last executing test programs: 1m58.448670457s ago: executing program 3 (id=2495): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0x6, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m57.084565661s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m41.746085191s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m32.346297667s ago: executing program 1 (id=2588): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="020000"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x2, 0x0, @void, @value}, 0x10) 1m32.097955447s ago: executing program 1 (id=2591): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001900)=""/229, 0xe5}, {0x0}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/121, 0x79}], 0x6}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x8, 0x40000020, 0x0) 1m31.66726115s ago: executing program 1 (id=2594): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 1m24.989495137s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m18.085866306s ago: executing program 1 (id=2594): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 1m0.43840735s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50.292411186s ago: executing program 1 (id=2594): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 40.977300355s ago: executing program 3 (id=2497): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 37.733608191s ago: executing program 1 (id=2594): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) 27.269943876s ago: executing program 4 (id=2810): r0 = socket(0x2b, 0x80801, 0x1) sendmsg$sock(0xffffffffffffffff, 0x0, 0x28000084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) accept4(r2, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$inet6_udp(0x2d, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) getpid() ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000001800)='oom_score\x00') write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x11, 0x60, &(0x7f0000000480)={'filter\x00', 0xb001, 0x4, 0x3f8, 0x110, 0x0, 0x0, 0x310, 0x310, 0x310, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xc0, 0xf0, 0x0, {0x0, 0x1e03}}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x1, 0x6, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @broadcast, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) 26.54320147s ago: executing program 4 (id=2811): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, 0xffffffffffffffff, r0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001c40)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private2}}, &(0x7f0000001d40)=0xe8) (async) r3 = syz_open_dev$I2C(&(0x7f0000001d80), 0x8000000000000001, 0x301000) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001dc0), 0x200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001e00)={0x7, 0xffffffffffffffff, 0x80002}) (async) r6 = syz_open_dev$evdev(&(0x7f0000001e40), 0x9, 0x40181) r7 = syz_open_dev$hiddev(&(0x7f0000001e80), 0x8, 0x1a040) (async) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001ec0), &(0x7f0000001f00)=0x10, 0x80800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001f40)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f80)={0x0, 0x0}, &(0x7f0000001fc0)=0xc) (async) lstat(&(0x7f0000002000)='./file0\x00', &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r13 = getpid() sched_setscheduler(r13, 0x2, &(0x7f0000000200)=0x6) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000020c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async) getgroups(0x2, &(0x7f0000002100)=[0xee00, 0x0]) (async) r16 = getpid() sched_setscheduler(r16, 0x2, &(0x7f0000000200)=0x5) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003640)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000000)="b19d9989e9674af28494f125dd36049ef61189f6e5487b7ca0eda954cf2923e82061aadfe2eb538d7a1500af2d172479", 0x30}, {&(0x7f00000001c0)="33e972fd6e9618551ab1c4cadae1586f9867bd736a095b0b740c1bc3c06cc0f1b18e6058f534cb15e8afeed90ac494f860ae099089633d40f70f9693b3aa4dcf89cae8b9a8d59e162fb4c19850522c6680b3d6adac1819fb9f5a562d9f19b09aab2b071633e82fab06288fd250ee71a5c205d553e9d2ed33483174b82078ac34f3108ee77c9b55c2b42eec16d7d34deda3acf3572a1fcf6b19d1439e1a819aeed8f7052a9450ad2d739d", 0xaa}, {&(0x7f0000000080)="99088ff826fe9db26db6ff6f85eb7cf9de89fb8ba0fed02fb5877523b8f4c5b30010ae", 0x23}], 0x3, 0x0, 0x0, 0x20000810}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="7e534b91fed37e34a853945c67d5c6bb749bdcfb7155d43566215956f13b28c8bfe18e1a2c59e33bc71d497893ef48027917281ffacf47128e903ad48ed34fba71adb86ab3995684601f4acf23036ce9b65db973e63453", 0x57}, {&(0x7f0000000440)="21bf1886844c71edddc6c1ecc1646e195c6ab1fd02d2e508e0e10b0ef213d2d248d06f0ebaed08267d1fb50d352e9144ceafaa786c3dbe65c92ea165fbf110ce5339bbe4654141d8cb3ba13a4ddb6eaf7d5f0a76ce3b961642d803523ca51ebc7f506822757416f0b52fe0ffcf2d556435df0d9ac4180d739632c348e985238241f5522b8b731bd0658c36aaaff038bbc683c436c4ae3f638b6db3c102d27960e0e735b90d93bd6c22cde1274c91d328ac663f29cd4a8e346b49d9795f629993159465b0bfdc87e215dd106676a680e9b3c0e128e1d490a16ea30bd453d6ac378946dda5ed3e3e20ca9deede6c1d423f2dd4", 0xf2}, {&(0x7f00000002c0)="9aadf542a99090d05b225631d3c5094ce766564a62c7b65e764f9f53cc9efa72d8daeb02de75ee03e5dea0e8069d9b70ff417c2135fcbcd3bdee", 