f043d4ade9065d75a91769c46f63b1f72bb3726795557dc7a1f55d770f9885a9a84490f01ec48b5091a04ab93d16e73e8d49a8f1bb4b5d55f69ddb75e4124e198f24953985029107b20401953341229837b49a2de6f66ac8cdc6e0d777ac0114a28a7fc3fc180430177b281debdce9dce21fc0aee0a74b38944f13db8dcc091c3de8a999fba5d86096152f23a936b695b1968526148a45f3f70606f9f3db420a0ed4038f6247abad7981c2537756587d5661df9890228644a6d028e7a5b6d0d23072dfc2f8d5a847d1dda99c706919fa2d879aba1aa03e319e133a75a03b64042ada72ee9f559dea4366ef2cf9f4225654510b6002886e79d85511c0ae4573e2ecff35eeb71165c6aa6d9abcf8e123ff642a094036474f596c0b75c08bc292876b7f44877a3fcf4790bbf88e86d3159f125241a2f2595b85b81540bc000d50a4083abf2abe7da581c2ac0c027f304c86850a3d9bb1c3b3a3818059b026aa3efe3392bf33c676a1ef45be9d37decbd6c1d0263d90c771a6cc7d00f539934e0368b81bc11dda7d8e5edaa590ce2589dcebbe90b0f830c1474b2f3f3f48c7872b7eadc0afa8923ac85aef9e0d225a530196208449be9edaf1395554a0edee68ba13149065d621ee4d37c8345b98b5f556f16eeb3ff8fc45335259de0ba9096b96b576bec416b45d000010e29edef540b5b56b7222000d421c0e2c0dc6e3eb18e627b785f79724658c61fe6b9fe0871d516b97837d0b5537e38fb2ba1f7301e9f0bb5b54f4784c5cef275a5696ae9975c368b80f55bb20d6ffdf5d3b6fbcc839203551e3e680e9ef4cd5993b6589864ab57d35d7df45c75585f49a5f5b23c522543cca5ab826a10f395dbbeb44c914d7a169b1a5f95588443e42e4a336add064757e0561165c5552c2376dc8b9324f7a8c90b1610d7c6837d385fcb51a74e173a26b0f53c935fbc2c8fa4f31d57389e91f633348ed959efc039620d07684ce5c67a421a04745d7a30a09b57d718bcad8449d32d53e467d6d26e287db10e865bf1194d917853b9dd5a5ca678902b4e0bf01474bfbe5d8a0fa51f80717dc91ba384bc38a6f018548b8f0958fee613d3943963c89971d87baabaa32312752459658f082dd764576e1fd7eb46c5c5690dd1ae31e43f60e0e188b8d8e3b95cb36eafd7aee432afdf510bdc142464c6769b1ea9075875c43e8095769252babfb13cffa2da27d6bc597572d1c3062351c5305e922b867d39aef6df169a56831abcf8ba65f0ce8f62d7494588bcffddd32bc80e50487d1470308b5b0d87a4dad84ba409f1f95cb718bcbfa0eb8953108b899a52dfa28764cee7bf9af664a7aa9e2fb1dc7e753f6f37bb40c3fec4855bd075450a51d37ca5f300eb77d6f8709abb605dacd40fdb8f3f319c40ccc008717aa367241aacf248a10b5fce520d509a7d1c93b0b3eae08fba4781269544096143937e4bbce6b48d42ea05f3af245e930dc4fa5f456abcdef6d3f7507e373678dbf083aed495e6e1d6f42bc1450d89377055ffc73cf5add070cc36c188b9d70d974c1779fb2e561662b0a372dcced500c305382971248fa7ef4684e95b96790ca8b83312165c525fb761bce3bbcceea81a81d3cf5a57e0c5b4be74b5d18c3fbffdf44454f0e171b3eb14d4b9437e80b6d99faf6a01b556bb8c8ecf8018671b5b2370b05f61d546cabb653217f0353f58c2c7ebcf969c4822f72908a320d2135be72f6d3bf3199f9ef4804f94a82d0ec8b6bd7b9c5232398e0bb866179b5dd4fc3dd067f675df15ec6705b509791c8b6a28b8ba914adb923eebf0c77c5e07006df1a5bb25b6f72f7f690437516ff75100d9908934c5ff00b901905446943a8c35bbba627ea9288800b35ebac9cea6a4e787625c74c822376f3580d1762deb861952ce51ffdbb1b56c2e0adbebd1093b54d6a2ef9c3633d5563eb73c327c25cdbb14a6a9618d49cdf1806ae14f8c8eb8ee30f22db21a4433c6b7158184def292b401285372014e8751b6a6472d8eb5359c736ca41bf3e51421833c20b0cd77e3573d64be58716a2b2afa0d2446127b11cb1c6070532999bc032420e803db0658811e03167dfb1d1981d1ee081f3d87553e18efd9c32cb1a8f2664dd5c841a7fad1e48ebbdbd4df56a9ce9703739f4028ad47e1ea59ffc2962ea916a6a092dc3d16f3b30b8a43d2406126ab9bbde0f5a19e8db382399ae656573aa9d83615e54331862e9adb183294f3c9ed182b4f14d537960967368e74b7c7324f9f7799c7281f9aee866711ca7ad87a855f33737e85f325f67f15eacc316fa3bf31612fea7a8ee844fe9c82eac1183044aaeb56dac8cb801f05fedc4a18b4d577cb6f76b30784eeb4a10257f1260abad2e6c692683a030a00ef9067bf1f082dfd67cfe765c2ccd88ae69f4a59fb86e236aefd8f9278a65c658e3f7cf1021a617ef68fdc8b77ca834f7286af8bf96364d11493d0c9ae7312f1d270d5dbe2ce305693d9ab7d3753325d44daa4ae7584174b071946d25ed47183e8cd813b8ad3388e172bdabaab5c1e08314c3f369d4193db2ea6e5c2250fdeef82a2269c05379a2f5ecc8ff45188bdfaff75433a755ad78a4e805314ae09eef1bafd1d51c0a0ac2004b379141113180e0fdd15a4611eccf7591894153140d8458fc132b3f966d93201ad3a83ec87a8e11c260d0a3b9a73eb00916880eb441f7189c49b8393c2b8848b4f15d3008485e28daf17644adc1380418a061baa8ee73b2969248f606b9b9c4904b218719cd16c00bb421d1b4d02f9d948d922baa97fb8171cd32fa03a3e2e692b235d5d9d5d05c70b793af2927552be730e8569a8cca1019cdad342a088e665f396637dbf9b7663e3bf5d2da9748784229ed109babfd67938bfc8d008b0480bc4912a398c393fec6a37bc6674e05cc43996ec75b7bc9e5b6ad5eb49b1628bef09ad3e434302e56d7dcf301de715924e9c43e5226a7897be2c36fc2ceb98bd4280285df69288aadd9fcc640b8f47af93a3f3a1b168f4f257ffafabd31a3573a7ebe4c13c2503e3dfc3a37315100274ffe2a2dc127a3b3b1ab71c535166444c111686bbb27162ba4c920730775dbfc0bfca63eb0aa69ded191c23cf2b8d2bb307eb513e3b356d6d924b239f67dae0eadfcc83481ba7834081eb77737ccefc446b092353a1a2ee7e54a9f79437e07ee909c005fc28ddac52f4a34591ffc81a30b23536160a485d6db3698df0ee0d736fbcf85bd07687c08b06db92de655ba6dc476b8861add2359675b392bb4fb24f6f359b6709d095e1b76f595b39c6d7f3d6dca0b50ea709073f250ae6cf4eae92871fbfc34bb16644e5563359a1fe5e3db97bea098b4864c7bd6262cabc704426afd699628722782671785ecb5747341d6ec"}, {0x80, 0x114, 0x2, "63cfd66f5541a8dae19d10b048685f65fa8baaf4f51317fe70464d0652aa06de181be38e082cc643b34b591732db759f3c7e1138db47438ee74fe12a49dca3eb094ddf88484cbabf0827f038aed3ed4ff2cf6410cf2880a406fdfb488af768ee5b31df0a9fcd5d38a0e97c1146842e02d9b66e"}, {0xcc, 0x101, 0x6, "7907e03585bbac840e094f17386d6d7f8fe5c8999cc647f00cd6d47e3c13648f8ae1b78457015208e330b2d9a5ca348d342e58dd0b89a68e8c4972d9bb8c2e8944dcc3c2ab259eb262eb763ba18cbffee296fc794f87ab623410b5cdca8c90580775b72d5b1dc1abb1335f83b30f6223b9ac5308c327467c39c035bb802dba01b21cc2780e198525ad456ba6dcc9114727ffe6ff2d46db7cbf16cd3e0720445266d8fd0418ded8565196eed682346e75a1e7d56f63312f4c231c73e4c40bd73c"}], 0x11c8}}], 0x3, 0x4000040) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) accept4$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x800) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000140)=0x0) write$cgroup_pid(r6, &(0x7f0000000280)=r7, 0x12) gettid() 30.289301173s ago: executing program 0 (id=3187): unshare(0x24020400) socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080), &(0x7f0000000180)=0x8) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}}) inotify_init1(0x0) openat$proc_capi20(0xffffff9c, &(0x7f0000000280), 0x101100, 0x0) socket(0x2, 0x80805, 0x0) r0 = eventfd2(0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8b2d, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7379833115d6339f"], 0x8) syz_clone3(&(0x7f0000000540)={0x101840000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 29.074666555s ago: executing program 4 (id=3191): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380"], 0x54}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000006340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd608a35f200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x1}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x100) socket$rxrpc(0x21, 0x2, 0xa) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x214400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726483746d6f64653d30303030303030303030303030303030303036303046302c8d7365725f69643d", @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',\x00'], 0x1, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x101040) ioctl$TCSETS(r7, 0x5404, &(0x7f0000000040)={0x0, 0x100000, 0x3, 0x20000, 0x0, "0ea4fc7b9ff53acfc3b072570d9763d021c778"}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2a) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) 27.950846912s ago: executing program 4 (id=3194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000001040300000000000000000007000002080004400005080003400000000706000640000000000a000200000100010100"/64], 0x40}, 0x1, 0x0, 0x0, 0x80004}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r3, 0x0, 0x600000, 0x148) mmap(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x200000d, 0x4008031, r2, 0x625ec000) getpriority(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f000001b980)=""/102366, 0x18fde}], 0x1, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x8, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) 27.576522468s ago: executing program 4 (id=3196): syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000740)={{}, {@host}, 0x400, "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"}, 0x418}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x2, {0x0, 0x1, 0x0, 0x0, 0xfffffffd}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00203c0020010000000000000000000000000000ff02000000000000000000000000000100010000000000009b"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x8) openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 27.198015179s ago: executing program 4 (id=3198): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x3, 0x4, 0xfffffff9) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000380)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0xf3e, 0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="f94df812521399ef781ac9ccd72f712688c6b219a0614b7ac3de8bcaf74bebb3b0", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0xa, 0x2) 26.585738211s ago: executing program 4 (id=3199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100f20000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000080)={0x0, [], 0xc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r2, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000000004058043801000e0000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="e7f2050000000500cfe092"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000810500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280b5df746dc0ead607635fee0a9a0f92d90f343e079a34afa1daba2048ee35f7c300ddaa29e4758366bf328db2c9fa7dc31560d89b933e5284cc9e7a86db0933c47b50ba2c05fe1d1764ae1df9175fd7bc30159be56afefeacf5009f1e0b2ef8c1671d47ee09b3a6a70d549f7145c400002c4decac0225e6ad9554f77597105495e1e21da3"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, 0x0) r6 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1b3f, &(0x7f0000000300), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r8, r7, &(0x7f0000000380)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x20) r9 = syz_open_pts(r5, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000140)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00018008000100000000060c00018008000100000004000c0001800800010000000300e56dbc6c4f05353ad238d5838de9b321b73e47aec8d4488681f1aee84577407621f703430d69d35bee6fa882"], 0x3c}, 0x1, 0x5502000000000000}, 0x0) syz_usb_connect$uac1(0x0, 0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902700003010000000904000000010100000a240100fc816f91dd99422c24f4c500000201020624050202be0b240402029443b490b875090401000001020000090401010101020000090501090002000000072501000000000904020000010200000904020101010200000905820900"], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x9f, 0x7, 0x7, 0x6}, {0x4, 0x6, 0xff}, {0x0, 0x3, 0x29, 0x3}, {0x4, 0x5, 0x40, 0xf}, {0x805, 0x16, 0x52, 0x7}, {0x0, 0x0, 0x5, 0x2}]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0xf8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) 24.174483173s ago: executing program 4 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc25c4110, &(0x7f0000000780)={0x0, [[0x5], [0x2], [0xfffffffe]], '\x00', [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x2}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @multicast1, 0x0, "e321f54cf4532934"}]}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="458cda9b8f2400000000af367bf019b9f031f300000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x18c, r1, 0x5, 0x1, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x1, 0xb, 0x400, 0xa}}, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @device_b, 0x7c, @void, 0x7e}, {{}, @device_b, 0x90, @void, 0x41}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x15}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x3e}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @device_a, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x8, @void, 0x30}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x18c}}, 0xc094) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000440)="e492580d1ba344dc12809f76110d4b3e6a9d79727a62acadbab875e9cdc514d5290010f4f6aa27ce601caf3e5c32a7b980e7e61a5d6ee5d8a13ff9bafeebad365f5ad19f595a254b6b0b8ba7ad5f8bb164f0e241fdfde68030d2fdbf37bf0fe4975b0e446319e0ac510fee44ff197ef8f83845d81915d958559902dd117581b0016bfeef4fcc6b2a50645f45", 0xff12, 0x4000850, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close(r6) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r8, 0x0) r9 = socket(0x15, 0x5, 0x0) getsockopt(r9, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)=0x4f) sendmsg$AUDIT_USER(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x18, 0x3ed, 0x400, 0x70bd28, 0x25dfdbfe, "e164cc32791f44", ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 8.611409282s ago: executing program 3 (id=3247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4d811}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x51}, 0x0) 8.12842101s ago: executing program 2 (id=3249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x200000a, 0x10050, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0x4004510f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x81) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000072000107000000000000000007000034", @ANYRES32=0x0, @ANYBLOB="060001"], 0x20}}, 0x0) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x100001, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 7.898125789s ago: executing program 3 (id=3251): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x12, 0x0, 0x0, 0x17a2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000300)={0x0, 0xa, 0xcd, {0xcd, 0xa, "f02f8005adf6e22c507351d44b7e6a01b003699865e0b56e93de737b162993bcc2d2b2db3222db0c6d99aac292d27c61c3b32642375660f9d4c355f6d6694265f4038989ce67527eee705bface3dd875cf468f70ef4b27f5efd009791e2a9a284861a65483daf1ccff0e566b166ab5607465e031f63519183ce978efc86fa4c8dee3d5c510478e93b41e1fc95a62a5ea499c7fe83a585cd7ae86245a452ec98aeb3edad28bf4d244d467f773909ba702979e752f601c45d0184b12cd2bf69e987a78487243855528890892"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x6, 0x3, "da94d0b7", "6d67d907"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x4, 0x1f, 0x8, 0x0, 0x6, 0x5}}}, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x40, 0x3, 0x91, "6bb8c744bb06ec0f74471ac81b3ad32fa42f6c7ddb88ac4427a2b60b9acd0ed4593964ea268703638acb0e70ca52606746b458994501334046d6466c7b136ffed8b42f91ede38f2402e4cf1b9bb3d421a6d4c2a7406d7d64e3a8f41ff1e1e627dd6ecf895a6f4e73c956f3aba1bee23e55f9e3ad52d4a8e759067fbac15aec6a1f38d3de01c33784fd3bc2a2565f72a960"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0xe0, 0x80, [0x0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "e8ab"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, '^|'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2604}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4e}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000640)="e0af4591b12559d22683601448ddbdbb54419e01769776466584cae8f8f679e9f8d8c6d60267b554265cfde8b0a88381808210f3bdd6c24b7d71eea68d068447334ec8d629d8e556126b58276f99fb557dfcf9863b057c093f7269efb29e8b50ea9e33c31595e4a983cfaa26ff63546d0ce55725999149bc0f713b6ec628cd9d1ff11b1865ed8ea3a3e884ed44ebdd400cf8f3b722ef8135b522bde4ae5e8980c3ce3c6afe96a95bc44302a3", 0xac}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="4a2cbab0ec60febe59b7b4148f35f1e8043bc7e3706d916fdcd3e9ad319e0d71da94ad5fab4709fad14eebddbe35077387fb577bcc69c4d64fd4555b7ab501306dde4edd77f95e73fd13d292b300c74b7050537f3b0968059a7517d81a5557a087abea0cade5a057f7393d83064a3a8786b04f1760be65730fc6acfa1957b8650c1953d569fb68be67", 0x89}, {&(0x7f00000007c0)="a2cbe65846bbd4802ff19023d15e13974a055138da6c186208677b87158b9087836da1157f0c3b3730905285d3ba1687e28704ccc09fe67f89f33dbbac2c70c02b403adadd9aa6f5dbef44bda3f0107adce81be498c7357492f873f0badad15d5545b85b288e884be8849508c930ec44fde1dfde466e8cc599b889b284453d67f9d7ba1e4e7e37b795de85cb4ecab54d0dd14afce5752679d043cffec622f3e3876f3695516db06e9c95f8cb465200c4deae1280ddfc0fb5bb723f769969346608a6eb", 0xc3}, {&(0x7f0000000580)="e2b57489b0d7757b5c12a01a247dc8c76dc34f00256190e699cb39da7e09ad3e80d48fdcccad7a190f6389ef10e309fa", 0x30}, {&(0x7f0000000940)="4f3d83d7ff4e82228e5748158abbbdcbc2c472338937b9838160de3622d4f6b7e6bdce656681b72ad4b649057cfead01d6ed0737890e7585252f095629873a6f6bad3f84ec7c692368ff0b04317882efbb3d9d2ee067e41eed282ab81be77bd6668c4741", 0x64}, {0x0}, {&(0x7f00000009c0)="9e303c5958f1f6563841d1536785c9368620b5a42899aa2c1a44aff730316bd263c9ddfb5b8922b1b5590962b47b6cadea14867a976ea22f35c44be7cf1673470a8f2a8fec47920228b990aadd31e17001347a94ca6a474b589e5a9e2c1b99d69efc65f7cd99906298df6076250a35459a74d0e8df053fb444de9d609987b5bc129d8e507ec28bbda3da8b39bf8ac8e4d198ecced23b146eed116cc4d7ba57a1fdb53b310721278fbd3a5d8de5e3947d66ef343589c266a59006cf3f8d6468ca6c8c8845918723f6749c3b644ddfb94d8979fb13206bde801bb06c95cbf26c160785bc47d9483edd2eb548fd4b68880c8b1234e6f71dcc994c", 0xf9}, {&(0x7f00000008c0)="4ced0f39bcdabbd6ba39b145f1c38b6c27c41b449d8f41b735410cdaef007645e65ff9b9f060f213f9", 0x29}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="dc0000000000000007000000442c5a8000000002fffffffc0001000100000645000000060000000800000003000000020000b4f700000006862b00000400020c2799c8bd266d6c724175071202bc8cf09aed9a7090d47630e80ded2905071a84180047071bd1ac1e00017f000001ac1414bbe0000002e0000002ffffffff44148ff0000000030000000900000005ffffffff8645680523b101031e060d041b16c59ebaf6320a98b80610f25384720c9966f413285d96d5790510baade8499911be957b8f227f31e1000f404c15f8e915b4869334e180c8940401000010000000000000000100000000000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414bb100000000000000002000000010000001c0000000000000007000000890d19255562599b7232db39e9000000"], 0x130}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f000001b600)="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", 0xec3}, {&(0x7f0000000b80)="f911c2b32445aea393792d9d93b48448de805699d8e00fd0b528e051bfb14e19", 0x20}, {&(0x7f0000000bc0)="44ad54bb54c9868219773b8b19", 0xd}], 0x3}}], 0x5, 0x4000040) io_uring_enter(r2, 0x7f71, 0xf0f, 0x8, &(0x7f00000001c0)={[0x9, 0x800]}, 0x8) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 7.020507614s ago: executing program 1 (id=3252): syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000740)={{}, {@host}, 0x400, "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"}, 0x418}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x2, {0x0, 0x1, 0x0, 0x0, 0xfffffffd}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00203c0020010000000000000000000000000000ff02000000000000000000000000000100010000000000009b"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x8) openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 6.62176641s ago: executing program 1 (id=3253): creat(&(0x7f0000000040)='./file0\x00', 0x1de) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x2) r0 = epoll_create1(0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000300)={0x8000201d}) epoll_pwait2(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000004000)=""/102399, 0x18fff}, {&(0x7f0000000ac0)=""/4095, 0xfff}], 0x2, 0xfffffffd, 0x0) r4 = mq_open(0x0, 0x40, 0x104, 0x0) mq_getsetattr(r4, 0x0, &(0x7f0000000380)) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x4, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r10 = ioctl$UDMABUF_CREATE(r9, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000040)=0x2) 5.774775492s ago: executing program 2 (id=3254): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18) shutdown(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r6], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r12}}, 0x20}}, 0x0) 4.696889086s ago: executing program 3 (id=3255): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18) shutdown(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) r2 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r6], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000]}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r12}}, 0x20}}, 0x0) 4.110740608s ago: executing program 1 (id=3256): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="0002"], 0x18) shutdown(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r7], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 3.796191238s ago: executing program 2 (id=3257): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f000005ffe4)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket(0x15, 0x5, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(r4, 0x54, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB='\x00'/28], 0x48) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x0, 0x148, 0x1b4, 0x148, 0x1b4, 0x240, 0x240, 0x1b4, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gre0\x00', 'pim6reg\x00'}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFQUEUE0={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @window, @timestamp, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x2a) 3.615672769s ago: executing program 3 (id=3258): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "00a138aa9318e9dd7077000000020000000000006dff0000f300000023f400", 0xffffffffffffffff}) r3 = epoll_create1(0xaf5b6dfe4e9f3aa4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000003c0)) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}}], 0x2, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x3500, 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f000086fff4)) r11 = getpid() r12 = getpid() kcmp$KCMP_EPOLL_TFD(r11, r12, 0x7, r7, &(0x7f00000000c0)={r10, r9, 0x7}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00') socket$key(0xf, 0x3, 0x2) 3.331044857s ago: executing program 3 (id=3259): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getgroups(0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8f7ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1005, &(0x7f00000003c0)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000230000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x1fc, &(0x7f0000001640)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0xc, 0x4, 0x2, 0x9, 0x1ee, 0x65, 0x0, 0x3f, 0x2f, 0x0, @remote, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x8, 0x7ff]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x5c, 0x3, [], "d2cc0a3105785bc79a31a8d99d73fbcf3c94ec9c391ce190636f4c49619500a165432df6a7657d03ab59b5613d75cea180991b53f929ff2a9bcea95730e93291a670fd0cedc1e0d50724bef8c3d9bebb5b350ee04ceb463b4e4a4717"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x30, 0x3f, 0x3]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "8b48e538a2978474e8109d591cdebef6c5f55476ed1aad23f50fa4b87e297e02d60ae6fb0de1b3963c608f871176b2fa7d61cd849933b4ac9c4c109e5fdae7bd3a744646f75cc4c59b43fc896f092ae102f4232bb4f37e320db297a481fba193f21b3f81b7d5949e902793e02246206627a4f71fe1bce46ef7aa1f24b9de14297e98fd25bb1ffdb1f54f3308b35636b95d89a7f925fc783fb4f8641c31a8afbe4ea7386f2c9dc7f4d42be3ce272a25159a64d909be0cc05453c3e375fc08c1f42ccb1066d523cb07140082b6a7e66d22ba9e94fdaffcfb7c9066c55f655078eef8"}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x7, 0x2, 0x0, 0x2, 0x6, 0xe6}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x2, {{0x5, 0x2, 0x4, 0x3, 0x1, 0x3, 0x7, 0x4}, 0x2, {0x0, 0x5, 0x2, 0x14, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "acedca5195967bf0ed671a5f2152e290c47af24bc18f65e8950f3ebd5c334b9d1de6b07901460bbe34f5db3e24ab41177fc85bb8cda6d0"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1e, 0x0, 0x0, 0x8000, 0x704, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=@ringbuf, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='track_foreign_dirty\x00', r6}, 0x10) write$cgroup_int(r2, &(0x7f0000000000), 0x12) socket$nl_generic(0x10, 0x3, 0x10) 3.192068786s ago: executing program 1 (id=3260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000001040300000000000000000007000002080004400005080003400000000706000640000000000a000200000100010100"/64], 0x40}, 0x1, 0x0, 0x0, 0x80004}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x200000d, 0x4008031, r2, 0x625ec000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) getpriority(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f000001b980)=""/102366, 0x18fde}], 0x1, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x8, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) 3.101902464s ago: executing program 2 (id=3261): syz_emit_ethernet(0x3b6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xb989) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r3, 0x7ac, &(0x7f0000000100)={&(0x7f0000000740)={{}, {@host}, 0x400, "16d0503e69c656d1d3de4388539aab6bfc3f915349cb03d9a444d485a43277c592ef2fd14e471d9af71a4ccc30f16bda013924c0f56b7162873cae7b0af3d2d1245ad547b39c5d259bde25cbdc9f112fa592bde41b5b9da952489667ca4df48308e876d73e968a440277f518ea7d4600c33f6331834a419907886bc29535a91bdd762e02ee8ab167a0aad9fe4c79e1e2c8cc99b6a799cf6aa36e1205eaea31b687f06f4a4b4610a5b6417fba0244604349e706e88669645b29d9a185c6d67f370294a3d5255bb9e5f5dc11670f75b73a97c5272a77c1dc8633ecf628bac105e632ccdf1cc560b8fb3020f5a11027a2bcbe80670083db2ab6599a5d2653c938084170a91c85c307ff3d928b49e8865b2ab051df0f4638053cfddad55100584d667ba17e0864244bf72694e60c474e6cd2cd1e090f9b2c65b74c26a56b733625c5e256fc24818476e5f92a79a70dd0f635265161e8bf91cc75c4990aed542f4e8f0e87bdeb505fcdd545b3461bd423ee7498465e1c9ff1df5e1fd62949098a92855ea4db07cfe0e9584b6e107976405997622534f51f1c7fe2966c092e2e5a3ef23a40adb38d25ad58fd97b2d92eb9680c966e40c6c07159b53ead00c445f65e9b20e9fdc419186c962370a7f232343a3d32aa3934f2b221ca6f49ac2e1cd44ddd166be68f4da8c94e0d77181a6ebe96a957e8fcc15fb566bf61c19ae0bcce7ef1b80d63b8a64a81d02d5ffcd1baa5deb88998215265c6603ef9dd233ed33336d28c85a0e719e5374efe295321663105bad12513abc5738a5a6e1eb9281298fe9c4c4797105e7298ff7933e853193aa691c27a134c255e9f1b9d9c1628a9cc400d05768fcbaf1563a05408225e87ff9a4acf9fdb06b75438721a1a38ea4d4be88063c717ad64bd8cd6786ca35a3a756494be8365d17341437094faea1a6d49117df1376ce7917d411bc0bb37e6ce408ae384f824c90e2acfffa193fe7c27233c71f40d467e5c4bb65c2d34c6eb418cf622da831b800f5bb1731e8f323d27db5018b461ad28bfa319c1754847f9a8feb716a9b0218d281c136dbc1f7d0305a0741e9ac73247076f5b1d01e17b9c241d12c7d8bff6ea210ba5aba9cfe5c3a73adde14c2d6d47ad1fab561b0a4533b48b6ece97b4af18a9f56c6b3bf4520de26b183786b141d80c7d6fba7a63c0ca4fb555bd1cb3471bec8829f199d7593c1d5143e8016c9699102c5edcad28e6ffae05f7f05ee486d603b452617b295a22b7d56515ec4da73f2b024b5f0600268038ba1eb59f6dd7b3d9c974d8fd1dd71790603a46eabba8e656e9273c9b0ea1f7eb637e38ce53202c795ef306b5cba88c151ccf986b41e37528dc0014b3e7afd2a01597d4b75329e5703ca9d532567dd076d41155c7b68beb61f8b3fde22e08a87d8173b23ee856cd453e86af2e7f777654e6f0f2"}, 0x418}) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x2, {0x0, 0x1, 0x0, 0x0, 0xfffffffd}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00203c0020010000000000000000000000000000ff02000000000000000000000000000100010000000000009b"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r2, 0x0, 0x8) openat$cgroup(r7, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2.189476203s ago: executing program 1 (id=3262): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x200000a, 0x10050, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0x4004510f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x81) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000072000107000000000000000007000034", @ANYRES32=0x0, @ANYBLOB="060001"], 0x20}}, 0x0) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x100001, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={0x1c, r3, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x700}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x14, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 1.951733884s ago: executing program 2 (id=3263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000001040300000000000000000007000002080004400005080003400000000706000640000000000a000200000100010100"/64], 0x40}, 0x1, 0x0, 0x0, 0x80004}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) socket$nl_audit(0x10, 0x3, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat6\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(r2, 0x0, 0x600000, 0x148) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x19) getpriority(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f000001b980)=""/102366, 0x18fde}], 0x1, 0x0, 0x40) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x8, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) 965.4542ms ago: executing program 2 (id=3264): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x12, 0x0, 0x0, 0x17a2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000300)={0x0, 0xa, 0xcd, {0xcd, 0xa, "f02f8005adf6e22c507351d44b7e6a01b003699865e0b56e93de737b162993bcc2d2b2db3222db0c6d99aac292d27c61c3b32642375660f9d4c355f6d6694265f4038989ce67527eee705bface3dd875cf468f70ef4b27f5efd009791e2a9a284861a65483daf1ccff0e566b166ab5607465e031f63519183ce978efc86fa4c8dee3d5c510478e93b41e1fc95a62a5ea499c7fe83a585cd7ae86245a452ec98aeb3edad28bf4d244d467f773909ba702979e752f601c45d0184b12cd2bf69e987a78487243855528890892"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x6, 0x3, "da94d0b7", "6d67d907"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x4, 0x1f, 0x8, 0x0, 0x6, 0x5}}}, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x40, 0x3, 0x91, "6bb8c744bb06ec0f74471ac81b3ad32fa42f6c7ddb88ac4427a2b60b9acd0ed4593964ea268703638acb0e70ca52606746b458994501334046d6466c7b136ffed8b42f91ede38f2402e4cf1b9bb3d421a6d4c2a7406d7d64e3a8f41ff1e1e627dd6ecf895a6f4e73c956f3aba1bee23e55f9e3ad52d4a8e759067fbac15aec6a1f38d3de01c33784fd3bc2a2565f72a960"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0xe0, 0x80, [0x0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "e8ab"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, '^|'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2604}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x4e}, 0x0, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x18, 0x0, &(0x7f0000000480)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000640)="e0af4591b12559d22683601448ddbdbb54419e01769776466584cae8f8f679e9f8d8c6d60267b554265cfde8b0a88381808210f3bdd6c24b7d71eea68d068447334ec8d629d8e556126b58276f99fb557dfcf9863b057c093f7269efb29e8b50ea9e33c31595e4a983cfaa26ff63546d0ce55725999149bc0f713b6ec628cd9d1ff11b1865ed8ea3a3e884ed44ebdd400cf8f3b722ef8135b522bde4ae5e8980c3ce3c6afe96a95bc44302a3", 0xac}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="4a2cbab0ec60febe59b7b4148f35f1e8043bc7e3706d916fdcd3e9ad319e0d71da94ad5fab4709fad14eebddbe35077387fb577bcc69c4d64fd4555b7ab501306dde4edd77f95e73fd13d292b300c74b7050537f3b0968059a7517d81a5557a087abea0cade5a057f7393d83064a3a8786b04f1760be65730fc6acfa1957b8650c1953d569fb68be67", 0x89}, {&(0x7f00000007c0)="a2cbe65846bbd4802ff19023d15e13974a055138da6c186208677b87158b9087836da1157f0c3b3730905285d3ba1687e28704ccc09fe67f89f33dbbac2c70c02b403adadd9aa6f5dbef44bda3f0107adce81be498c7357492f873f0badad15d5545b85b288e884be8849508c930ec44fde1dfde466e8cc599b889b284453d67f9d7ba1e4e7e37b795de85cb4ecab54d0dd14afce5752679d043cffec622f3e3876f3695516db06e9c95f8cb465200c4deae1280ddfc0fb5bb723f769969346608a6eb", 0xc3}, {&(0x7f0000000580)="e2b57489b0d7757b5c12a01a247dc8c76dc34f00256190e699cb39da7e09ad3e80d48fdcccad7a190f6389ef10e309fa", 0x30}, {&(0x7f0000000940)="4f3d83d7ff4e82228e5748158abbbdcbc2c472338937b9838160de3622d4f6b7e6bdce656681b72ad4b649057cfead01d6ed0737890e7585252f095629873a6f6bad3f84ec7c692368ff0b04317882efbb3d9d2ee067e41eed282ab81be77bd6668c4741", 0x64}, {0x0}, {&(0x7f00000009c0)="9e303c5958f1f6563841d1536785c9368620b5a42899aa2c1a44aff730316bd263c9ddfb5b8922b1b5590962b47b6cadea14867a976ea22f35c44be7cf1673470a8f2a8fec47920228b990aadd31e17001347a94ca6a474b589e5a9e2c1b99d69efc65f7cd99906298df6076250a35459a74d0e8df053fb444de9d609987b5bc129d8e507ec28bbda3da8b39bf8ac8e4d198ecced23b146eed116cc4d7ba57a1fdb53b310721278fbd3a5d8de5e3947d66ef343589c266a59006cf3f8d6468ca6c8c8845918723f6749c3b644ddfb94d8979fb13206bde801bb06c95cbf26c160785bc47d9483edd2eb548fd4b68880c8b1234e6f71dcc994c", 0xf9}, {&(0x7f00000008c0)="4ced0f39bcdabbd6ba39b145f1c38b6c27c41b449d8f41b735410cdaef007645e65ff9b9f060f213f9", 0x29}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="dc0000000000000007000000442c5a8000000002fffffffc0001000100000645000000060000000800000003000000020000b4f700000006862b00000400020c2799c8bd266d6c724175071202bc8cf09aed9a7090d47630e80ded2905071a84180047071bd1ac1e00017f000001ac1414bbe0000002e0000002ffffffff44148ff0000000030000000900000005ffffffff8645680523b101031e060d041b16c59ebaf6320a98b80610f25384720c9966f413285d96d5790510baade8499911be957b8f227f31e1000f404c15f8e915b4869334e180c8940401000010000000000000000100000000000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414bb100000000000000002000000010000001c0000000000000007000000890d19255562599b7232db39e9000000"], 0x130}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f000001b600)="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", 0xec3}, {&(0x7f0000000b80)="f911c2b32445aea393792d9d93b48448de805699d8e00fd0b528e051bfb14e19", 0x20}, {&(0x7f0000000bc0)="44ad54bb54c9868219773b8b19", 0xd}], 0x3}}], 0x5, 0x4000040) io_uring_enter(r2, 0x7f71, 0xf0f, 0x8, &(0x7f00000001c0)={[0x9, 0x800]}, 0x8) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 310.757243ms ago: executing program 3 (id=3265): shutdown(0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r7], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r8, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r13}}, 0x20}}, 0x0) 0s ago: executing program 1 (id=3266): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xc, 0x12, 0x0, 0x0, 0x17a2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x18, &(0x7f0000000300)={0x0, 0xa, 0x2, {0x2, 0xa}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000200)={0x0, 0xf, 0x8, {0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x6, 0x3, "da94d0b7", "6d67d907"}}, 0x0}, &(0x7f0000000940)={0x44, &(0x7f00000004c0)={0x40, 0x3, 0x91, "6bb8c744bb06ec0f74471ac81b3ad32fa42f6c7ddb88ac4427a2b60b9acd0ed4593964ea268703638acb0e70ca52606746b458994501334046d6466c7b136ffed8b42f91ede38f2402e4cf1b9bb3d421a6d4c2a7406d7d64e3a8f41ff1e1e627dd6ecf895a6f4e73c956f3aba1bee23e55f9e3ad52d4a8e759067fbac15aec6a1f38d3de01c33784fd3bc2a2565f72a960"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0xe0, 0x80, [0x0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000700)={0x40, 0xb, 0x2, "e8ab"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000800)={0x40, 0x19, 0x2, '^|'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x2604}, 0x0, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6cc}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)}}, {{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000640)="e0af4591b12559d22683601448ddbdbb54419e01769776466584cae8f8f679e9f8d8c6d60267b554265cfde8b0a88381808210f3bdd6c24b7d71eea68d068447334ec8d629d8e556126b58276f99fb557dfcf9863b057c093f7269efb29e8b50ea9e33c31595e4a983cfaa26ff63546d0ce55725999149bc0f713b6ec628cd9d1ff11b1865ed8ea3a3e884ed44ebdd400cf8f3b722ef8135b522bde4ae5e8980c3ce3c6afe96a95bc44302a3", 0xac}], 0x2}}, {{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="4a2cbab0ec60febe59b7b4148f35f1e8043bc7e3706d916fdcd3e9ad319e0d71da94ad5fab4709fad14eebddbe35077387fb577bcc69c4d64fd4555b7ab501306dde4edd77f95e73fd13d292b300c74b7050537f3b0968059a7517d81a5557a087abea0cade5a057f7393d83064a3a8786b04f1760be65730fc6acfa1957b8650c1953d569fb68be67", 0x89}, {&(0x7f00000007c0)="a2cbe65846bbd4802ff19023d15e13974a055138da6c186208677b87158b9087836da1157f0c3b3730905285d3ba1687e28704ccc09fe67f89f33dbbac2c70c02b403adadd9aa6f5dbef44bda3f0107adce81be498c7357492f873f0badad15d5545b85b288e884be8849508c930ec44fde1dfde466e8cc599b889b284453d67f9d7ba1e4e7e37b795de85cb4ecab54d0dd14afce5752679d043cffec622f3e3876f3695516db06e9c95f8cb465200c4deae1280ddfc0fb5bb723f769969346608a6eb", 0xc3}, {&(0x7f0000000580)="e2b57489b0d7757b5c12a01a247dc8c76dc34f00256190e699cb39da7e09ad3e80d48fdcccad7a190f6389ef10e309fa", 0x30}, {&(0x7f0000000940)="4f3d83d7ff4e82228e5748158abbbdcbc2c472338937b9838160de3622d4f6b7e6bdce656681b72ad4b649057cfead01d6ed0737890e7585252f095629873a6f6bad3f84ec7c692368ff0b04317882efbb3d9d2ee067e41eed282ab81be77bd6668c4741", 0x64}, {0x0}, {&(0x7f00000009c0)="9e303c5958f1f6563841d1536785c9368620b5a42899aa2c1a44aff730316bd263c9ddfb5b8922b1b5590962b47b6cadea14867a976ea22f35c44be7cf1673470a8f2a8fec47920228b990aadd31e17001347a94ca6a474b589e5a9e2c1b99d69efc65f7cd99906298df6076250a35459a74d0e8df053fb444de9d609987b5bc129d8e507ec28bbda3da8b39bf8ac8e4d198ecced23b146eed116cc4d7ba57a1fdb53b310721278fbd3a5d8de5e3947d66ef343589c266a59006cf3f8d6468ca6c8c8845918723f6749c3b644ddfb94d8979fb13206bde801bb06c95cbf26c160785bc47d9483edd2eb548fd4b68880c8b1234e6f71dcc994c", 0xf9}, {&(0x7f00000008c0)="4ced0f39bcdabbd6ba39b145f1c38b6c27c41b449d8f41b735410cdaef007645e65ff9b9f060f213f9", 0x29}], 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="dc0000000000000007000000442c5a8000000002fffffffc0001000100000645000000060000000800000003000000020000b4f700000006862b00000400020c2799c8bd266d6c724175071202bc8cf09aed9a7090d47630e80ded2905071a84180047071bd1ac1e00017f000001ac1414bbe0000002e0000002ffffffff44148ff0000000030000000900000005ffffffff8645680523b101031e060d041b16c59ebaf6320a98b80610f25384720c9966f413285d96d5790510baade8499911be957b8f227f31e1000f404c15f8e915b4869334e180c8940401000010000000000000000100000000000000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac1414bb100000000000000002000000010000001c0000000000000007000000890d19255562599b7232db39e9000000"], 0x130}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f000001b600)="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", 0xe81}, {&(0x7f0000000b80)="f911c2b32445aea393792d9d93b48448de805699d8e00fd0b528e051bfb14e19", 0x20}, {&(0x7f0000000bc0)="44ad54bb54c9868219773b8b19", 0xd}], 0x3}}], 0x5, 0x4000040) io_uring_enter(r2, 0x7f71, 0xf0f, 0x8, &(0x7f00000001c0)={[0x9, 0x800]}, 0x8) sendto$inet(r3, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): uous mode [ 876.285763][T18932] hsr_slave_1: entered promiscuous mode [ 876.361342][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 876.387241][ T7539] usb 3-1: Using ep0 maxpacket: 8 [ 876.400431][ T7539] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.415703][ T5285] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.446403][ T5285] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 876.460730][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.470448][ T5285] usb 4-1: Product: syz [ 876.474408][ T7539] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 876.474661][ T5285] usb 4-1: Manufacturer: syz [ 876.491910][ T5285] usb 4-1: SerialNumber: syz [ 876.500607][ T5285] usb 4-1: config 0 descriptor?? [ 876.519396][ T5285] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 876.525645][ T5285] usb 4-1: selecting invalid altsetting 1 [ 876.582790][ T7539] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.619748][ T7539] usb 3-1: Product: syz [ 876.645523][ T7539] usb 3-1: Manufacturer: syz [ 876.687978][ T7539] usb 3-1: SerialNumber: syz [ 876.716653][ T5285] gspca_stk014: init reg: 0x6b [ 876.724562][ T7539] usb 3-1: config 0 descriptor?? [ 876.729737][ T5285] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 876.792222][ T7539] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 876.827025][ T7539] usb 3-1: selecting invalid altsetting 1 [ 876.837745][T13330] Bluetooth: hci0: command tx timeout [ 876.995402][ T29] audit: type=1326 audit(1726457765.995:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19046 comm="syz.1.3036" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53579 code=0x0 [ 877.075727][ T7539] gspca_stk014: init reg: 0x6b [ 877.092550][ T7539] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 877.344334][ T5285] usb 4-1: USB disconnect, device number 11 [ 877.769420][ T5285] usb 3-1: USB disconnect, device number 23 [ 877.976180][ T46] usb 5-1: USB disconnect, device number 46 [ 878.026642][T19059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'. [ 879.372410][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3038'. [ 879.642684][T18932] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 879.711087][T18932] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 879.794394][T18932] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 879.900362][T18932] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 880.247323][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 880.467369][ T5243] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 880.467750][T18932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.475061][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 880.494037][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3046'. [ 880.539437][ T46] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 880.588217][ T46] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 880.598527][ T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 880.632582][ T46] usb 4-1: config 1 has no interface number 0 [ 880.648698][ T46] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 238, changing to 11 [ 880.689631][ T46] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 42137, setting to 1024 [ 880.724583][ T5243] usb 2-1: config 1 interface 0 has no altsetting 0 [ 880.756541][ T5243] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 880.770305][ T46] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 880.798200][ T5243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.804298][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.819841][ T46] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 880.837186][ T5243] usb 2-1: Product: syz [ 880.848249][ T5243] usb 2-1: Manufacturer: syz [ 880.854039][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.872147][ T5243] usb 2-1: SerialNumber: syz [ 880.923158][T18932] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.924509][T19086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 880.962696][ T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 881.115275][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.205671][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.212900][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.260287][T19107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.272709][ T46] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 881.449314][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.551877][T19090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.565819][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.573165][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.586967][T16098] usb 4-1: USB disconnect, device number 12 [ 881.613764][T19090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.625087][T16098] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 881.629119][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 881.674739][ T5243] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 881.710828][ T5243] usb 2-1: USB disconnect, device number 16 [ 881.725441][ T5243] usblp0: removed [ 881.759395][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.858180][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 881.879227][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.902664][ T46] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 881.913184][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.923246][ T46] usb 5-1: Product: syz [ 881.924095][ T4628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 881.927459][ T46] usb 5-1: Manufacturer: syz [ 881.927479][ T46] usb 5-1: SerialNumber: syz [ 881.954634][ T4628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 881.965136][ T4628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 881.966117][ T46] usb 5-1: config 0 descriptor?? [ 881.989966][ T4628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 882.002096][ T4628] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 882.012140][ T4628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 882.019350][ T46] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 882.019430][ T46] usb 5-1: selecting invalid altsetting 1 [ 882.179634][T18932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.220357][ T46] gspca_stk014: init reg: 0x6b [ 882.225253][ T46] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 882.443365][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3051'. [ 882.567738][ T35] bridge_slave_0: left allmulticast mode [ 882.573444][ T35] bridge_slave_0: left promiscuous mode [ 882.589289][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.663784][ T941] usb 5-1: USB disconnect, device number 47 [ 883.317206][ T941] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 883.568266][ T941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.626350][ T941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.656998][ T941] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 883.687593][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 883.727697][ T941] usb 4-1: SerialNumber: syz [ 884.002611][ T941] usb 4-1: 0:2 : does not exist [ 884.017249][ T941] usb 4-1: unit 5: unexpected type 0x09 [ 884.120446][ T4628] Bluetooth: hci6: command tx timeout [ 884.763327][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.784846][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.833273][ T35] bond0 (unregistering): Released all slaves [ 884.931527][T19150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3056'. [ 885.024649][ T35] tipc: Left network mode [ 885.306047][T18932] veth0_vlan: entered promiscuous mode [ 885.324593][T19190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3061'. [ 885.492933][T18932] veth1_vlan: entered promiscuous mode [ 885.563830][T19197] FAULT_INJECTION: forcing a failure. [ 885.563830][T19197] name failslab, interval 1, probability 0, space 0, times 0 [ 885.617437][ T46] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 885.617833][T19197] CPU: 0 UID: 0 PID: 19197 Comm: syz.1.3063 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 885.635802][T19197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 885.645985][T19197] Call Trace: [ 885.649300][T19197] [ 885.652272][T19197] dump_stack_lvl+0x241/0x360 [ 885.656974][T19197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 885.662194][T19197] ? __pfx__printk+0x10/0x10 [ 885.666808][T19197] ? __kmalloc_noprof+0xb0/0x400 [ 885.671776][T19197] ? __pfx___might_resched+0x10/0x10 [ 885.677089][T19197] should_fail_ex+0x3b0/0x4e0 [ 885.681786][T19197] ? qp_broker_alloc+0x8ca/0x2100 [ 885.686832][T19197] should_failslab+0xac/0x100 [ 885.691584][T19197] ? qp_broker_alloc+0x8ca/0x2100 [ 885.696622][T19197] __kmalloc_noprof+0xd8/0x400 [ 885.701420][T19197] qp_broker_alloc+0x8ca/0x2100 [ 885.706301][T19197] ? __pfx_lock_release+0x10/0x10 [ 885.711345][T19197] ? kasan_save_free_info+0x40/0x50 [ 885.716821][T19197] ? __kasan_slab_free+0x37/0x60 [ 885.721786][T19197] vmci_qp_broker_alloc+0x8e/0xc0 [ 885.726851][T19197] vmci_host_unlocked_ioctl+0x19e5/0x3560 [ 885.732601][T19197] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 885.738701][T19197] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 885.745054][T19197] ? tomoyo_path_number_perm+0x208/0x880 [ 885.750711][T19197] ? __pfx_lock_release+0x10/0x10 [ 885.755765][T19197] ? kfree+0x149/0x360 [ 885.759851][T19197] ? tomoyo_path_number_perm+0x71a/0x880 [ 885.765510][T19197] ? __lock_acquire+0x137a/0x2040 [ 885.770567][T19197] ? tomoyo_path_number_perm+0x208/0x880 [ 885.776222][T19197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 885.782265][T19197] ? __fget_files+0x29/0x470 [ 885.786882][T19197] ? __fget_files+0x3f6/0x470 [ 885.791587][T19197] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 885.797148][T19197] ? security_file_ioctl_compat+0x87/0xb0 [ 885.802886][T19197] __se_compat_sys_ioctl+0x51c/0xca0 [ 885.808200][T19197] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 885.814041][T19197] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 885.820085][T19197] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 885.826448][T19197] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 885.833066][T19197] ? lockdep_hardirqs_on+0x99/0x150 [ 885.838291][T19197] __do_fast_syscall_32+0xb4/0x110 [ 885.843541][T19197] ? exc_page_fault+0x590/0x8c0 [ 885.848423][T19197] do_fast_syscall_32+0x34/0x80 [ 885.853294][T19197] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 885.859649][T19197] RIP: 0023:0xf7f53579 [ 885.863736][T19197] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 885.878310][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 885.883340][T19197] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 885.883374][T19197] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007a8 [ 885.883389][T19197] RDX: 0000000020000640 RSI: 0000000000000000 RDI: 0000000000000000 [ 885.908501][ T46] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 885.912897][T19197] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 885.912917][T19197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 885.912929][T19197] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 885.912955][T19197] [ 885.947224][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.965832][ T35] hsr_slave_0: left promiscuous mode [ 885.983846][ T35] hsr_slave_1: left promiscuous mode [ 885.984949][ T5286] usb 4-1: USB disconnect, device number 13 [ 886.043053][ T46] usb 5-1: config 0 descriptor?? [ 886.086804][ T46] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 886.109583][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.157285][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.184617][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.194548][ T4628] Bluetooth: hci6: command tx timeout [ 886.208176][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.323815][ T35] veth0_macvtap: left promiscuous mode [ 886.942226][ T46] gspca_sonixj: reg_r err -32 [ 886.951059][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'. [ 886.961810][ T46] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 887.050216][ T46] usb 5-1: USB disconnect, device number 48 [ 887.727787][ T29] audit: type=1326 audit(1726457776.735:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19241 comm="syz.4.3068" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 887.834581][ T35] team0 (unregistering): Port device team_slave_1 removed [ 887.946581][ T35] team0 (unregistering): Port device team_slave_0 removed [ 888.270100][ T4628] Bluetooth: hci6: command tx timeout [ 888.917528][ T5289] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 888.981633][T19244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 889.078639][ T5289] usb 5-1: device descriptor read/64, error -71 [ 889.163952][T18932] veth0_macvtap: entered promiscuous mode [ 889.240422][T18932] veth1_macvtap: entered promiscuous mode [ 889.284036][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.295926][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.307860][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.318639][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.328857][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.339757][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.358934][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.371463][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.382141][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.393527][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.397439][ T5289] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 889.403893][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.422455][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.448571][T18932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.470424][T19118] chnl_net:caif_netlink_parms(): no params data found [ 889.513535][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.566047][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.597442][ T5289] usb 5-1: device descriptor read/64, error -71 [ 889.633702][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.675684][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.710925][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.744452][ T5289] usb usb5-port1: attempt power cycle [ 889.771942][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.801946][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.821157][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.831291][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.852049][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.872609][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.884297][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.894595][T18932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.905208][T18932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.920015][T18932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.958042][T18932] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.025321][T18932] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.067917][T18932] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.088655][T18932] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.126809][T19274] FAULT_INJECTION: forcing a failure. [ 890.126809][T19274] name failslab, interval 1, probability 0, space 0, times 0 [ 890.144013][T19274] CPU: 0 UID: 0 PID: 19274 Comm: syz.1.3073 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 890.154827][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 890.164907][T19274] Call Trace: [ 890.168206][T19274] [ 890.171145][T19274] dump_stack_lvl+0x241/0x360 [ 890.175851][T19274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.181068][T19274] ? __pfx__printk+0x10/0x10 [ 890.185687][T19274] ? fs_reclaim_acquire+0x93/0x140 [ 890.190841][T19274] ? __pfx___might_resched+0x10/0x10 [ 890.196168][T19274] ? dynamic_dname+0x141/0x1b0 [ 890.199456][ T5289] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 890.200975][T19274] should_fail_ex+0x3b0/0x4e0 [ 890.213204][T19274] ? tomoyo_encode+0x26f/0x540 [ 890.217990][T19274] should_failslab+0xac/0x100 [ 890.222703][T19274] ? tomoyo_encode+0x26f/0x540 [ 890.227483][T19274] __kmalloc_noprof+0xd8/0x400 [ 890.232272][T19274] tomoyo_encode+0x26f/0x540 [ 890.236881][T19274] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 890.242449][T19274] tomoyo_realpath_from_path+0x59e/0x5e0 [ 890.248204][T19274] tomoyo_path_number_perm+0x23a/0x880 [ 890.253688][T19274] ? __lock_acquire+0x137a/0x2040 [ 890.257804][ T5289] usb 5-1: device descriptor read/8, error -71 [ 890.258717][T19274] ? tomoyo_path_number_perm+0x208/0x880 [ 890.258751][T19274] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 890.276530][T19274] ? __fget_files+0x29/0x470 [ 890.281143][T19274] ? __fget_files+0x3f6/0x470 [ 890.285868][T19274] security_file_ioctl_compat+0x75/0xb0 [ 890.291439][T19274] __se_compat_sys_ioctl+0xd6/0xca0 [ 890.296654][T19274] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 890.302573][T19274] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 890.308584][T19274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 890.314944][T19274] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 890.321554][T19274] ? lockdep_hardirqs_on+0x99/0x150 [ 890.326861][T19274] __do_fast_syscall_32+0xb4/0x110 [ 890.331991][T19274] ? exc_page_fault+0x590/0x8c0 [ 890.336867][T19274] do_fast_syscall_32+0x34/0x80 [ 890.341737][T19274] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 890.348088][T19274] RIP: 0023:0xf7f53579 [ 890.352171][T19274] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 890.371815][T19274] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 890.380247][T19274] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 890.388237][T19274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 890.396235][T19274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 890.404222][T19274] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 890.412219][T19274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 890.420227][T19274] [ 890.442453][ T4628] Bluetooth: hci6: command tx timeout [ 890.447857][T19274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 890.544644][ T5289] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 890.609481][ T5289] usb 5-1: device descriptor read/8, error -71 [ 890.666265][T19118] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.701535][T19118] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.717761][T19118] bridge_slave_0: entered allmulticast mode [ 890.728366][ T5289] usb usb5-port1: unable to enumerate USB device [ 890.739873][T19118] bridge_slave_0: entered promiscuous mode [ 890.820019][T19118] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.835402][T19118] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.860183][T19118] bridge_slave_1: entered allmulticast mode [ 890.876336][T19118] bridge_slave_1: entered promiscuous mode [ 890.918360][T19282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 890.940982][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.958171][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.151268][T19118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.300593][T19118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.457322][T19246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.470310][T19246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.522752][T19118] team0: Port device team_slave_0 added [ 891.601049][T19118] team0: Port device team_slave_1 added [ 891.667274][T16098] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 891.766862][T19118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.774174][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.813078][T19297] ALSA: mixer_oss: invalid OSS volume '1:' [ 891.862012][T19297] ALSA: mixer_oss: invalid OSS volume 'invalid' [ 891.868774][T19297] ALSA: mixer_oss: invalid OSS volume 'verification' [ 891.877544][T19297] ALSA: mixer_oss: invalid OSS volume 'stack' [ 891.877697][T19118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.896220][T19297] ALSA: mixer_oss: invalid OSS volume 'proc' [ 891.957236][T16098] usb 2-1: Using ep0 maxpacket: 8 [ 891.982853][T19118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.996649][T16098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.030546][T19118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.061966][T16098] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 892.073872][T16098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.084022][T16098] usb 2-1: Product: syz [ 892.088476][T16098] usb 2-1: Manufacturer: syz [ 892.093081][T16098] usb 2-1: SerialNumber: syz [ 892.099555][T19118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.111456][T16098] usb 2-1: config 0 descriptor?? [ 892.124557][T16098] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 892.137939][T19304] netlink: 'syz.0.3011': attribute type 1 has an invalid length. [ 892.137979][T16098] usb 2-1: selecting invalid altsetting 1 [ 892.226105][T19312] netlink: 'syz.4.3079': attribute type 1 has an invalid length. [ 892.354101][T16098] gspca_stk014: init reg: 0x00 [ 892.373736][T16098] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 892.428856][T19118] hsr_slave_0: entered promiscuous mode [ 892.471009][T19118] hsr_slave_1: entered promiscuous mode [ 892.499408][T19118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.511198][T19118] Cannot create hsr debugfs directory [ 892.532964][T19312] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 892.546729][T19312] bond3: (slave batadv11): Enslaving as a backup interface with an up link [ 892.609297][T19314] bond3 (unregistering): (slave batadv11): Releasing backup interface [ 892.645068][T19314] bond3 (unregistering): Released all slaves [ 892.787442][ T46] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 892.988022][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 893.004947][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.035110][ T46] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 893.052838][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.071590][T19330] binder: 19292:19330 ioctl 4018620d 0 returned -22 [ 893.078681][ T46] usb 1-1: Product: syz [ 893.087332][ T46] usb 1-1: Manufacturer: syz [ 893.097947][ T46] usb 1-1: SerialNumber: syz [ 893.113575][ T46] usb 1-1: config 0 descriptor?? [ 893.134837][ T46] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 893.148142][ T46] usb 1-1: selecting invalid altsetting 1 [ 893.389168][ T46] gspca_stk014: init reg: 0x6b [ 893.394154][ T46] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 894.147330][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 894.168736][ T5681] usb 1-1: USB disconnect, device number 120 [ 894.393799][ T46] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 894.420447][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.421052][ T941] usb 2-1: USB disconnect, device number 17 [ 894.437969][ T46] usb 5-1: config 0 descriptor?? [ 894.841423][T19118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.959601][T19368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 895.015414][T19118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 895.101845][T19368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 895.148883][T19118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 895.235552][T19368] netlink: 'syz.4.3086': attribute type 10 has an invalid length. [ 895.351607][T19368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.429693][T19368] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 895.462899][T19118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 895.547599][T19381] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 895.582581][ T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 895.597369][ T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 895.606957][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 895.645886][ T46] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 895.668480][ T46] [drm] Initialized udl on minor 2 [ 895.681284][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 895.681662][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 895.702376][ T46] usb 5-1: USB disconnect, device number 53 [ 895.703048][ T5289] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 895.704158][ T5289] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 895.749573][ T5289] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 895.838360][T19382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3091'. [ 895.901302][T19385] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 895.956270][T19385] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 896.011567][T19386] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 896.072846][T19386] bond1 (unregistering): Released all slaves [ 896.406028][T19118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.515142][T19118] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.577624][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.584816][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.631590][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.638796][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.649008][ T5286] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 896.748237][ T46] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 896.847404][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 896.866647][ T5286] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 896.877834][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.885897][ T5286] usb 1-1: Product: syz [ 896.892057][ T5286] usb 1-1: Manufacturer: syz [ 896.896696][ T5286] usb 1-1: SerialNumber: syz [ 896.912355][ T5286] usb 1-1: config 0 descriptor?? [ 896.925021][T19118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.925811][ T5286] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 896.972879][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 897.020947][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.089961][ T46] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 897.123906][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.183751][ T46] usb 5-1: Product: syz [ 897.208862][ T5286] gspca_stk1135: reg_w 0x5 err -71 [ 897.210575][ T46] usb 5-1: Manufacturer: syz [ 897.215222][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.233380][ T5286] gspca_stk1135: Sensor write failed [ 897.240058][T19118] veth0_vlan: entered promiscuous mode [ 897.258960][ T46] usb 5-1: SerialNumber: syz [ 897.261561][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.275796][ T46] usb 5-1: config 0 descriptor?? [ 897.294640][ T46] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 897.318485][ T46] usb 5-1: selecting invalid altsetting 1 [ 897.327262][ T5286] gspca_stk1135: Sensor write failed [ 897.332647][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.334433][T19118] veth1_vlan: entered promiscuous mode [ 897.339173][ T5286] gspca_stk1135: Sensor read failed [ 897.350536][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.359235][ T5286] gspca_stk1135: Sensor read failed [ 897.365053][ T5286] gspca_stk1135: Detected sensor type unknown (0x0) [ 897.372276][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.378947][ T5286] gspca_stk1135: Sensor read failed [ 897.384625][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.394832][ T5286] gspca_stk1135: Sensor read failed [ 897.401273][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.407857][ T5286] gspca_stk1135: Sensor write failed [ 897.413617][ T5286] gspca_stk1135: serial bus timeout: status=0x00 [ 897.420138][ T5286] gspca_stk1135: Sensor write failed [ 897.425555][ T5286] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 897.440363][ T5286] usb 1-1: USB disconnect, device number 121 [ 897.470891][T19118] veth0_macvtap: entered promiscuous mode [ 897.481872][T19118] veth1_macvtap: entered promiscuous mode [ 897.541913][ T46] gspca_stk014: init reg: 0x6b [ 897.570599][ T46] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 897.605811][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.662312][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.707292][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.751412][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.792767][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.832413][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.875866][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.927391][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.957419][ T5286] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 898.005745][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.059844][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.108056][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.145666][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.166335][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.178111][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.195755][T19118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.198995][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 898.264602][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.283277][T16098] usb 5-1: USB disconnect, device number 54 [ 898.292521][ T5286] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 898.320598][ T5286] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 898.331140][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 898.340986][ T5286] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.351375][ T5286] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.371174][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.400390][ T5286] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 898.423335][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.437559][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.469284][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.487208][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.499869][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.510406][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.522247][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.533455][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.544805][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.555297][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.567922][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.578930][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.591719][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.605182][T19118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.621845][T19118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.648630][T19118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.662896][ T5286] usb 1-1: GET_CAPABILITIES returned 0 [ 898.674200][ T5286] usbtmc 1-1:16.0: can't read capabilities [ 898.694839][T19118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.704823][T19118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.729873][T19118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.740314][T19118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.932306][T19445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3095'. [ 898.987961][T19442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3095'. [ 899.034405][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.080927][ T5289] usb 1-1: USB disconnect, device number 122 [ 899.090323][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.265289][ T5286] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 899.266593][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.340296][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.517794][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 899.538412][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 899.559307][ T5286] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 899.570549][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.579630][ T5286] usb 5-1: Product: syz [ 899.585240][ T5286] usb 5-1: Manufacturer: syz [ 899.590297][ T5286] usb 5-1: SerialNumber: syz [ 899.599056][ T5286] usb 5-1: config 0 descriptor?? [ 899.618245][ T5286] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 899.624471][ T5286] usb 5-1: selecting invalid altsetting 1 [ 899.672082][T19465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3048'. [ 899.790283][T19468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 899.817420][T19468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 899.838631][ T5286] gspca_stk014: init reg: 0x00 [ 899.843533][ T5286] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 899.847228][ T5289] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 899.937368][ T5283] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 900.027424][ T5289] usb 1-1: device descriptor read/64, error -71 [ 900.085952][ T29] audit: type=1326 audit(1726457789.085:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.137345][ T29] audit: type=1326 audit(1726457789.085:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.159591][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.167153][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 900.173126][ T29] audit: type=1326 audit(1726457789.115:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.200706][ T5283] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.211551][ T29] audit: type=1326 audit(1726457789.115:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.212090][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 900.247960][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 900.261251][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 900.272848][ T5283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 900.283943][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 900.294412][ T5283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 900.304929][ T5283] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 900.338276][ T29] audit: type=1326 audit(1726457789.115:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.360327][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.371480][ T29] audit: type=1326 audit(1726457789.115:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.394986][ T5289] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 900.395311][ T5283] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 900.429797][ T29] audit: type=1326 audit(1726457789.115:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.484224][T19477] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 900.509223][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.538990][ T5283] usb 4-1: Product: syz [ 900.549957][ T5283] usb 4-1: Manufacturer: syz [ 900.555377][ T5283] usb 4-1: SerialNumber: syz [ 900.574698][ T5283] usb 4-1: config 0 descriptor?? [ 900.584438][T19466] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 900.587898][ T5289] usb 1-1: device descriptor read/64, error -71 [ 900.622802][ T29] audit: type=1326 audit(1726457789.115:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19473 comm="syz.2.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 900.772464][ T5289] usb usb1-port1: attempt power cycle [ 900.805078][ T5283] cxacru 4-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 900.825866][ T5283] cxacru 4-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 900.858303][ T5283] cxacru 4-1:0.0: probe with driver cxacru failed with error -22 [ 900.889496][ T5283] usb 4-1: USB disconnect, device number 14 [ 901.207780][ T5289] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 901.259265][ T5289] usb 1-1: device descriptor read/8, error -71 [ 901.468136][ T941] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 901.537641][ T5289] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 901.603747][ T5289] usb 1-1: device descriptor read/8, error -71 [ 901.667419][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 901.690079][ T941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 901.743909][ T941] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 901.754759][ T5289] usb usb1-port1: unable to enumerate USB device [ 901.777957][T19496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 901.780909][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.796298][ T941] usb 3-1: Product: syz [ 901.800974][ T941] usb 3-1: Manufacturer: syz [ 901.806483][ T941] usb 3-1: SerialNumber: syz [ 901.834934][ T941] usb 3-1: config 0 descriptor?? [ 901.851925][ T941] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 901.872405][ T941] usb 3-1: selecting invalid altsetting 1 [ 901.981473][ T5681] usb 5-1: USB disconnect, device number 55 [ 902.089079][ T941] gspca_stk014: init reg: 0x6b [ 902.094162][ T941] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 902.137966][T19501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3113'. [ 902.408137][ T5285] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 902.629790][ T5285] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.649409][ T5681] usb 3-1: USB disconnect, device number 24 [ 902.660538][ T5285] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.703987][ T5285] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 902.727375][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 902.738666][ T5285] usb 4-1: SerialNumber: syz [ 903.579145][T19528] sctp: [Deprecated]: syz.1.3120 (pid 19528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.579145][T19528] Use struct sctp_sack_info instead [ 903.603487][ T5285] usb 4-1: 0:2 : does not exist [ 903.613677][ T5285] usb 4-1: unit 5 not found! [ 903.645907][T19527] sctp: [Deprecated]: syz.1.3120 (pid 19527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.645907][T19527] Use struct sctp_sack_info instead [ 903.669304][ T5285] usb 4-1: USB disconnect, device number 15 [ 903.679315][ T46] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 903.733836][ T8249] udevd[8249]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.847438][ T46] usb 3-1: device descriptor read/64, error -71 [ 904.117251][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 904.277496][ T46] usb 3-1: device descriptor read/64, error -71 [ 904.420285][ T46] usb usb3-port1: attempt power cycle [ 904.837441][ T46] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 904.902261][ T46] usb 3-1: device descriptor read/8, error -71 [ 905.017330][ T5285] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 905.188779][ T46] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 905.227608][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 905.234920][ T5285] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.247980][ T46] usb 3-1: device descriptor read/8, error -71 [ 905.263423][ T5285] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 905.277572][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.312058][ T5285] usb 2-1: Product: syz [ 905.327307][ T5285] usb 2-1: Manufacturer: syz [ 905.347256][ T5285] usb 2-1: SerialNumber: syz [ 905.365410][ T5285] usb 2-1: config 0 descriptor?? [ 905.371416][ T46] usb usb3-port1: unable to enumerate USB device [ 905.388923][ T5285] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 905.406189][ T5285] usb 2-1: selecting invalid altsetting 1 [ 905.591083][ T5285] gspca_stk014: init reg: 0x00 [ 905.595973][ T5285] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 905.780422][T19544] FAULT_INJECTION: forcing a failure. [ 905.780422][T19544] name failslab, interval 1, probability 0, space 0, times 0 [ 905.858369][T19544] CPU: 0 UID: 0 PID: 19544 Comm: syz.4.3126 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 905.869287][T19544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 905.879356][T19544] Call Trace: [ 905.882636][T19544] [ 905.885558][T19544] dump_stack_lvl+0x241/0x360 [ 905.890234][T19544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.895425][T19544] ? __pfx__printk+0x10/0x10 [ 905.900007][T19544] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 905.905895][T19544] ? __pfx___might_resched+0x10/0x10 [ 905.911265][T19544] should_fail_ex+0x3b0/0x4e0 [ 905.915933][T19544] ? new_inode_pseudo+0x8b/0x1a0 [ 905.920869][T19544] should_failslab+0xac/0x100 [ 905.925542][T19544] ? new_inode_pseudo+0x8b/0x1a0 [ 905.930473][T19544] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 905.936186][T19544] new_inode_pseudo+0x8b/0x1a0 [ 905.940947][T19544] path_from_stashed+0x46e/0xba0 [ 905.945880][T19544] ? path_from_stashed+0xe2/0xba0 [ 905.950900][T19544] ? __pfx_path_from_stashed+0x10/0x10 [ 905.956441][T19544] ? __pfx_lock_release+0x10/0x10 [ 905.961472][T19544] open_namespace+0x92/0x180 [ 905.966056][T19544] ? __pfx_open_namespace+0x10/0x10 [ 905.971251][T19544] pidfd_ioctl+0x77a/0x930 [ 905.975664][T19544] __se_compat_sys_ioctl+0x51c/0xca0 [ 905.980948][T19544] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 905.986759][T19544] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 905.992735][T19544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 905.999064][T19544] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 906.005642][T19544] ? lockdep_hardirqs_on+0x99/0x150 [ 906.010831][T19544] __do_fast_syscall_32+0xb4/0x110 [ 906.015935][T19544] ? exc_page_fault+0x590/0x8c0 [ 906.020788][T19544] do_fast_syscall_32+0x34/0x80 [ 906.025632][T19544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 906.031957][T19544] RIP: 0023:0xf742d579 [ 906.036015][T19544] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 906.055616][T19544] RSP: 002b:00000000f56f556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 906.064026][T19544] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ff03 [ 906.071997][T19544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 906.079964][T19544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 906.087928][T19544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 906.095890][T19544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 906.103915][T19544] [ 906.107007][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.106113][T13330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 907.123615][T13330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 907.127286][ T46] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 907.133943][T19555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3131'. [ 907.148572][T13330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 907.158827][T13330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 907.168534][T13330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 907.176421][T13330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.337754][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 907.361133][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.400060][ T46] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 907.411274][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.428936][ T46] usb 3-1: Product: syz [ 907.442996][ T46] usb 3-1: Manufacturer: syz [ 907.453200][ T46] usb 3-1: SerialNumber: syz [ 907.468716][ T46] usb 3-1: config 0 descriptor?? [ 907.478298][ T46] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 907.493324][ T46] usb 3-1: selecting invalid altsetting 1 [ 907.714822][ T46] gspca_stk014: init reg: 0x6b [ 907.733192][T19556] chnl_net:caif_netlink_parms(): no params data found [ 907.756572][ T5681] usb 2-1: USB disconnect, device number 18 [ 907.759328][ T46] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 908.074099][T19556] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.091780][T19556] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.127725][T19556] bridge_slave_0: entered allmulticast mode [ 908.164482][T19556] bridge_slave_0: entered promiscuous mode [ 908.181232][T19556] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.210669][T19556] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.230326][T19556] bridge_slave_1: entered allmulticast mode [ 908.252278][T19556] bridge_slave_1: entered promiscuous mode [ 908.276105][ T46] usb 3-1: USB disconnect, device number 29 [ 908.361359][T19556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.387677][ T5243] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 908.391504][T19556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.554338][T19556] team0: Port device team_slave_0 added [ 908.588013][ T5243] usb 5-1: Using ep0 maxpacket: 16 [ 908.595681][T19556] team0: Port device team_slave_1 added [ 908.603078][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.633158][ T5243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.649302][ T5243] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.673995][ T5243] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 908.685900][T19556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.693626][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.721085][ T5243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.735138][ T5243] usb 5-1: config 0 descriptor?? [ 908.741220][T19556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.786724][T19556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.795007][T19556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.821355][ T46] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 908.832440][T19556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.006023][T19556] hsr_slave_0: entered promiscuous mode [ 909.029994][T19556] hsr_slave_1: entered promiscuous mode [ 909.037483][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 909.047688][T19556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.054822][ T46] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 909.072186][T19556] Cannot create hsr debugfs directory [ 909.087262][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.125250][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.186276][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 909.207817][ T46] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 909.216948][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.227871][ T4628] Bluetooth: hci1: command tx timeout [ 909.233178][ T46] usb 2-1: config 0 descriptor?? [ 909.424037][T19583] netlink: 'syz.2.3138': attribute type 1 has an invalid length. [ 909.463146][T19573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.510862][T19573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.680139][ T46] kye 0003:0458:5011.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 909.698814][ T46] kye 0003:0458:5011.002C: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 909.710115][ T46] kye 0003:0458:5011.002C: tablet-enabling feature report not found [ 909.719065][ T46] kye 0003:0458:5011.002C: tablet enabling failed [ 909.723560][T19556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.070674][ T5243] usbhid 5-1:0.0: can't add hid device: -71 [ 910.076795][ T5243] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 910.122305][ T5243] usb 5-1: USB disconnect, device number 56 [ 910.200748][T19556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.588226][T19556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.659708][T19591] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.845195][T19556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.846111][T13330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 910.868857][T13330] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 910.879529][T13330] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 910.888494][T13330] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 910.896386][T13330] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 910.904291][T13330] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 911.317551][T13330] Bluetooth: hci1: command tx timeout [ 911.402090][T19556] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 911.438983][T19556] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 911.473206][ T5243] usb 2-1: USB disconnect, device number 19 [ 911.477925][T19556] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 911.604590][T19556] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 911.687964][ T5286] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 911.869672][T19556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.898100][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 911.901011][T19593] chnl_net:caif_netlink_parms(): no params data found [ 911.922177][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.942981][T19556] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.970254][ T5286] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 912.007069][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.020218][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.027401][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.071777][ T5286] usb 3-1: Product: syz [ 912.075975][ T5286] usb 3-1: Manufacturer: syz [ 912.082691][ T5286] usb 3-1: SerialNumber: syz [ 912.119255][ T5286] usb 3-1: config 0 descriptor?? [ 912.156625][T19609] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3146'. [ 912.184256][ T5286] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 912.198734][ T5286] usb 3-1: selecting invalid altsetting 1 [ 912.287278][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.294535][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 912.381279][ T5286] gspca_stk014: init reg: 0x00 [ 912.386171][ T5286] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 912.489797][T19593] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.510302][T19593] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.520283][T19593] bridge_slave_0: entered allmulticast mode [ 912.534375][T19593] bridge_slave_0: entered promiscuous mode [ 912.610135][T19593] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.621092][T19593] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.641277][T19593] bridge_slave_1: entered allmulticast mode [ 912.669821][T19593] bridge_slave_1: entered promiscuous mode [ 912.737537][ T5286] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 912.786340][T19593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.814192][T19593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.939241][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 912.958377][ T5286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.962642][T19593] team0: Port device team_slave_0 added [ 912.988323][T13330] Bluetooth: hci7: command tx timeout [ 912.991432][T19593] team0: Port device team_slave_1 added [ 913.003386][ T5286] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 913.019332][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.032052][ T5286] usb 5-1: Product: syz [ 913.036955][ T5286] usb 5-1: Manufacturer: syz [ 913.043827][ T5286] usb 5-1: SerialNumber: syz [ 913.081636][ T5286] usb 5-1: config 0 descriptor?? [ 913.106544][ T5286] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 913.107811][T19593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.128264][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.166902][ T5286] usb 5-1: selecting invalid altsetting 1 [ 913.187552][ T46] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 913.232668][T19593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.275430][T19593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.284017][T19593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.310050][ C1] vkms_vblank_simulate: vblank timer overrun [ 913.329261][T19593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.329697][ T5286] gspca_stk014: init reg: 0x6b [ 913.364823][T19556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.366194][ T5286] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 913.397576][T13330] Bluetooth: hci1: command tx timeout [ 913.417318][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 913.424077][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.436788][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.446734][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 913.460161][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 913.470398][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.481504][ T46] usb 2-1: config 0 descriptor?? [ 913.731591][T19593] hsr_slave_0: entered promiscuous mode [ 913.761872][T19593] hsr_slave_1: entered promiscuous mode [ 913.778627][T19593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 913.799416][ T5289] usb 5-1: USB disconnect, device number 57 [ 913.822518][T19593] Cannot create hsr debugfs directory [ 914.174484][T19618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.199316][T19618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.214682][T19556] veth0_vlan: entered promiscuous mode [ 914.338357][T19593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.426780][T19556] veth1_vlan: entered promiscuous mode [ 914.476380][ T5286] usb 3-1: USB disconnect, device number 30 [ 914.559283][T19624] netlink: 192908 bytes leftover after parsing attributes in process `syz.4.3149'. [ 914.584454][T19624] openvswitch: netlink: Duplicate key (type 0). [ 914.615777][T19593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.665311][T19556] veth0_macvtap: entered promiscuous mode [ 914.706866][T19556] veth1_macvtap: entered promiscuous mode [ 914.773659][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 914.787102][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 914.808027][ T46] usb 2-1: USB disconnect, device number 20 [ 914.954495][T19593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.978611][T19634] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3152'. [ 914.999389][T19635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3154'. [ 915.067569][T13330] Bluetooth: hci7: command tx timeout [ 915.250504][T19593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.321143][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.370175][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.397621][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.427218][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.437074][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.467334][T13330] Bluetooth: hci1: command tx timeout [ 915.512189][T19644] input: syz0 as /devices/virtual/input/input68 [ 915.523060][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.546857][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.559442][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.569948][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.581666][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.592681][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.603599][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.613783][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.625731][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.649897][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 915.661949][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.674756][T19556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 915.693468][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.712402][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.724309][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.735583][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.746122][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.759673][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.770185][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.781319][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.792680][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.797469][ T5286] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 915.803408][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.821855][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.832498][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.842647][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.853778][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.864299][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.879682][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.892867][T19556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 915.905733][T19556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 915.949901][T19556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.999861][T19556] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.027586][T19556] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.043658][ T5286] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 916.067470][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.078787][ T5286] usb 