0x3a}, {&(0x7f0000000540)="69d6cb2d5712828893c128f9effe05c06038d8c532f331df175053d4fbd4624c9969edf5caa5150c33b0d1e18f18fc4de9d55f88e36cb55807b714d4f670e9e5d01cf922202e09b1cf3b55fdcd6f14cf8a39a2db4cf6a24239ebd7bcd512f4e6b75800de5cedbd99d5671f6711b168fa76d4c4ac2bdbb94d22e1ad18aa4daecd8ae1ad64bedd3b8ee6b26beaab55c39b3e372ef8dfdee198bd77685a85339ba58c8baf5d8ff598144d9552f3a05e73af4b8226b2044629", 0xb7}], 0x4, &(0x7f0000000640), 0x0, 0x4040}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000700)="ceb8eef986417d0ec578aeb6b398a98bc5c0834252bbb79cebc598a9f54507c7c232b968052e37582acb0328197bf6e69dea16699c1b0544cf614e2988b98bb9913cdb0f7c3522ea46891839cd29c3cc218f22eb6618146ab8d2c61d947bd21eb65ee2a86bd7f8f41540faeb83ae4beca84490c34ec167", 0x77}, {&(0x7f0000000780)="a63e4158f38a0a02499e4dbfbe056ae7419b1fbf48f7776141152544a734dde88a294bafca1c9a41b728285ed423438e168e117271440f5bc36db4bca05e87ccd5299d16f00056c355740c1c8db5e0c14fe034d136034f3c6c7511a5e0a7fd8bddc728eed018ffca2df581cebffc858bae66e137e5103166158fb3dca5c99641796a947df0df9d73c4d4b7246ae0aba55218a07ae67fc15ded594260badc705e0bc44b184869684ca3982062212d426baf4c69d76de99c53d3280c11038a2ed6028c6ff621e424dc0be1078af9716112a17cfde731c5533e311eb90cc5f24569df4a0d923210", 0xe6}, {&(0x7f0000000880)="6c4e2ece72e008721aea327545f7904ae486e1c5fcd9f4e1e2f22049bbebeac1b1f94a7d3ab8b99ad2f6aa2fbeb86114cb27e081e7fe5ae5475c7ff721bcaa5472f43c95fa09d9bded75e519b81164e7cc345b0fa504d2a713dcfa48d0ccf3c878c5bc74b4327d3dbf0e6e33e92377f15f25db58e2b3ad3063b0bf0ad8de9b330fb84a91b863d39dd1aedf47d0f65cb7eb8e5735df63963c1661580caabc5c42cfdcd6bd53e2408f27371f5f9d435c5100629ed6d6cb56fa16b3dfb11578a03ccff100d72237f691a769d8a4f8c6f7413cad6df87420e3ca22fbb459949ba099fc0dd3d4cb", 0xe5}, {&(0x7f0000000980)="4ac34100d73cd6c64e249ca4cb9bcc4bdc39af5e007e4137b85f361b8b6bf42093e2b61ef7d038ca382705cab93878b16860f2fa3777b0f94f13bd39f0c7dc1dfb5ee807e7a602535dcdfe8e4d9b06e2238b8163c0fb9371900149cbc7701793b370204c19b0de95ba8a08a64dcdd0f751684803cf17f40c52a32c4f25e6febd2ac227", 0x83}, {&(0x7f0000000a40)="5cb616392db6409bd9bc7f1702f93deb6c153e1ee3", 0x15}, {&(0x7f0000000a80)="f4494f22f8b7823a1fb158535f7f6ea0eefce98178fbe112ae84e04a627a786d7a254d89d29c1c067fc9f68b7c34451fb76a2c3e281fb56098d05d1def54b7971a362fe7eae20151e4164d75d2a7d4ae14beb99639f0a4c2f4ecc30a6d6a7dffcf49ac5ae1c58afbb12f4dd8b29d6b0d1d2218c7b4209e4b01aa7d728f7c4f70ede5eb56202e205e6c9a7a181a128be976b86bab2b1f864474d0ea9a49330c25e7c41a3fcedb968b4bd90560164768c6ca698cf180cd2bc3b1e35be8c76ff05f3c82e00abd47b7ff2db1", 0xca}, {&(0x7f0000000b80)="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", 0x1000}], 0x7, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2}}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r5, r6, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}], 0xb0, 0x48000}}, {{&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000002280)="628baa0073e4fad6139fea10bdd8006a5b56f5f21874672a7285d6caf605e658ed1bccbf23b093493895f6a847b495676c7206a3ecf9628eba7e3fcca8b360788b8d5d717e085ec1cdc76280093aa9e89e0822ddceb2d77b910c197e43d664a4ad31a371ba2309546725cecb4b092fd3ad3404", 0x73}, {&(0x7f0000002300)="8a71a89e526462135eaf501022bad566be4ca61ff70e2a31ceff7414a4a2be2304d182b09f61b335a883be79140a917a5af00f11ed", 0x35}, {&(0x7f0000002340)="f1e98579eba6fd28efd71a6af1a6d10ce66e3795dfd84c5aa1406a07749c9610df37763cb264419ac37cfeaab8ba517fe5f49d5b7ffd5de3685e0574473b7ad8626679689d5a69b66fbeae1f3b1faddf57b3373e82607cfe1bef799fca810ee8f59e2005e3877fee4c2650b0dc4a9d2dee", 0x71}, {&(0x7f00000023c0)="fff5a81ee175b782142acfefba4c8eca757a94f3a7ddddf98a422fc8fc365c638423243e8ba22d5de473417baacce14bc27a63c3246c1d90070249", 0x3b}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)}, {&(0x7f0000003440)="a60d28a5e5df8f5a2c370380cbfcf30956711b0a27fa8da41e25ff6025166f0a7d5e98da8a36e1ce34e0f3f7c81ce121e0e1c571f9a4ebb946135b7dc8e8b80246c801c94b2f3f090dc475c30b3a6d5a1f652db30d94853d006b3a226cca18800f4827dfa8df5bbfcdaad2a5b4947aa96a722ff514b043f7db352dcffc0b3dae61ae3d647acfb8e4f7f2d8c2e3e346179d91230da0e591a35d4bbd274517c1cd9b7c1f2d725b6905480d9d314552f0125ebed9a924abc176c7669ba106c6e659aa5a15873f8e9e5e6c9948472cf2435708dd9ab79a6bf69436b40e06450333ad532af37d512a1d6c", 0xe8}, {&(0x7f0000003540)="46356b7ff9", 0x5}], 0x8, &(0x7f0000003600)=[@cred={{0x1c, 0x1, 0x2, {r16, r18, 0xffffffffffffffff}}}], 0x20, 0x10}}], 0x4, 0x48004) (async) r19 = socket$nl_generic(0x10, 0x3, 0x10) (async) r20 = socket$unix(0x1, 0x2, 0x0) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r20, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r19, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r21, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r22}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 26.424221547s ago: executing program 4 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 25.781688029s ago: executing program 0 (id=2813): r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400, 0x0, 0x3c}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x40, 