2-1: config 0 descriptor?? [ 916.086113][ T5286] cp210x 2-1:0.0: cp210x converter detected [ 916.086830][T19556] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.135931][T19556] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.392523][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.406228][T19593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 916.408436][ T46] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 916.425918][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.437584][T19593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 916.480048][T19593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 916.498791][T19646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.527716][T19593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 916.573734][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.586913][T19646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.606451][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.637288][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 916.661404][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 916.681803][T19651] netlink: 'syz.4.3159': attribute type 4 has an invalid length. [ 916.723631][T19653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.750663][T19653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.763433][ T46] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 916.790118][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.831614][ T46] usb 3-1: Product: syz [ 916.835837][ T46] usb 3-1: Manufacturer: syz [ 916.848277][ T46] usb 3-1: SerialNumber: syz [ 916.855236][ T46] usb 3-1: config 0 descriptor?? [ 916.863633][ T46] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 916.877668][ T46] usb 3-1: selecting invalid altsetting 1 [ 917.018530][T19593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.055131][T19593] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.091887][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.099098][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.110065][ T46] gspca_stk014: init reg: 0x6b [ 917.115343][ T46] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 917.148672][T13330] Bluetooth: hci7: command tx timeout [ 917.159344][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.166627][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.238121][ T5283] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 917.257615][T12750] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 917.365284][T19593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.450932][T12750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 917.457192][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 917.479432][T12750] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 917.500314][T12750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.512460][ T5283] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 917.518356][T12750] usb 4-1: config 0 descriptor?? [ 917.555393][T19593] veth0_vlan: entered promiscuous mode [ 917.570003][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.582811][ T5283] usb 5-1: Product: syz [ 917.589825][ T5283] usb 5-1: Manufacturer: syz [ 917.595702][ T5283] usb 5-1: SerialNumber: syz [ 917.613979][T19593] veth1_vlan: entered promiscuous mode [ 917.631551][ T5283] usb 5-1: config 0 descriptor?? [ 917.736471][T19656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.763764][ T5681] usb 3-1: USB disconnect, device number 31 [ 917.777088][T19593] veth0_macvtap: entered promiscuous mode [ 917.810053][T19593] veth1_macvtap: entered promiscuous mode [ 917.821160][T19656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.850425][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.863926][ T5283] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 917.880720][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.908605][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.939395][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.951174][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.962444][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.973232][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.985805][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.998450][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.011150][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.025984][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.040763][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.051257][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.063158][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.065682][T19662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.073708][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.095465][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.106179][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.118352][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.136459][T19593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.169462][T19662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.213679][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.219035][T12750] ath6kl: Failed to submit usb control message: -71 [ 918.225668][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.257878][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.258259][T12750] ath6kl: unable to send the bmi data to the device: -71 [ 918.271179][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.287696][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.291533][T12750] ath6kl: Unable to send get target info: -71 [ 918.299129][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.316156][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.327846][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.332001][T12750] ath6kl: Failed to init ath6kl core: -71 [ 918.338552][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.365637][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.376235][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.382616][T12750] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 918.387329][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.405930][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.416973][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.429507][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.440115][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.451967][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.462628][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.475345][T19593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.485897][T19593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.499467][T19593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.506992][T12750] usb 4-1: USB disconnect, device number 16 [ 918.518184][T19593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.526967][T19593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.536301][T19593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.545677][T19593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.690067][ T5286] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 918.729569][ T5286] cp210x 2-1:0.0: querying part number failed [ 918.784096][ T5286] usb 2-1: cp210x converter now attached to ttyUSB0 [ 918.839498][ T5286] usb 2-1: USB disconnect, device number 21 [ 918.853663][ T5286] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 918.870667][ T5286] cp210x 2-1:0.0: device disconnected [ 918.903998][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.922902][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.079324][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.097248][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.167248][ T7539] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 919.237711][T13330] Bluetooth: hci7: command tx timeout [ 919.387573][ T7539] usb 3-1: Using ep0 maxpacket: 16 [ 919.401835][T19674] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3164'. [ 919.418926][ T7539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.436556][ T7539] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.448454][ T7539] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.466866][T19675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 919.474713][ T7539] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 919.559172][ T5283] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 919.592170][ T7539] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.657870][ T5283] usb 5-1: USB disconnect, device number 58 [ 919.668872][ T7539] usb 3-1: config 0 descriptor?? [ 920.114584][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 920.153570][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3168'. [ 920.375602][T19697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3173'. [ 920.432580][T19690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.437464][ T5289] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 920.508188][T19690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.647367][ T5289] usb 4-1: Using ep0 maxpacket: 8 [ 920.655255][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.691281][ T5289] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 920.722985][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.748068][ T5289] usb 4-1: Product: syz [ 920.761024][ T5289] usb 4-1: Manufacturer: syz [ 920.765768][ T5289] usb 4-1: SerialNumber: syz [ 920.793569][ T5289] usb 4-1: config 0 descriptor?? [ 920.809061][T19703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.812258][ T5289] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 920.825893][ T5289] usb 4-1: selecting invalid altsetting 1 [ 920.836339][T19703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.950586][T19703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.990078][T19703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.020500][ T5289] gspca_stk014: init reg: 0x6b [ 921.028322][ T5289] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 921.142294][ T7539] usbhid 3-1:0.0: can't add hid device: -71 [ 921.157411][ T7539] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 921.201486][ T7539] usb 3-1: USB disconnect, device number 32 [ 921.215246][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 921.408824][T12750] usb 4-1: USB disconnect, device number 17 [ 921.517891][T19716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3180'. [ 921.584838][T19717] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.740605][T19720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.777614][T16098] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 921.831404][T19720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.905505][ T29] audit: type=1326 audit(1726457810.905:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 921.982250][ T29] audit: type=1326 audit(1726457810.945:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.009684][T16098] usb 2-1: Using ep0 maxpacket: 8 [ 922.034535][T16098] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.050432][ T29] audit: type=1326 audit(1726457810.945:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.080312][T16098] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 922.097263][T16098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.115681][T16098] usb 2-1: Product: syz [ 922.120301][ T29] audit: type=1326 audit(1726457810.955:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.144017][T16098] usb 2-1: Manufacturer: syz [ 922.156708][T16098] usb 2-1: SerialNumber: syz [ 922.169271][T16098] usb 2-1: config 0 descriptor?? [ 922.175071][ T29] audit: type=1326 audit(1726457810.955:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.211268][T16098] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 922.218508][T16098] usb 2-1: selecting invalid altsetting 1 [ 922.225414][ T29] audit: type=1326 audit(1726457810.955:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.272916][ T29] audit: type=1326 audit(1726457810.955:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.305913][ T5289] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 922.329479][ T29] audit: type=1326 audit(1726457810.965:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.357077][ T29] audit: type=1326 audit(1726457810.965:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.386183][ T29] audit: type=1326 audit(1726457810.965:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19724 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 922.412403][T16098] gspca_stk014: init reg: 0x00 [ 922.417656][T16098] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 922.527490][ T5289] usb 5-1: Using ep0 maxpacket: 16 [ 922.536020][ T5289] usb 5-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 922.549882][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.560424][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 922.571651][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 922.585500][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.604830][ T5289] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 922.618442][ T5289] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 922.627028][ T5289] usb 5-1: Manufacturer: syz [ 922.644649][ T5289] usb 5-1: config 0 descriptor?? [ 922.653273][T19722] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 922.662563][T19732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3185'. [ 923.053746][T19736] binder: 19713:19736 ioctl c0306201 0 returned -14 [ 923.287589][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 923.305983][ T5289] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 923.317428][ T5289] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 923.360769][ T5289] usb 5-1: USB disconnect, device number 59 [ 923.416601][T19738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3186'. [ 924.057835][T16098] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 924.257360][T16098] usb 4-1: Using ep0 maxpacket: 16 [ 924.269454][T16098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.285718][T16098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.296854][T16098] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 924.313479][T16098] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 924.322791][T16098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.332203][T19750] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3191'. [ 924.343831][T16098] usb 4-1: config 0 descriptor?? [ 924.532758][ T941] usb 2-1: USB disconnect, device number 22 [ 924.934703][T19757] xt_CT: You must specify a L4 protocol and not use inversions on it [ 924.975600][T19746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 925.011560][T19746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 925.045870][ T941] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 925.264997][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.280016][T19759] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3194'. [ 925.301589][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.337199][ T941] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 925.377443][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.418707][ T941] usb 2-1: config 0 descriptor?? [ 925.625098][T16098] usbhid 4-1:0.0: can't add hid device: -71 [ 925.644780][T16098] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 925.670809][T16098] usb 4-1: USB disconnect, device number 18 [ 925.777250][ T5289] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 925.862725][ T941] arvo 0003:1E7D:30D4.002D: collection stack underflow [ 925.877429][ T941] arvo 0003:1E7D:30D4.002D: item 0 4 0 12 parsing failed [ 925.895481][ T941] arvo 0003:1E7D:30D4.002D: parse failed [ 925.907209][ T941] arvo 0003:1E7D:30D4.002D: probe with driver arvo failed with error -22 [ 925.989521][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 926.019817][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.059664][ T5289] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 926.077268][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.079444][T19768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3198'. [ 926.087915][ T5289] usb 3-1: Product: syz [ 926.101810][ T5289] usb 3-1: Manufacturer: syz [ 926.106455][ T5289] usb 3-1: SerialNumber: syz [ 926.123731][ T5289] usb 3-1: config 0 descriptor?? [ 926.132092][ T941] usb 2-1: USB disconnect, device number 23 [ 926.134435][ T5289] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 926.158326][ T5289] usb 3-1: selecting invalid altsetting 1 [ 926.187555][T16098] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 926.341978][ T5289] gspca_stk014: init reg: 0x6b [ 926.379872][ T5289] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 926.467301][T16098] usb 4-1: Using ep0 maxpacket: 8 [ 926.485843][T16098] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 926.509559][T16098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.548704][T16098] usb 4-1: Product: syz [ 926.557531][T16098] usb 4-1: Manufacturer: syz [ 926.567672][T16098] usb 4-1: SerialNumber: syz [ 926.579944][T16098] usb 4-1: config 0 descriptor?? [ 926.597524][T16098] option 4-1:0.0: GSM modem (1-port) converter detected [ 926.803686][ T941] usb 4-1: USB disconnect, device number 19 [ 926.817096][ T941] option 4-1:0.0: device disconnected [ 926.907406][T16098] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 926.924424][ T5243] usb 3-1: USB disconnect, device number 33 [ 927.047239][ T5286] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 927.109119][T16098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.133927][T16098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.165162][T16098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.201921][T16098] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= e.00 [ 927.228872][T16098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.252091][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.272482][T16098] usb 5-1: config 0 descriptor?? [ 927.288072][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.327315][ T5286] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 927.345018][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.365125][ T5286] usb 2-1: config 0 descriptor?? [ 927.747930][T16098] kye 0003:0458:0138.002E: item fetching failed at offset 2/5 [ 927.763307][T16098] kye 0003:0458:0138.002E: parse failed [ 927.787057][ T5286] logitech-hidpp-device 0003:046D:C086.002F: ignoring exceeding usage max [ 927.796338][T16098] kye 0003:0458:0138.002E: probe with driver kye failed with error -22 [ 927.816737][ T5286] logitech-hidpp-device 0003:046D:C086.002F: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 927.937306][ T5289] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 928.021072][T19774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.050743][T19774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.083501][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'. [ 928.098697][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.150445][T19774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'. [ 928.161131][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 928.168092][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.192113][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.214243][T19774] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3200'. [ 928.244453][ T5289] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 928.262939][ T5243] usb 5-1: USB disconnect, device number 60 [ 928.285354][T19774] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3200'. [ 928.307575][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.315612][ T5289] usb 3-1: Product: syz [ 928.372755][T12750] usb 2-1: USB disconnect, device number 24 [ 928.384787][ T5289] usb 3-1: Manufacturer: syz [ 928.411911][ T5289] usb 3-1: SerialNumber: syz [ 928.441652][ T5289] usb 3-1: config 0 descriptor?? [ 928.474791][ T5289] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 928.497317][ T5289] usb 3-1: selecting invalid altsetting 1 [ 928.511154][T19785] netlink: 'syz.3.3203': attribute type 1 has an invalid length. [ 928.724974][ T5289] gspca_stk014: init reg: 0x00 [ 928.731092][ T5289] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 928.874298][T19786] bond0: (slave bond_slave_0): Releasing backup interface [ 928.987986][T19788] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 929.055381][T19790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 929.363532][T19796] xt_CT: You must specify a L4 protocol and not use inversions on it [ 929.412368][T19799] binder: 19778:19799 ioctl c0306201 0 returned -14 [ 929.747515][ T5289] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 929.949703][ T5289] usb 2-1: Using ep0 maxpacket: 16 [ 929.959993][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.981234][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 930.002240][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 930.029063][T19805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3209'. [ 930.047032][ T5289] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 930.067194][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.088722][ T5289] usb 2-1: config 0 descriptor?? [ 930.752080][T19800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.774766][T19800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.928655][ T46] usb 3-1: USB disconnect, device number 34 [ 931.381576][ T5289] usbhid 2-1:0.0: can't add hid device: -71 [ 931.403946][ T5289] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 931.423239][ T5289] usb 2-1: USB disconnect, device number 25 [ 931.705943][T19818] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3214'. [ 931.881015][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.887759][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.980632][ T11] bridge_slave_1: left allmulticast mode [ 932.048837][ T11] bridge_slave_1: left promiscuous mode [ 932.076416][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.303826][ T11] bridge_slave_0: left allmulticast mode [ 932.311133][ T11] bridge_slave_0: left promiscuous mode [ 932.320133][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.595207][ T4628] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.612652][ T4628] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.649202][ T4628] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.660218][ T4628] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.687973][ T4628] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 933.711338][ T4628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.979788][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.001904][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.030421][ T11] bond0 (unregistering): Released all slaves [ 934.068247][T19828] netlink: 'syz.2.3217': attribute type 1 has an invalid length. [ 934.098752][T19830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 934.124624][T19831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 934.137735][T19831] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 934.179289][T19836] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 934.249741][T19836] bond1 (unregistering): Released all slaves [ 934.869359][ T5289] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 934.986442][ T11] hsr_slave_0: left promiscuous mode [ 935.018830][ T11] hsr_slave_1: left promiscuous mode [ 935.031872][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.053499][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.074083][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.077258][ T5289] usb 3-1: Using ep0 maxpacket: 8 [ 935.087298][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.096510][ T5289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.127771][T12750] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 935.135322][ T11] veth1_macvtap: left promiscuous mode [ 935.142458][ T11] veth0_macvtap: left promiscuous mode [ 935.149054][ T11] veth1_vlan: left promiscuous mode [ 935.157522][ T11] veth0_vlan: left promiscuous mode [ 935.158401][ T5289] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 935.172556][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.181110][ T5289] usb 3-1: Product: syz [ 935.185844][ T5289] usb 3-1: Manufacturer: syz [ 935.190654][ T5289] usb 3-1: SerialNumber: syz [ 935.216377][ T5289] usb 3-1: config 0 descriptor?? [ 935.246679][ T5289] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 935.256727][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3225'. [ 935.274401][ T5289] usb 3-1: selecting invalid altsetting 1 [ 935.347205][T12750] usb 2-1: Using ep0 maxpacket: 16 [ 935.360570][T12750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.384977][T12750] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.429611][T12750] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.455417][T12750] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 935.473511][ T5289] gspca_stk014: init reg: 0x00 [ 935.489110][ T5289] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 935.499852][T12750] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.525445][T19861] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3226'. [ 935.525480][T12750] usb 2-1: config 0 descriptor?? [ 935.792467][T13330] Bluetooth: hci7: command tx timeout [ 936.106242][T19865] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3227'. [ 936.165476][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 936.179338][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.780930][T12750] usbhid 2-1:0.0: can't add hid device: -71 [ 936.787011][T12750] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 936.827716][T12750] usb 2-1: USB disconnect, device number 26 [ 936.979173][T19875] FAULT_INJECTION: forcing a failure. [ 936.979173][T19875] name failslab, interval 1, probability 0, space 0, times 0 [ 937.108456][T19875] CPU: 0 UID: 0 PID: 19875 Comm: syz.1.3229 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 937.119355][T19875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.129425][T19875] Call Trace: [ 937.132700][T19875] [ 937.135623][T19875] dump_stack_lvl+0x241/0x360 [ 937.140297][T19875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.145505][T19875] ? __pfx__printk+0x10/0x10 [ 937.150110][T19875] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 937.155595][T19875] ? __pfx___might_resched+0x10/0x10 [ 937.160907][T19875] should_fail_ex+0x3b0/0x4e0 [ 937.165621][T19875] should_failslab+0xac/0x100 [ 937.170318][T19875] ? nfnetlink_rcv+0x1265/0x2ad0 [ 937.175254][T19875] __kmalloc_cache_noprof+0x6c/0x2c0 [ 937.180540][T19875] nfnetlink_rcv+0x1265/0x2ad0 [ 937.185321][T19875] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 937.190476][T19875] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.195667][T19875] ? skb_clone+0x240/0x390 [ 937.200082][T19875] ? __pfx_lock_release+0x10/0x10 [ 937.205136][T19875] ? netlink_deliver_tap+0x2e/0x1b0 [ 937.210328][T19875] netlink_unicast+0x7f6/0x990 [ 937.215094][T19875] ? __pfx_netlink_unicast+0x10/0x10 [ 937.220373][T19875] ? __virt_addr_valid+0x183/0x530 [ 937.225563][T19875] ? __check_object_size+0x49c/0x900 [ 937.230844][T19875] ? bpf_lsm_netlink_send+0x9/0x10 [ 937.236039][T19875] netlink_sendmsg+0x8e4/0xcb0 [ 937.240806][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.246160][T19875] ? aa_sock_msg_perm+0x91/0x160 [ 937.251099][T19875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 937.256384][T19875] ? security_socket_sendmsg+0x87/0xb0 [ 937.261845][T19875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.267127][T19875] __sock_sendmsg+0x221/0x270 [ 937.271812][T19875] ____sys_sendmsg+0x525/0x7d0 [ 937.276574][T19875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 937.281869][T19875] __sys_sendmsg+0x2b0/0x3a0 [ 937.286453][T19875] ? __pfx___sys_sendmsg+0x10/0x10 [ 937.291560][T19875] ? vfs_write+0x7c4/0xc90 [ 937.296004][T19875] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 937.302588][T19875] ? lockdep_hardirqs_on+0x99/0x150 [ 937.307781][T19875] __do_fast_syscall_32+0xb4/0x110 [ 937.312887][T19875] ? exc_page_fault+0x590/0x8c0 [ 937.317738][T19875] do_fast_syscall_32+0x34/0x80 [ 937.322581][T19875] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 937.328905][T19875] RIP: 0023:0xf7f53579 [ 937.332964][T19875] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 937.352562][T19875] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 937.361058][T19875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 937.369047][T19875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 937.377008][T19875] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 937.384968][T19875] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 937.393110][T19875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 937.401102][T19875] [ 937.841611][ T46] usb 3-1: USB disconnect, device number 35 [ 937.872952][T13330] Bluetooth: hci7: command tx timeout [ 938.129299][ T11] team0 (unregistering): Port device team_slave_1 removed [ 938.292472][ T11] team0 (unregistering): Port device team_slave_0 removed [ 939.499937][ T4628] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 939.524897][ T4628] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 939.535449][ T4628] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 939.566622][ T4628] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 939.605693][ T4628] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 939.614374][ T4628] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 939.728380][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 939.753532][T19883] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 939.788615][T19886] netlink: 'syz.2.3232': attribute type 1 has an invalid length. [ 939.814349][T19886] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 939.947390][ T4628] Bluetooth: hci7: command tx timeout [ 940.107553][ T941] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 940.329957][ T941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 940.334177][T19842] chnl_net:caif_netlink_parms(): no params data found [ 940.347195][ T941] usb 4-1: can't read configurations, error -61 [ 940.517262][ T941] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 940.639506][T19842] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.663223][T19842] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.682613][T19842] bridge_slave_0: entered allmulticast mode [ 940.698371][T19842] bridge_slave_0: entered promiscuous mode [ 940.710430][ T941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 940.722473][T19842] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.738065][T19842] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.738915][ T941] usb 4-1: can't read configurations, error -61 [ 940.746401][T19842] bridge_slave_1: entered allmulticast mode [ 940.767811][ T941] usb usb4-port1: attempt power cycle [ 940.774174][T19842] bridge_slave_1: entered promiscuous mode [ 940.793653][T19891] chnl_net:caif_netlink_parms(): no params data found [ 940.882227][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.967252][T16098] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 941.018914][ T7539] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 941.032580][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.062659][T19842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.076716][T19842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.176644][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.189062][T16098] usb 3-1: Using ep0 maxpacket: 16 [ 941.197574][T16098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.212687][T16098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.222931][ T7539] usb 2-1: Using ep0 maxpacket: 8 [ 941.228618][ T941] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 941.261947][ T7539] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 941.262665][T19842] team0: Port device team_slave_0 added [ 941.271798][ T7539] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.289535][T16098] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 941.302613][ T7539] usb 2-1: Product: syz [ 941.306843][ T7539] usb 2-1: Manufacturer: syz [ 941.311764][ T7539] usb 2-1: SerialNumber: syz [ 941.319385][T16098] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 941.324608][T19842] team0: Port device team_slave_1 added [ 941.329719][ T941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 941.343541][ T941] usb 4-1: can't read configurations, error -61 [ 941.351377][ T7539] usb 2-1: config 0 descriptor?? [ 941.358385][T16098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.379967][T16098] usb 3-1: config 0 descriptor?? [ 941.403454][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.537295][ T941] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 941.546964][T19842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.573963][ T7539] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 941.575020][T19842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.613494][T19905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.622351][ T941] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 941.633276][ T941] usb 4-1: can't read configurations, error -61 [ 941.643915][ T941] usb usb4-port1: unable to enumerate USB device [ 941.654222][T19905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.669720][T19842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.693947][ T7539] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 941.711327][ T7539] usb 2-1: USB disconnect, device number 27 [ 941.713852][ T4628] Bluetooth: hci8: command tx timeout [ 941.775538][T19842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.810322][T19842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.846562][T19842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.879014][T19891] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.889278][T19891] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.910101][T19891] bridge_slave_0: entered allmulticast mode [ 941.926533][T19891] bridge_slave_0: entered promiscuous mode [ 941.989118][T19891] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.996963][T19891] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.011206][T19891] bridge_slave_1: entered allmulticast mode [ 942.036217][T19891] bridge_slave_1: entered promiscuous mode [ 942.042314][ T4628] Bluetooth: hci7: command tx timeout [ 942.117631][T19913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.153536][T19913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.171525][T19842] hsr_slave_0: entered promiscuous mode [ 942.189406][T19842] hsr_slave_1: entered promiscuous mode [ 942.198539][T19842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 942.207928][T19842] Cannot create hsr debugfs directory [ 942.317736][T19891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.365025][T19891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.578684][T19891] team0: Port device team_slave_0 added [ 942.585856][ T11] bridge_slave_1: left allmulticast mode [ 942.594783][ T11] bridge_slave_1: left promiscuous mode [ 942.601445][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.628461][ T11] bridge_slave_0: left allmulticast mode [ 942.644999][ T11] bridge_slave_0: left promiscuous mode [ 942.652413][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.729349][T16098] usbhid 3-1:0.0: can't add hid device: -71 [ 942.735544][T16098] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 942.746233][T16098] usb 3-1: USB disconnect, device number 36 [ 943.187439][T16098] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 943.389321][T16098] usb 3-1: Using ep0 maxpacket: 16 [ 943.441737][T16098] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 943.451184][T16098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.459761][T16098] usb 3-1: Product: syz [ 943.464054][T16098] usb 3-1: Manufacturer: syz [ 943.468953][T16098] usb 3-1: SerialNumber: syz [ 943.507715][T16098] r8152-cfgselector 3-1: Unknown version 0x0000 [ 943.519138][T16098] r8152-cfgselector 3-1: config 0 descriptor?? [ 943.724057][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.748315][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.763805][ T11] bond0 (unregistering): Released all slaves [ 943.773661][T19924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.792627][ T4628] Bluetooth: hci8: command tx timeout [ 943.862438][T19891] team0: Port device team_slave_1 added [ 943.967615][T19924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.142132][T16098] r8152-cfgselector 3-1: Unknown version 0x0000 [ 944.154782][T16098] r8152-cfgselector 3-1: bad CDC descriptors [ 944.170081][T16098] r8152-cfgselector 3-1: USB disconnect, device number 37 [ 944.213277][T19944] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3245'. [ 944.295640][T19938] netlink: 'syz.1.3244': attribute type 1 has an invalid length. [ 944.489262][T19941] bond2 (unregistering): Released all slaves [ 944.646525][T19956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 944.843472][T19891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.896882][T19891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.922863][ C1] vkms_vblank_simulate: vblank timer overrun [ 944.932143][T19891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.142519][T19891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.187300][T19891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.253805][T19891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.370282][ T11] hsr_slave_0: left promiscuous mode [ 945.376842][ T11] hsr_slave_1: left promiscuous mode [ 945.387864][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.395333][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.405484][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.413569][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.455062][ T11] veth1_macvtap: left promiscuous mode [ 945.461998][ T11] veth0_macvtap: left promiscuous mode [ 945.482698][ T11] veth1_vlan: left promiscuous mode [ 945.488754][ T11] veth0_vlan: left promiscuous mode [ 945.488949][ T5243] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 945.517416][T16098] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 945.678154][ T5243] usb 3-1: Using ep0 maxpacket: 16 [ 945.699319][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.714513][ T5243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.727845][ T5243] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 945.730177][T16098] usb 4-1: Using ep0 maxpacket: 8 [ 945.753964][T16098] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.779211][ T5243] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 945.780385][T16098] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 945.800598][T16098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.803170][ T5243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.810238][T16098] usb 4-1: Product: syz [ 945.821698][T16098] usb 4-1: Manufacturer: syz [ 945.826394][T16098] usb 4-1: SerialNumber: syz [ 945.833520][T16098] usb 4-1: config 0 descriptor?? [ 945.845184][T16098] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 945.852886][T16098] usb 4-1: selecting invalid altsetting 1 [ 945.865391][ T5243] usb 3-1: config 0 descriptor?? [ 945.871397][ T4628] Bluetooth: hci8: command tx timeout [ 946.077430][T16098] gspca_stk014: init reg: 0x00 [ 946.082719][T16098] stk014 4-1:0.0: probe with driver stk014 failed with error -5 [ 946.578497][T19970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.616995][T19970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.257558][ T5243] usbhid 3-1:0.0: can't add hid device: -71 [ 947.294332][ T5243] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 947.340727][ T5243] usb 3-1: USB disconnect, device number 38 [ 947.582437][ T11] team0 (unregistering): Port device team_slave_1 removed [ 947.674564][ T11] team0 (unregistering): Port device team_slave_0 removed [ 947.956306][ T4628] Bluetooth: hci8: command tx timeout [ 948.365658][ T5289] usb 4-1: USB disconnect, device number 24 [ 948.983051][T19891] hsr_slave_0: entered promiscuous mode [ 949.014836][T19891] hsr_slave_1: entered promiscuous mode [ 949.031027][T19891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.060432][T19891] Cannot create hsr debugfs directory [ 949.084246][T19986] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 949.134885][T19987] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 949.144810][T19987] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 949.164338][T19988] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 949.190040][T19988] bond1 (unregistering): Released all slaves [ 949.336604][T19993] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 949.511033][T19995] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 949.540077][T19995] bond2: (slave batadv2): Enslaving as a backup interface with an up link [ 949.596320][T19996] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 949.647312][T19996] bond2 (unregistering): Released all slaves [ 949.722781][T20002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 950.119418][T20011] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3260'. [ 950.187887][ T7539] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 950.470709][ T7539] usb 4-1: Using ep0 maxpacket: 8 [ 950.509315][ T7539] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 950.538702][ T7539] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.587313][ T7539] usb 4-1: Product: syz [ 950.595023][ T7539] usb 4-1: Manufacturer: syz [ 950.600171][ T7539] usb 4-1: SerialNumber: syz [ 950.641747][ T7539] usb 4-1: config 0 descriptor?? [ 950.945535][ T7539] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 951.009483][T19891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.062552][T19891] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.107312][T19842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.125731][T19842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.188852][T19842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.290348][T19891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.312788][T19891] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.357320][T19842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 951.394937][ T5681] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 951.448215][T20030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3263'. [ 951.481511][T19891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.493352][T19891] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.607387][ T5681] usb 2-1: Using ep0 maxpacket: 16 [ 951.614135][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.627514][ T5681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.639632][ T5681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 951.653563][ T5681] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 951.665374][ T5681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.688729][ T5681] usb 2-1: config 0 descriptor?? [ 951.698133][T19891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.757703][T19891] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.183957][ T7539] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 952.235274][ T7539] usb 4-1: USB disconnect, device number 25 [ 952.276840][T19842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.319899][T19891] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 952.343800][T20026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.362016][T19891] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 952.392965][T19891] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 952.398018][T20026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.438031][T19891] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 952.480346][T19842] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.530040][ T3057] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.537290][ T3057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.545043][ T5243] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 952.606322][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.613618][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.739233][ T5243] usb 3-1: Using ep0 maxpacket: 8 [ 952.791139][ T5243] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.901038][ T5243] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 952.904100][T19891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.927285][ T5243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.952072][ T5243] usb 3-1: Product: syz [ 952.958142][ T5243] usb 3-1: Manufacturer: syz [ 952.963668][ T5243] usb 3-1: SerialNumber: syz [ 952.972479][ T5243] usb 3-1: config 0 descriptor?? [ 952.980729][ T5243] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 952.996430][ T5243] usb 3-1: selecting invalid altsetting 1 [ 953.071287][T20054] netlink: 'syz.3.3265': attribute type 1 has an invalid length. [ 953.089792][ T5681] usbhid 2-1:0.0: can't add hid device: -71 [ 953.134227][ T5681] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 953.176400][ T5681] usb 2-1: USB disconnect, device number 28 [ 953.199010][ T5243] gspca_stk014: init reg: 0x00 [ 953.204328][ T5243] stk014 3-1:0.0: probe with driver stk014 failed with error -5 [ 953.266212][T19891] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.315956][T20059] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 953.348584][T20059] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 953.395693][T20062] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 953.436832][T20062] bond1 (unregistering): Released all slaves [ 953.567927][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.575116][T19246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.628602][ T30] INFO: task syz.2.2780:17965 blocked for more than 143 seconds. [ 953.650428][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.657620][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 953.674768][ T5681] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 953.678571][T19842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.687675][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 953.708040][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 953.716767][ T30] task:syz.2.2780 state:D stack:24272 pid:17965 tgid:17964 ppid:16712 flags:0x20000004 [ 953.807293][ T30] Call Trace: [ 953.853528][ T30] [ 953.871278][ T30] __schedule+0x1800/0x4a60 [ 953.875882][ T30] ? __pfx___schedule+0x10/0x10 [ 953.937366][ T5681] usb 2-1: Using ep0 maxpacket: 8 [ 953.954401][ T30] ? __pfx_lock_release+0x10/0x10 [ 953.961403][ T30] ? schedule+0x90/0x320 [ 953.966936][ T30] schedule+0x14b/0x320 [ 953.972011][ T30] ? down_read+0x6a5/0xa40 [ 953.976483][ T30] schedule_preempt_disabled+0x13/0x30 [ 953.985556][ T30] down_read+0x705/0xa40 [ 953.992700][ T30] ? __lock_acquire+0x137a/0x2040 [ 954.003134][ T30] ? __pfx_down_read+0x10/0x10 [ 954.009878][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 954.016509][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 