0xf, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="201428000000aaf354f8c4a55e9c31e2b21e7012ea12a7b385bb3f2749d08b95e5ad2669ddf1284fbc541da3bada92d1fd7187287dfc76d54a367bc290d5f51ae596a354adb7c9bbcca1a46550cddffa6362e186f0f93f57f2d9b384a8e8599e1fd31704f211858c4ace8824cd589a9c98bad54743a3b88dbfafe6d1b706fe155ba681f0c516a8be33ba97412da87ea2debaa4a4fe57365ae32c04bc383b8823d4122937e394099d97ec5389a6ecbf079d431c0f079da84c93615e5bcbfd3ca8a90b"], 0x0, 0x0}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1, 0x0, 0x2}, 0xffffffffffffff17) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0xa, 0x4e06, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000290000003900000000d502"], 0x18}, 0x20040081) read$FUSE(r4, &(0x7f0000002340)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000600)={0x7, 0x8, 0x5, 0xee9d, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r8, 0x0, 0xc1000004, 0x0) ptrace(0x10, r8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 25.760323249s ago: executing program 4 (id=2814): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6d932bbd700000000000010000000800030003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x101) close(0xffffffffffffffff) 25.552730159s ago: executing program 4 (id=2815): futimesat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r6, 0x0, 0x10000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x1, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0xe, 0x6, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x3}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0xf4, 0x1, 0xa7, 0xa, 0x26}, {0x80a0000}, {0x2}, 0xfdfcffdb, 0x0, 0x0, 0x1d0, 0xb, 0xf801, 0x0, [0x3, 0x0, 0x1]}) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRESHEX, @ANYRESOCT=r7, @ANYBLOB="c1cdc922bdb30a2235536ed90d2e77716f848fed86edda2663eebc6582a7067a54e54c354d67e60afa76ef226762a4a5a8061df995811ff7c71f52414f586e7791c3c84f81"], 0x398}}, 0x24000053) 24.447391706s ago: executing program 4 (id=2817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002fc0)=@delchain={0x120, 0x65, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff, 0xffffff00, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @remote}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x7b}, @TCA_FLOWER_ACT={0x90, 0x3, [@m_skbmod={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff9}]}, {0x4d, 0x6, "3bae8a77539cba3d519b8f53a0dd986b5e1c4f3ce300a7d7339580d4acb35069dbca70f25e3006684866b17805bdb7585832176befb2a2bda88f6587c6757f7c6ef66f9e9c75ba48f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x40) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2000c000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x100) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0xfffffffffffff2d1, 0x3, 0x4, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7fe, 0x7, 0x402, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0xa5d}}}, 0x84) lseek(r4, 0xffff, 0x1) unshare(0x8040480) unshare(0x2a020480) write$rfkill(r1, &(0x7f0000000080)={0xffffffff, 0x0, 0x3, 0x1}, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x0, 0xfd}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 20.549061543s ago: executing program 0 (id=2821): r0 = io_uring_setup(0x6d0b, 0x0) io_uring_setup(0x75b0, &(0x7f0000000100)={0x0, 0xfdcf, 0x1, 0x1, 0x0, 0x0, r0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000380)={0x2, 0x85b, 0x7, 0x3, 0x2, "928fa4a3930a5a876e64084d011ff91cdbb8e4"}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpgrp(0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 19.460375719s ago: executing program 0 (id=2823): prctl$PR_CAPBSET_READ(0x59616d61, 0xdaffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12102, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="3e0f21290f20e035200000000f22e0eaa8a94333cc00b9d30200000f320f20c035000004000f22c00f20d835080000000f22d8f33e0f0177000f4bf9b9c60200000f2220", 0x44}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18.255598465s ago: executing program 2 (id=2826): r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r2, &(0x7f0000000180)=[{0x0, 0x24}, {&(0x7f00000012c0)=""/73, 0x49}], 0x2) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) timer_gettime(r1, &(0x7f0000000040)) r5 = syz_io_uring_setup(0x64a, &(0x7f0000000740)={0x0, 0xf542, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close_range(r8, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000240)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x1000000000000, {{0x3, 0x0, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r12, 0x5, &(0x7f0000000200)={0x1}) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x27}, 0x62) 18.115117979s ago: executing program 0 (id=2827): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB='\b\x002\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 17.788313808s ago: executing program 2 (id=2828): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53dedc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fff, 0x1, 0x0, 0x0, 0x0, [{0x56c13638, 0x80000000, 0x664}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100004, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x10) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000280)={0x1, 0x1}) 17.478072322s ago: executing program 2 (id=2829): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="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", 0x1000}) syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000025c0)="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", 0x1000}) (async) 17.312853319s ago: executing program 2 (id=2830): r0 = io_uring_setup(0x5323, &(0x7f00000000c0)={0x0, 0x6852, 0x10, 0x3, 0x2002}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000240)=0x9) close_range(r0, 0xffffffffffffffff, 0x1100) 16.872948976s ago: executing program 2 (id=2831): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) (fail_nth: 4) 16.164941188s ago: executing program 0 (id=2832): openat$kvm(0xffffffffffffff9c, 0x0, 0x838740, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x2c, 0x8c}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) clock_gettime(0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x20, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000004c0)={[0x3]}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000200)=0x3) mmap(&(0x7f00005fe000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x30, r1, 0xffffd000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x50) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000150a01020000c2"], 0x1c}, 0x1, 0x0, 0x0, 0x3002c841}, 0x24040808) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 16.017827559s ago: executing program 0 (id=2833): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f0000000200)=[{0x5, 0x80, 0x81, 0x3ff}]}) syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) r3 = dup(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x96, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xffff}, 0xfffffffffffffca7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getdents(0xffffffffffffff9c, &(0x7f0000000280)=""/245, 0xf5) write$UHID_CREATE(r3, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/164, 0xa4, 0x8ac, 0x9, 0x5, 0x7, 0x9}}, 0x120) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x301002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x12) writev(r6, &(0x7f0000001140)=[{&(0x7f00000010c0)='o', 0x1}], 0x1) 16.017380317s ago: executing program 2 (id=2834): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "720f45582d9e8e23be7292e430f054c18911fb275446aaf8c78a56be86537b89c6a39f7ca9c5ece06a7e0c72176ca40db27b8317ce985caf247cdfb2ccca659a611366c7d07548e97115aad1115927601fc7684d1f698893ad4c965cfe3029b9ff8544b13d1b25845654f38496ffb6f85ff8e843319e687666f4a7e42da7b82662b09391084eda289da1e99c57b4318774a064dae5048db80854eb4d1d8b578cfa9f296a813b95aa9c15d885572774903703a6d03e9f03"}}]}) timer_getoverrun(r3) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000004c00)="b3dc9fe7478480c33fc6be5a279d9eb6", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000004fc0)="06088180b0429ab331ab13f480078d22", 0x10) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) 9.064030674s ago: executing program 32 (id=2817): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002fc0)=@delchain={0x120, 0x65, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff, 0xffffff00, 0xffffff00, 0xff000000]}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @remote}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x7b}, @TCA_FLOWER_ACT={0x90, 0x3, [@m_skbmod={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff9}]}, {0x4d, 0x6, "3bae8a77539cba3d519b8f53a0dd986b5e1c4f3ce300a7d7339580d4acb35069dbca70f25e3006684866b17805bdb7585832176befb2a2bda88f6587c6757f7c6ef66f9e9c75ba48f9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xb}}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x40) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2000c000) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x100) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0xfffffffffffff2d1, 0x3, 0x4, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7fe, 0x7, 0x402, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000340)={0x6, {{0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0xa5d}}}, 0x84) lseek(r4, 0xffff, 0x1) unshare(0x8040480) unshare(0x2a020480) write$rfkill(r1, &(0x7f0000000080)={0xffffffff, 0x0, 0x3, 0x1}, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x63, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x0, 0xfd}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm_detail={0x4, 0x24, 0x13, 0xf}, @mdlm_detail={0x4, 0x24, 0x13, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 53.627072ms ago: executing program 33 (id=2833): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000580)={0x1, &(0x7f0000000200)=[{0x5, 0x80, 0x81, 0x3ff}]}) syz_open_dev$usbmon(&(0x7f0000000140), 0x5a2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) r3 = dup(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x96, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xffff}, 0xfffffffffffffca7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getdents(0xffffffffffffff9c, &(0x7f0000000280)=""/245, 0xf5) write$UHID_CREATE(r3, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000380)=""/164, 0xa4, 0x8ac, 0x9, 0x5, 0x7, 0x9}}, 0x120) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x301002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000040)=0x12) writev(r6, &(0x7f0000001140)=[{&(0x7f00000010c0)='o', 