954.022043][ T30] ? __pfx___up_read+0x10/0x10 [ 954.026853][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 954.041213][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 954.057320][ T30] ? count_memcg_event_mm+0x90/0x420 [ 954.062678][ T30] ? __filemap_get_folio+0x984/0xc10 [ 954.086159][ T30] filemap_fault+0x828/0x1760 [ 954.117272][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 954.122988][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 954.147250][ T30] ? __pfx_lock_release+0x10/0x10 [ 954.152408][ T30] ? pte_alloc_one+0x443/0x5d0 [ 954.192620][ T30] __do_fault+0x135/0x460 [ 954.197062][ T30] handle_pte_fault+0x321f/0x6fc0 [ 954.218815][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 954.225633][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 954.257156][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 954.262462][ T30] ? mark_lock+0x9a/0x350 [ 954.291373][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 954.297548][ T30] ? __lock_acquire+0x137a/0x2040 [ 954.302956][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 954.328615][ T30] ? __pfx_lock_release+0x10/0x10 [ 954.334896][ T30] handle_mm_fault+0x1109/0x1bc0 [ 954.355270][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 954.375301][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 954.402633][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 954.418741][ T30] exc_page_fault+0x2b9/0x8c0 [ 954.425158][ T30] asm_exc_page_fault+0x26/0x30 [ 954.449097][ T30] RIP: 0010:__get_user_4+0x11/0x20 [ 954.454346][ T30] Code: 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 954.493589][ T30] RSP: 0018:ffffc9000bb3fc70 EFLAGS: 00050206 [ 954.506886][ T30] RAX: 0000000020000000 RBX: 0000000000000114 RCX: ffffc9000bb3fb03 [ 954.515492][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608f40 [ 954.524313][ T30] RBP: ffff888027680f80 R08: ffffffff9018766f R09: 1ffffffff2030ecd [ 954.533043][ T30] R10: dffffc0000000000 R11: fffffbfff2030ece R12: dffffc0000000000 [ 954.541948][ T30] R13: 0000000020000000 R14: 0000000000002721 R15: ffff88807c68da00 [ 954.550732][ T30] rds_getsockopt+0x80/0x530 [ 954.555902][ T30] ? __pfx_rds_getsockopt+0x10/0x10 [ 954.561721][ T30] do_sock_getsockopt+0x3c4/0x7e0 [ 954.567361][ T30] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 954.573463][ T30] ? __fget_files+0x3f6/0x470 [ 954.579229][ T30] __sys_getsockopt+0x271/0x330 [ 954.584147][ T30] ? __pfx___sys_getsockopt+0x10/0x10 [ 954.591047][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 954.602170][ T30] __ia32_sys_getsockopt+0xb5/0xd0 [ 954.608005][ T30] __do_fast_syscall_32+0xb4/0x110 [ 954.613679][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 954.620530][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 954.626281][ T30] do_fast_syscall_32+0x34/0x80 [ 954.631746][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 954.638352][ T30] RIP: 0023:0xf748d579 [ 954.642983][ T30] RSP: 002b:00000000f577656c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 954.651562][ T30] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000114 [ 954.659737][ T30] RDX: 0000000000002721 RSI: 0000000000000000 RDI: 0000000020000000 [ 954.668605][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 954.677884][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 954.686392][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 954.694609][ T30] [ 954.768195][ T30] INFO: task syz.2.2780:17968 blocked for more than 144 seconds. [ 954.775980][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 954.898146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 954.993268][ T30] task:syz.2.2780 state:D stack:25968 pid:17968 tgid:17964 ppid:16712 flags:0x20000004 [ 955.047829][ T30] Call Trace: [ 955.051210][ T30] [ 955.088560][ T30] __schedule+0x1800/0x4a60 [ 955.120587][ T30] ? __pfx___schedule+0x10/0x10 [ 955.125516][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.168680][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 955.174747][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 955.219763][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 955.224965][ T30] ? schedule+0x90/0x320 [ 955.257147][ T30] schedule+0x14b/0x320 [ 955.261409][ T30] ? down_read+0x6a5/0xa40 [ 955.265872][ T30] schedule_preempt_disabled+0x13/0x30 [ 955.271942][ T30] down_read+0x705/0xa40 [ 955.276256][ T30] ? __lock_acquire+0x137a/0x2040 [ 955.281970][ T30] ? __pfx_down_read+0x10/0x10 [ 955.286867][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 955.292919][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 955.300154][ T30] ? __pfx___up_read+0x10/0x10 [ 955.305766][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 955.314473][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 955.322783][ T30] ? count_memcg_event_mm+0x90/0x420 [ 955.328864][ T30] ? __filemap_get_folio+0x984/0xc10 [ 955.334362][ T30] filemap_fault+0x828/0x1760 [ 955.341140][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 955.346891][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 955.352853][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.358516][ T30] ? pte_alloc_one+0x443/0x5d0 [ 955.363381][ T30] ? __lock_acquire+0x137a/0x2040 [ 955.369816][ T30] __do_fault+0x135/0x460 [ 955.374226][ T30] handle_pte_fault+0x321f/0x6fc0 [ 955.380380][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 955.386242][ T30] ? mark_lock+0x9a/0x350 [ 955.392428][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 955.398311][ T30] ? __lock_acquire+0x137a/0x2040 [ 955.403443][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 955.411502][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.418742][ T30] handle_mm_fault+0x1109/0x1bc0 [ 955.423928][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 955.430606][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 955.437658][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 955.443134][ T30] exc_page_fault+0x2b9/0x8c0 [ 955.448047][ T30] asm_exc_page_fault+0x26/0x30 [ 955.453445][ T30] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 955.459373][ T30] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 955.480229][ T30] RSP: 0018:ffffc90009557a18 EFLAGS: 00050216 [ 955.486369][ T30] RAX: ffffffff84b29801 RBX: 00000000200000a0 RCX: 0000000000000020 [ 955.495097][ T30] RDX: 0000000000000001 RSI: 0000000020000080 RDI: ffffc90009557ae0 [ 955.503794][ T30] RBP: dffffc0000000000 R08: ffffc90009557aff R09: 1ffff920012aaf5f [ 955.512462][ T30] R10: dffffc0000000000 R11: fffff520012aaf60 R12: 0000000020000080 [ 955.523944][ T30] R13: ffff88806705bc00 R14: ffffc90009557ae0 R15: 0000000000000020 [ 955.532155][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 955.538767][ T30] _copy_from_user+0x8c/0xe0 [ 955.543957][ T30] get_user_ifreq+0x116/0x200 [ 955.548970][ T30] sock_do_ioctl+0x1a5/0x460 [ 955.554168][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 955.560005][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 955.565771][ T30] compat_sock_ioctl+0xc87/0xf20 [ 955.571412][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 955.576964][ T30] ? __fget_files+0x29/0x470 [ 955.582230][ T30] ? __fget_files+0x3f6/0x470 [ 955.587007][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 955.593533][ T30] ? security_file_ioctl_compat+0x87/0xb0 [ 955.599941][ T30] __se_compat_sys_ioctl+0x51c/0xca0 [ 955.605904][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 955.611857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 955.618065][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 955.626091][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 955.634852][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 955.640272][ T30] __do_fast_syscall_32+0xb4/0x110 [ 955.646219][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 955.652901][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 955.658247][ T30] do_fast_syscall_32+0x34/0x80 [ 955.663702][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 955.670884][ T30] RIP: 0023:0xf748d579 [ 955.675027][ T30] RSP: 002b:00000000f575556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 955.684264][ T30] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008933 [ 955.692932][ T30] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 955.701286][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 955.710107][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 955.718264][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 955.727891][ T30] [ 955.734409][ T30] INFO: task syz.2.2780:17972 blocked for more than 145 seconds. [ 955.746258][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 955.753991][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 955.764441][ T30] task:syz.2.2780 state:D stack:26224 pid:17972 tgid:17964 ppid:16712 flags:0x20000004 [ 955.786453][ T30] Call Trace: [ 955.789998][ T30] [ 955.792982][ T30] __schedule+0x1800/0x4a60 [ 955.798144][ T30] ? __pfx___schedule+0x10/0x10 [ 955.803175][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.808988][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 955.815538][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 955.822638][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 955.830047][ T30] ? schedule+0x90/0x320 [ 955.834372][ T30] schedule+0x14b/0x320 [ 955.838651][ T30] ? down_read+0x6a5/0xa40 [ 955.843144][ T30] schedule_preempt_disabled+0x13/0x30 [ 955.850916][ T30] down_read+0x705/0xa40 [ 955.855730][ T30] ? __lock_acquire+0x137a/0x2040 [ 955.861417][ T30] ? __pfx_down_read+0x10/0x10 [ 955.866726][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 955.874308][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 955.880327][ T30] ? __pfx___up_read+0x10/0x10 [ 955.885678][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 955.891243][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 955.897225][ T30] ? count_memcg_event_mm+0x90/0x420 [ 955.902579][ T30] ? __filemap_get_folio+0x984/0xc10 [ 955.908506][ T30] filemap_fault+0x828/0x1760 [ 955.913789][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 955.919517][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 955.925300][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.932651][ T30] ? pte_alloc_one+0x443/0x5d0 [ 955.938061][ T30] __do_fault+0x135/0x460 [ 955.943102][ T30] handle_pte_fault+0x321f/0x6fc0 [ 955.959336][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 955.964650][ T30] ? mark_lock+0x9a/0x350 [ 955.970434][ T30] ? mark_lock+0x9a/0x350 [ 955.974850][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 955.981948][ T30] ? __lock_acquire+0x137a/0x2040 [ 955.987072][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 955.993789][ T30] ? __pfx_lock_release+0x10/0x10 [ 955.999736][ T30] handle_mm_fault+0x1109/0x1bc0 [ 956.004766][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 956.010785][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.017693][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 956.023512][ T30] exc_page_fault+0x2b9/0x8c0 [ 956.030461][ T30] asm_exc_page_fault+0x26/0x30 [ 956.035377][ T30] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 956.041797][ T30] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 956.061876][ T30] RSP: 0018:ffffc90009297b10 EFLAGS: 00050206 [ 956.068028][ T30] RAX: ffffffff84b29801 RBX: 000000002000025c RCX: 000000000000001c [ 956.076049][ T30] RDX: 0000000000000001 RSI: 0000000020000240 RDI: ffffc90009297ba0 [ 956.085414][ T30] RBP: ffffc90009297c30 R08: 0000000000000003 R09: fffff52001252f77 [ 956.095155][ T30] R10: dffffc0000000000 R11: fffff52001252f77 R12: 0000000020000240 [ 956.103797][ T30] R13: dffffc0000000000 R14: ffffc90009297ba0 R15: 000000000000001c [ 956.112611][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 956.118722][ T30] _copy_from_user+0x8c/0xe0 [ 956.123887][ T30] get_compat_msghdr+0xae/0x730 [ 956.129355][ T30] ? __fget_files+0x29/0x470 [ 956.136198][ T30] ? __pfx_get_compat_msghdr+0x10/0x10 [ 956.142321][ T30] ? __fget_files+0x3f6/0x470 [ 956.147231][ T30] __sys_sendmsg+0x273/0x3a0 [ 956.151901][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.157191][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 956.164319][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 956.170198][ T30] __do_fast_syscall_32+0xb4/0x110 [ 956.175920][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 956.181430][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 956.187383][ T30] do_fast_syscall_32+0x34/0x80 [ 956.193193][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.203268][ T30] RIP: 0023:0xf748d579 [ 956.207975][ T30] RSP: 002b:00000000f573456c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 956.216460][ T30] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000240 [ 956.224716][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.234903][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.243513][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 956.252122][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.260777][ T30] [ 956.263998][ T30] INFO: task syz.2.2780:17976 blocked for more than 145 seconds. [ 956.274404][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 956.282166][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.291779][ T30] task:syz.2.2780 state:D stack:26224 pid:17976 tgid:17964 ppid:16712 flags:0x20004004 [ 956.302638][ T30] Call Trace: [ 956.306510][ T30] [ 956.311597][ T30] __schedule+0x1800/0x4a60 [ 956.316220][ T30] ? __pfx___schedule+0x10/0x10 [ 956.321311][ T30] ? __pfx_lock_release+0x10/0x10 [ 956.326675][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 956.332870][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.341349][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 956.347079][ T30] ? schedule+0x90/0x320 [ 956.351428][ T30] schedule+0x14b/0x320 [ 956.355622][ T30] ? down_read+0x6a5/0xa40 [ 956.360705][ T30] schedule_preempt_disabled+0x13/0x30 [ 956.366681][ T30] down_read+0x705/0xa40 [ 956.371520][ T30] ? __lock_acquire+0x137a/0x2040 [ 956.385384][ T30] ? __pfx_down_read+0x10/0x10 [ 956.391196][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 956.398783][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 956.404368][ T30] ? __pfx___up_read+0x10/0x10 [ 956.410543][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 956.416433][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 956.426517][ T30] ? count_memcg_event_mm+0x90/0x420 [ 956.432867][ T30] ? __filemap_get_folio+0x984/0xc10 [ 956.439865][ T30] filemap_fault+0x828/0x1760 [ 956.444794][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 956.450522][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 956.455769][ T30] ? __pfx_lock_release+0x10/0x10 [ 956.461945][ T30] ? pte_alloc_one+0x443/0x5d0 [ 956.467688][ T30] __do_fault+0x135/0x460 [ 956.472451][ T30] handle_pte_fault+0x321f/0x6fc0 [ 956.480848][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 956.486140][ T30] ? validate_chain+0x11e/0x5900 [ 956.492147][ T30] ? mark_lock+0x9a/0x350 [ 956.497002][ T30] ? mark_lock+0x9a/0x350 [ 956.502332][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 956.509853][ T30] ? __lock_acquire+0x137a/0x2040 [ 956.514995][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 956.521705][ T30] ? __pfx_lock_release+0x10/0x10 [ 956.526886][ T30] handle_mm_fault+0x1109/0x1bc0 [ 956.534390][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 956.541223][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.548830][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 956.554716][ T30] exc_page_fault+0x2b9/0x8c0 [ 956.560456][ T30] asm_exc_page_fault+0x26/0x30 [ 956.565901][ T30] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 956.572744][ T30] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 956.593694][ T30] RSP: 0018:ffffc9000447fb10 EFLAGS: 00050206 [ 956.600730][ T30] RAX: ffffffff84b29801 RBX: 00000000200007dc RCX: 000000000000001c [ 956.609198][ T30] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: ffffc9000447fba0 [ 956.618709][ T30] RBP: ffffc9000447fc30 R08: 0000000000000003 R09: fffff5200088ff77 [ 956.626732][ T30] R10: dffffc0000000000 R11: fffff5200088ff77 R12: 00000000200007c0 [ 956.635795][ T30] R13: dffffc0000000000 R14: ffffc9000447fba0 R15: 000000000000001c [ 956.647503][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 956.653301][ T30] _copy_from_user+0x8c/0xe0 [ 956.659436][ T30] get_compat_msghdr+0xae/0x730 [ 956.664785][ T30] ? __fget_files+0x29/0x470 [ 956.670523][ T30] ? __pfx_get_compat_msghdr+0x10/0x10 [ 956.676433][ T30] ? __fget_files+0x3f6/0x470 [ 956.681716][ T30] __sys_sendmsg+0x273/0x3a0 [ 956.686352][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 956.692487][ T30] __do_fast_syscall_32+0xb4/0x110 [ 956.698114][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 956.703094][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 956.709947][ T30] do_fast_syscall_32+0x34/0x80 [ 956.714879][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 956.722109][ T30] RIP: 0023:0xf748d579 [ 956.726645][ T30] RSP: 002b:00000000f551156c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 956.737463][ T30] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200007c0 [ 956.746596][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 956.758346][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 956.766488][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 956.775070][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 956.783984][ T30] [ 956.789035][ T30] INFO: task syz.2.2780:17978 blocked for more than 146 seconds. [ 956.796883][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 956.805422][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 956.815670][ T30] task:syz.2.2780 state:D stack:26736 pid:17978 tgid:17964 ppid:16712 flags:0x20000004 [ 956.826748][ T30] Call Trace: [ 956.832468][ T30] [ 956.836297][ T30] __schedule+0x1800/0x4a60 [ 956.843456][ T30] ? __pfx___schedule+0x10/0x10 [ 956.850091][ T30] ? __pfx_lock_release+0x10/0x10 [ 956.855161][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 956.863005][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 956.871128][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 956.876710][ T30] ? schedule+0x90/0x320 [ 956.881595][ T30] schedule+0x14b/0x320 [ 956.885790][ T30] ? down_read+0x6a5/0xa40 [ 956.890932][ T30] schedule_preempt_disabled+0x13/0x30 [ 956.908486][ T30] down_read+0x705/0xa40 [ 956.912981][ T30] ? __lock_acquire+0x137a/0x2040 [ 956.920989][ T30] ? __pfx_down_read+0x10/0x10 [ 956.925822][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 956.935072][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 956.943909][ T30] ? __pfx___up_read+0x10/0x10 [ 956.962810][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 956.971370][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 956.980560][ T30] ? count_memcg_event_mm+0x90/0x420 [ 956.987009][ T30] ? __filemap_get_folio+0x984/0xc10 [ 956.994945][ T30] filemap_fault+0x828/0x1760 [ 957.012632][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 957.019469][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 957.025783][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.033533][ T30] ? pte_alloc_one+0x443/0x5d0 [ 957.040866][ T30] __do_fault+0x135/0x460 [ 957.046319][ T30] handle_pte_fault+0x321f/0x6fc0 [ 957.053774][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 957.071317][ T30] ? validate_chain+0x11e/0x5900 [ 957.076326][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.086514][ T30] ? mark_lock+0x9a/0x350 [ 957.096281][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 957.116105][ T30] ? __lock_acquire+0x137a/0x2040 [ 957.127588][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 957.134586][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.142252][ T30] handle_mm_fault+0x1109/0x1bc0 [ 957.155930][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 957.168625][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 957.175996][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 957.181912][ T30] exc_page_fault+0x2b9/0x8c0 [ 957.186642][ T30] asm_exc_page_fault+0x26/0x30 [ 957.196043][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 957.218320][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 957.242910][ T30] RSP: 0018:ffffc9000923fd10 EFLAGS: 00050202 [ 957.252401][ T30] RAX: ffffffff84b29801 RBX: 0000000020000108 RCX: 0000000000000048 [ 957.279683][ T30] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffc9000923fd80 [ 957.289095][ T30] RBP: ffffc9000923fea8 R08: ffffc9000923fdc7 R09: 1ffff92001247fb8 [ 957.301971][ T30] R10: dffffc0000000000 R11: fffff52001247fb9 R12: 00000000200000c0 [ 957.324961][ T30] R13: ffffc9000923fd80 R14: ffffc9000923fd80 R15: 0000000000000048 [ 957.335495][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 957.341332][ T30] _copy_from_user+0x8c/0xe0 [ 957.357393][ T30] __sys_bpf+0x1a4/0x810 [ 957.362436][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 957.367654][ T30] ? sched_clock_cpu+0x76/0x490 [ 957.372607][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 957.380139][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 957.386722][ T30] __ia32_sys_bpf+0x7c/0x90 [ 957.392482][ T30] __do_fast_syscall_32+0xb4/0x110 [ 957.397788][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 957.404515][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 957.410330][ T30] do_fast_syscall_32+0x34/0x80 [ 957.415725][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.422810][ T30] RIP: 0023:0xf748d579 [ 957.426965][ T30] RSP: 002b:00000000f52ee56c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 957.435552][ T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000200000c0 [ 957.444168][ T30] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.453989][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.465414][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 957.475727][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.485067][ T30] [ 957.493034][ T30] INFO: task syz.2.2780:17980 blocked for more than 147 seconds. [ 957.502101][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 957.510686][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 957.520613][ T30] task:syz.2.2780 state:D stack:26736 pid:17980 tgid:17964 ppid:16712 flags:0x20000004 [ 957.531053][ T30] Call Trace: [ 957.534397][ T30] [ 957.537548][ T30] __schedule+0x1800/0x4a60 [ 957.542717][ T30] ? __pfx___schedule+0x10/0x10 [ 957.549288][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.554968][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 957.562715][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 957.572493][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 957.577791][ T30] ? schedule+0x90/0x320 [ 957.582766][ T30] schedule+0x14b/0x320 [ 957.587621][ T30] ? down_read+0x6a5/0xa40 [ 957.592595][ T30] schedule_preempt_disabled+0x13/0x30 [ 957.598299][ T30] down_read+0x705/0xa40 [ 957.602602][ T30] ? __lock_acquire+0x137a/0x2040 [ 957.607731][ T30] ? __pfx_down_read+0x10/0x10 [ 957.612593][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 957.618891][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 957.624826][ T30] ? __pfx___up_read+0x10/0x10 [ 957.630692][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 957.636646][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 957.643221][ T30] ? count_memcg_event_mm+0x90/0x420 [ 957.649152][ T30] ? __filemap_get_folio+0x984/0xc10 [ 957.655003][ T30] filemap_fault+0x828/0x1760 [ 957.660378][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 957.665584][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 957.673739][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.680586][ T30] ? pte_alloc_one+0x443/0x5d0 [ 957.685919][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 957.691501][ T30] __do_fault+0x135/0x460 [ 957.696412][ T30] handle_pte_fault+0x321f/0x6fc0 [ 957.702118][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 957.708945][ T30] ? validate_chain+0x11e/0x5900 [ 957.714443][ T30] ? stack_depot_save_flags+0x29/0x830 [ 957.720560][ T30] ? mark_lock+0x9a/0x350 [ 957.724984][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 957.730552][ T30] ? __lock_acquire+0x137a/0x2040 [ 957.735684][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 957.741768][ T30] ? __pfx_lock_release+0x10/0x10 [ 957.747408][ T30] handle_mm_fault+0x1109/0x1bc0 [ 957.752929][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 957.758883][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 957.765786][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 957.773245][ T30] exc_page_fault+0x2b9/0x8c0 [ 957.780207][ T30] asm_exc_page_fault+0x26/0x30 [ 957.785122][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 957.793021][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 957.813388][ T30] RSP: 0018:ffffc9000938fd10 EFLAGS: 00050202 [ 957.820161][ T30] RAX: ffffffff84b29801 RBX: 0000000020000494 RCX: 0000000000000094 [ 957.828801][ T30] RDX: 0000000000000001 RSI: 0000000020000400 RDI: ffffc9000938fd80 [ 957.837415][ T30] RBP: ffffc9000938fea8 R08: ffffc9000938fe13 R09: 1ffff92001271fc2 [ 957.845936][ T30] R10: dffffc0000000000 R11: fffff52001271fc3 R12: 0000000020000400 [ 957.854615][ T30] R13: ffffc9000938fd80 R14: ffffc9000938fd80 R15: 0000000000000094 [ 957.863371][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 957.869438][ T30] _copy_from_user+0x8c/0xe0 [ 957.875599][ T30] __sys_bpf+0x1a4/0x810 [ 957.879979][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 957.884859][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 957.893495][ T30] __ia32_sys_bpf+0x7c/0x90 [ 957.900155][ T30] __do_fast_syscall_32+0xb4/0x110 [ 957.905834][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 957.911483][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 957.917333][ T30] do_fast_syscall_32+0x34/0x80 [ 957.922249][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 957.929447][ T30] RIP: 0023:0xf748d579 [ 957.933590][ T30] RSP: 002b:00000000f50cb56c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 957.942097][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000400 [ 957.951679][ T30] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 957.960287][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 957.968931][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 957.979311][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 957.988134][ T30] [ 957.993040][ T30] INFO: task syz.2.2780:17981 blocked for more than 147 seconds. [ 958.003736][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 958.013090][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.022986][ T30] task:syz.2.2780 state:D stack:26736 pid:17981 tgid:17964 ppid:16712 flags:0x20000004 [ 958.044097][ T30] Call Trace: [ 958.048005][ T30] [ 958.051627][ T30] __schedule+0x1800/0x4a60 [ 958.056940][ T30] ? __pfx___schedule+0x10/0x10 [ 958.062748][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.068535][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 958.075113][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.083637][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 958.089456][ T30] ? schedule+0x90/0x320 [ 958.094254][ T30] schedule+0x14b/0x320 [ 958.098643][ T30] ? down_read+0x6a5/0xa40 [ 958.103239][ T30] schedule_preempt_disabled+0x13/0x30 [ 958.112267][ T30] down_read+0x705/0xa40 [ 958.117205][ T30] ? __lock_acquire+0x137a/0x2040 [ 958.122311][ T30] ? __pfx_down_read+0x10/0x10 [ 958.128774][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 958.134921][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 958.140949][ T30] ? __pfx___up_read+0x10/0x10 [ 958.146247][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 958.152611][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 958.159245][ T30] ? count_memcg_event_mm+0x90/0x420 [ 958.165192][ T30] ? __filemap_get_folio+0x984/0xc10 [ 958.170715][ T30] filemap_fault+0x828/0x1760 [ 958.175467][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 958.182255][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 958.188119][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.193755][ T30] ? pte_alloc_one+0x443/0x5d0 [ 958.199147][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 958.204675][ T30] __do_fault+0x135/0x460 [ 958.209680][ T30] handle_pte_fault+0x321f/0x6fc0 [ 958.214789][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 958.221704][ T30] ? validate_chain+0x11e/0x5900 [ 958.227283][ T30] ? stack_depot_save_flags+0x29/0x830 [ 958.233376][ T30] ? mark_lock+0x9a/0x350 [ 958.239433][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 958.244875][ T30] ? __lock_acquire+0x137a/0x2040 [ 958.250110][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 958.256555][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.261838][ T30] handle_mm_fault+0x1109/0x1bc0 [ 958.267511][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 958.273409][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.282436][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 958.288436][ T30] exc_page_fault+0x2b9/0x8c0 [ 958.293724][ T30] asm_exc_page_fault+0x26/0x30 [ 958.299193][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 958.305596][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 958.325612][ T30] RSP: 0018:ffffc90004607d10 EFLAGS: 00050206 [ 958.333001][ T30] RAX: ffffffff84b29801 RBX: 0000000020000590 RCX: 0000000000000090 [ 958.341165][ T30] RDX: 0000000000000001 RSI: 0000000020000500 RDI: ffffc90004607d80 [ 958.351206][ T30] RBP: ffffc90004607ea8 R08: ffffc90004607e0f R09: 1ffff920008c0fc1 [ 958.359930][ T30] R10: dffffc0000000000 R11: fffff520008c0fc2 R12: 0000000020000500 [ 958.368122][ T30] R13: ffffc90004607d80 R14: ffffc90004607d80 R15: 0000000000000090 [ 958.376736][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 958.382704][ T30] _copy_from_user+0x8c/0xe0 [ 958.390075][ T30] __sys_bpf+0x1a4/0x810 [ 958.394931][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 958.400378][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.407476][ T30] __ia32_sys_bpf+0x7c/0x90 [ 958.412652][ T30] __do_fast_syscall_32+0xb4/0x110 [ 958.418023][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 958.423122][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 958.429273][ T30] do_fast_syscall_32+0x34/0x80 [ 958.434306][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.442515][ T30] RIP: 0023:0xf748d579 [ 958.447265][ T30] RSP: 002b:00000000f4ea856c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 958.456508][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000500 [ 958.466472][ T30] RDX: 0000000000000090 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.475110][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.483781][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.494307][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.503019][ T30] [ 958.506407][ T30] INFO: task syz.2.2780:17985 blocked for more than 148 seconds. [ 958.514609][ T30] Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 958.523949][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.532761][ T30] task:syz.2.2780 state:D stack:25520 pid:17985 tgid:17964 ppid:16712 flags:0x20000004 [ 958.543697][ T30] Call Trace: [ 958.547611][ T30] [ 958.551144][ T30] __schedule+0x1800/0x4a60 [ 958.556247][ T30] ? __pfx___schedule+0x10/0x10 [ 958.562971][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.569755][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 958.576664][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.583663][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 958.590571][ T30] ? schedule+0x90/0x320 [ 958.594927][ T30] schedule+0x14b/0x320 [ 958.599329][ T30] ? down_read+0x6a5/0xa40 [ 958.603846][ T30] schedule_preempt_disabled+0x13/0x30 [ 958.609406][ T30] down_read+0x705/0xa40 [ 958.613713][ T30] ? __lock_acquire+0x137a/0x2040 [ 958.618939][ T30] ? __pfx_down_read+0x10/0x10 [ 958.624334][ T30] ? do_sync_mmap_readahead+0x6a0/0x970 [ 958.630637][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 958.636955][ T30] ? __pfx___up_read+0x10/0x10 [ 958.642410][ T30] do_sync_mmap_readahead+0x49c/0x970 [ 958.648501][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 958.655026][ T30] ? count_memcg_event_mm+0x90/0x420 [ 958.661012][ T30] ? __filemap_get_folio+0x984/0xc10 [ 958.666418][ T30] filemap_fault+0x828/0x1760 [ 958.673258][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 958.679740][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 958.685060][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.691789][ T30] ? pte_alloc_one+0x443/0x5d0 [ 958.697226][ T30] __do_fault+0x135/0x460 [ 958.702114][ T30] handle_pte_fault+0x321f/0x6fc0 [ 958.707467][ T30] ? handle_pte_fault+0x2207/0x6fc0 [ 958.713268][ T30] ? mark_lock+0x9a/0x350 [ 958.718184][ T30] ? mark_lock+0x9a/0x350 [ 958.723064][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 958.729127][ T30] ? __lock_acquire+0x137a/0x2040 [ 958.734770][ T30] ? __thp_vma_allowable_orders+0x951/0xa20 [ 958.741281][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.746372][ T30] handle_mm_fault+0x1109/0x1bc0 [ 958.752857][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 958.758367][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.765346][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 958.771580][ T30] exc_page_fault+0x2b9/0x8c0 [ 958.776877][ T30] asm_exc_page_fault+0x26/0x30 [ 958.783440][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 958.790983][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 958.813217][ T30] RSP: 0018:ffffc9000416f850 EFLAGS: 00050202 [ 958.819921][ T30] RAX: ffffffff84b29801 RBX: 00000000200003dc RCX: 000000000000005c [ 958.828587][ T30] RDX: 0000000000000001 RSI: 0000000020000380 RDI: ffffc9000416fb40 [ 958.836663][ T30] RBP: ffffc9000416fd30 R08: 0000000000000003 R09: fffff5200082df73 [ 958.844807][ T30] R10: dffffc0000000000 R11: fffff5200082df73 R12: 0000000020000380 [ 958.853590][ T30] R13: ffffc9000416fb40 R14: ffffc9000416fb40 R15: 000000000000005c [ 958.862276][ T30] ? rcuref_put_slowpath+0x301/0x340 [ 958.868341][ T30] _copy_from_user+0x8c/0xe0 [ 958.873565][ T30] cec_ioctl+0x925/0x3380 [ 958.878742][ T30] ? __pfx_cec_ioctl+0x10/0x10 [ 958.884116][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.892331][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 958.901333][ T30] ? __pfx_lock_release+0x10/0x10 [ 958.906482][ T30] ? kfree+0x149/0x360 [ 958.910888][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 958.916624][ T30] ? __lock_acquire+0x137a/0x2040 [ 958.922324][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 958.928722][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.935445][ T30] ? __fget_files+0x29/0x470 [ 958.940798][ T30] ? __fget_files+0x3f6/0x470 [ 958.946095][ T30] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 958.952417][ T30] ? security_file_ioctl_compat+0x87/0xb0 [ 958.958792][ T30] __se_compat_sys_ioctl+0x51c/0xca0 [ 958.964933][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 958.970959][ T30] ? _copy_from_user+0xa6/0xe0 [ 958.975800][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 958.981925][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 958.989413][ T5681] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 958.999100][ T5681] usb 2-1: can't read configurations, error -110 [ 959.005691][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 959.015598][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 959.021293][ T30] __do_fast_syscall_32+0xb4/0x110 [ 959.026885][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 959.032371][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 959.038061][ T30] do_fast_syscall_32+0x34/0x80 [ 959.043371][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 959.049845][ T30] RIP: 0023:0xf748d579 [ 959.053945][ T30] RSP: 002b:00000000f4c8556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 959.062464][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c05c6104 [ 959.080150][ T30] RDX: 0000000020000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 959.089243][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 959.097729][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 959.111133][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 959.132432][ T30] [ 959.145320][ T30] [ 959.145320][ T30] Showing all locks held in the system: [ 959.157699][ T5681] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 959.188528][ T30] 5 locks held by kworker/u8:0/11: [ 959.193728][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 959.207178][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 959.218441][ T30] #2: ffffffff8fc7f750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 959.228439][ T30] #3: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 959.241009][ T30] #4: ffff8880702f9428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_netns_pre_exit+0xba/0x1e0 [ 959.252300][ T30] 1 lock held by khungtaskd/30: [ 959.259298][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 959.272914][ T30] 3 locks held by kworker/u8:4/61: [ 959.292459][ T30] #0: ffff88802fba0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 959.312523][ T30] #1: ffffc900015cfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 959.340827][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 959.353963][ T30] 3 locks held by kworker/u8:8/2930: [ 959.362794][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 959.406278][ T30] #1: ffffc900099f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 959.422207][ T30] #2: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 959.433756][ T30] 2 locks held by getty/4988: [ 959.453053][ T30] #0: ffff888034b890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 959.463404][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 959.475797][ T30] 5 locks held by kworker/0:6/5681: [ 959.484423][ T30] #0: ffff8880222e2548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 959.497686][ T30] #1: ffffc90002fb7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 959.515655][ T30] #2: ffff8880290ec190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 959.537939][ T30] #3: ffff8880291a5518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 959.553722][ T30] #4: ffff8880283bf368 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 959.578193][ T30] 1 lock held by syz.2.2402/16571: [ 959.584405][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x1fc/0x530 [ 959.598887][ T30] 1 lock held by syz.2.2780/17965: [ 959.605040][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.620451][ T30] 1 lock held by syz.2.2780/17968: [ 959.626812][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.641156][ T30] 1 lock held by syz.2.2780/17972: [ 959.660894][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.674838][ T30] 1 lock held by syz.2.2780/17976: [ 959.682438][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.710418][ T30] 1 lock held by syz.2.2780/17978: [ 959.719840][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.737461][ T30] 1 lock held by syz.2.2780/17980: [ 959.755407][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.768457][ T30] 1 lock held by syz.2.2780/17981: [ 959.774954][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.787548][ T30] 1 lock held by syz.2.2780/17985: [ 959.793830][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.808543][ T30] 2 locks held by kworker/u8:6/19246: [ 959.815002][ T30] 1 lock held by syz.0.3100/19461: [ 959.821375][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.833291][ T30] 1 lock held by syz.4.3204/19788: [ 959.840851][ T30] #0: ffff8880230ace40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 959.852624][ T30] 1 lock held by syz-executor/19842: [ 959.858392][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 959.868100][ T30] 4 locks held by syz-executor/19891: [ 959.873909][ T30] #0: ffff888052424d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 959.884395][ T30] #1: ffff888052424078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 959.894661][ T30] #2: ffffffff8fdf7f28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 959.904878][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 959.915990][ T30] 1 lock held by syz.2.3264/20071: [ 959.923809][ T30] #0: ffffffff8fc8c308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 959.933341][ T30] 2 locks held by syz.1.3266/20063: [ 959.939112][ T30] #0: ffff888031204d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 959.952002][ T30] #1: ffff888031204078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 959.973741][ T30] [ 959.991250][ T30] ============================================= [ 959.991250][ T30] [ 960.030485][ T30] NMI backtrace for cpu 0 [ 960.034985][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 960.045513][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 960.055856][ T30] Call Trace: [ 960.059154][ T30] [ 960.062109][ T30] dump_stack_lvl+0x241/0x360 [ 960.066812][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.072034][ T30] ? __pfx__printk+0x10/0x10 [ 960.076656][ T30] ? vprintk_emit+0x667/0x7c0 [ 960.081361][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 960.086410][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 960.091469][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 960.096965][ T30] ? _printk+0xd5/0x120 [ 960.101151][ T30] ? __pfx__printk+0x10/0x10 [ 960.105774][ T30] ? __wake_up_klogd+0xcc/0x110 [ 960.110653][ T30] ? __pfx__printk+0x10/0x10 [ 960.115259][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 960.120308][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 960.126318][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 960.132343][ T30] watchdog+0xff4/0x1040 [ 960.136612][ T30] ? watchdog+0x1ea/0x1040 [ 960.141144][ T30] ? __pfx_watchdog+0x10/0x10 [ 960.145841][ T30] kthread+0x2f0/0x390 [ 960.149931][ T30] ? __pfx_watchdog+0x10/0x10 [ 960.154895][ T30] ? __pfx_kthread+0x10/0x10 [ 960.159506][ T30] ret_from_fork+0x4b/0x80 [ 960.163943][ T30] ? __pfx_kthread+0x10/0x10 [ 960.168546][ T30] ret_from_fork_asm+0x1a/0x30 [ 960.173346][ T30] [ 960.178220][ T30] Sending NMI from CPU 0 to CPUs 1: [ 960.184376][ C1] NMI backtrace for cpu 1 [ 960.184389][ C1] CPU: 1 UID: 0 PID: 19246 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 960.184411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 960.184422][ C1] Workqueue: bat_events batadv_nc_worker [ 960.184450][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 960.184475][ C1] Code: 8e 4c 89 fe e8 a1 d2 bb 09 31 db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 6f e6 ff ff 66 2e 0f 1f 84 [ 960.184489][ C1] RSP: 0018:ffffc900035879d8 EFLAGS: 00000246 [ 960.184504][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 960.184516][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90187668 [ 960.184527][ C1] RBP: ffffc90003587b40 R08: 0000000000000000 R09: 0000000000000000 [ 960.184539][ C1] R10: dffffc0000000000 R11: fffffbfff2030ece R12: 1ffff920006b0f44 [ 960.184551][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 960.184564][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 960.184580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.184593][ C1] CR2: 000056544f1d3131 CR3: 000000007b168000 CR4: 00000000003506f0 [ 960.184609][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400 [ 960.184626][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 960.184637][ C1] Call Trace: [ 960.184643][ C1] [ 960.184651][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 960.184672][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 960.184695][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 960.184715][ C1] ? nmi_handle+0x2a/0x5a0 [ 960.184772][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 960.184792][ C1] ? nmi_handle+0x14f/0x5a0 [ 960.184808][ C1] ? nmi_handle+0x2a/0x5a0 [ 960.184826][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 960.184846][ C1] ? default_do_nmi+0x63/0x160 [ 960.184866][ C1] ? exc_nmi+0x123/0x1f0 [ 960.184886][ C1] ? end_repeat_nmi+0xf/0x53 [ 960.184913][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 960.184932][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 960.184953][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 960.184973][ C1] [ 960.184978][ C1] [ 960.184985][ C1] lock_acquire+0xd4/0x550 [ 960.185007][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 960.185030][ C1] ? batadv_nc_worker+0xcb/0x610 [ 960.185052][ C1] ? __pfx_lock_release+0x10/0x10 [ 960.185074][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 960.185100][ C1] batadv_nc_worker+0xec/0x610 [ 960.185121][ C1] ? batadv_nc_worker+0xcb/0x610 [ 960.185143][ C1] ? batadv_nc_worker+0xcb/0x610 [ 960.185171][ C1] ? process_scheduled_works+0x945/0x1830 [ 960.185191][ C1] process_scheduled_works+0xa2c/0x1830 [ 960.185227][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.185253][ C1] ? assign_work+0x364/0x3d0 [ 960.185283][ C1] worker_thread+0x870/0xd30 [ 960.185307][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 960.185331][ C1] ? __kthread_parkme+0x169/0x1d0 [ 960.185354][ C1] ? __pfx_worker_thread+0x10/0x10 [ 960.185374][ C1] kthread+0x2f0/0x390 [ 960.185391][ C1] ? __pfx_worker_thread+0x10/0x10 [ 960.185411][ C1] ? __pfx_kthread+0x10/0x10 [ 960.185427][ C1] ret_from_fork+0x4b/0x80 [ 960.185447][ C1] ? __pfx_kthread+0x10/0x10 [ 960.185463][ C1] ret_from_fork_asm+0x1a/0x30 [ 960.185492][ C1] [ 960.227645][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 960.227663][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 960.227685][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 960.227703][ T30] Call Trace: [ 960.227711][ T30] [ 960.227720][ T30] dump_stack_lvl+0x241/0x360 [ 960.227748][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.227768][ T30] ? __pfx__printk+0x10/0x10 [ 960.227783][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 960.227813][ T30] ? vscnprintf+0x5d/0x90 [ 960.227836][ T30] panic+0x349/0x860 [ 960.227856][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 960.227878][ T30] ? __pfx_panic+0x10/0x10 [ 960.227893][ T30] ? __pfx_delay_tsc+0x10/0x10 [ 960.227918][ T30] ? nmi_trigger_cpumask_backtrace+0x1d4/0x320 [ 960.227939][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 960.227958][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 960.227983][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 960.228008][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 960.228032][ T30] watchdog+0x1033/0x1040 [ 960.228057][ T30] ? watchdog+0x1ea/0x1040 [ 960.228084][ T30] ? __pfx_watchdog+0x10/0x10 [ 960.228106][ T30] kthread+0x2f0/0x390 [ 960.228122][ T30] ? __pfx_watchdog+0x10/0x10 [ 960.228144][ T30] ? __pfx_kthread+0x10/0x10 [ 960.228167][ T30] ret_from_fork+0x4b/0x80 [ 960.228188][ T30] ? __pfx_kthread+0x10/0x10 [ 960.228205][ T30] ret_from_fork_asm+0x1a/0x30 [ 960.228240][ T30] [ 960.243959][ T30] Kernel Offset: disabled [ 960.680121][ T30] Rebooting in 86400 seconds..