0x1}], 0x1) 0s ago: executing program 34 (id=2834): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) gettid() timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb9, &(0x7f0000000600)=@string={0xb9, 0x3, "720f45582d9e8e23be7292e430f054c18911fb275446aaf8c78a56be86537b89c6a39f7ca9c5ece06a7e0c72176ca40db27b8317ce985caf247cdfb2ccca659a611366c7d07548e97115aad1115927601fc7684d1f698893ad4c965cfe3029b9ff8544b13d1b25845654f38496ffb6f85ff8e843319e687666f4a7e42da7b82662b09391084eda289da1e99c57b4318774a064dae5048db80854eb4d1d8b578cfa9f296a813b95aa9c15d885572774903703a6d03e9f03"}}]}) timer_getoverrun(r3) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000004c00)="b3dc9fe7478480c33fc6be5a279d9eb6", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000004fc0)="06088180b0429ab331ab13f480078d22", 0x10) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) kernel console output (not intermixed with test programs): fr=1, Product=2, SerialNumber=3 [ 669.221519][ T5881] usb 2-1: Product: syz [ 669.225776][ T5881] usb 2-1: Manufacturer: syz [ 669.234213][ T5881] usb 2-1: SerialNumber: syz [ 669.242688][ T5881] usb 2-1: config 0 descriptor?? [ 669.262300][ T5881] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 669.271730][ T5881] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 669.571505][ T5983] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 669.759197][ T5983] usb 4-1: Using ep0 maxpacket: 16 [ 669.784178][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 669.810540][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 669.842956][ T5983] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 669.863373][ T5983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.879784][ T5881] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 669.892010][ T5983] usb 4-1: Product: syz [ 669.900098][ T5881] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 669.907443][ T5983] usb 4-1: Manufacturer: syz [ 669.933334][ T5983] usb 4-1: SerialNumber: syz [ 669.942426][ T5983] usb 4-1: config 0 descriptor?? [ 669.964390][ T5983] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 670.008851][ T5983] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 670.145064][ T5881] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 670.370321][T13621] fuse: Unknown parameter 'grou00000000000000000000' [ 671.039875][T12292] Bluetooth: hci1: command 0x0406 tx timeout [ 671.047290][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 671.109261][T12292] Bluetooth: hci3: command 0x0406 tx timeout [ 671.110089][ T5881] em28xx 2-1:0.0: No AC97 audio processor [ 671.115516][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 671.348155][ T5983] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 671.360755][ T5983] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 671.549119][ T5881] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 671.571181][ T5897] usb 2-1: USB disconnect, device number 39 [ 671.588881][ T5897] em28xx 2-1:0.0: Disconnecting em28xx [ 671.628452][ T5897] em28xx 2-1:0.0: Freeing device [ 671.761637][ T5881] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 672.056414][ T5983] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 672.502165][T13635] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 672.856650][ T5881] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.866281][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.874583][ T5983] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 672.888371][ T5881] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 672.896074][ T5983] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 672.905179][ T5983] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 672.919392][ T5983] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 672.932967][ T5881] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 672.942213][ T5983] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 672.952365][ T5983] usb 4-1: USB disconnect, device number 31 [ 673.119248][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 673.125487][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 673.142958][T13641] 9pnet_fd: Insufficient options for proto=fd [ 673.189071][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 673.195191][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 673.419058][T13626] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 673.431478][ T5881] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 673.445357][ T24] usb 1-1: USB disconnect, device number 38 [ 673.598130][T13647] process 'syz.1.2339' launched './file1' with NULL argv: empty string added [ 673.639458][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 673.662440][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 673.684016][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 673.703282][ T5881] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 673.748320][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.768251][ T5881] usb 5-1: Product: syz [ 673.780474][ T5881] usb 5-1: Manufacturer: syz [ 673.792012][ T5881] usb 5-1: SerialNumber: syz [ 673.809363][ T5881] usb 5-1: config 0 descriptor?? [ 673.833676][ T5881] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 673.856987][ T5881] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 674.486780][ T5881] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 674.652184][T13655] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 674.765167][ T5881] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 675.206251][T12292] Bluetooth: hci1: command 0x0406 tx timeout [ 675.212468][T12292] Bluetooth: hci2: command 0x0406 tx timeout [ 675.420756][ T5881] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 675.674917][ T5881] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 675.684571][ T5881] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 675.692293][ T5881] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 676.438950][ T5881] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 676.449261][ T5881] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 676.626018][ T5881] usb 5-1: USB disconnect, device number 28 [ 677.693959][T13683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 681.319516][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 681.367751][T13707] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 682.240980][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 682.269491][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 682.278629][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.357751][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 682.402543][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 683.152756][T13727] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 684.673982][ T5881] usb 2-1: USB disconnect, device number 40 [ 684.704763][T13734] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.711203][T13734] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.717346][T13734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.724597][T13734] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 684.731364][T13734] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 685.543596][T13769] fuse: Bad value for 'fd' [ 686.105257][T13753] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 686.124263][T13753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 686.141797][T13753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 686.148578][T13753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 686.164159][T13753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 686.755785][T13783] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 687.481947][ T5881] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 687.935375][ T5881] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 687.968288][ T5881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.996904][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.056810][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.124852][ T5881] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 688.149055][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 688.155340][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 688.162966][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 688.229519][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 689.144023][T13810] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 689.619014][ T5881] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 690.209434][T13806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.215691][T13806] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.223260][T13806] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.232044][T13806] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.238208][T13806] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.329879][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 690.362661][ T5881] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 690.404199][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.525143][ T5881] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.538300][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.551136][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.574520][ T5881] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 690.582388][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.599204][ T5881] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.625847][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.723546][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.748288][ T5881] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 690.787409][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 690.808630][ T5881] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.821750][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.837313][ T5881] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 690.859481][ T5881] usb 5-1: string descriptor 0 read error: -22 [ 690.866040][ T5881] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 690.886640][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.933416][ T5881] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 691.112852][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.222602][ T5881] usb 3-1: USB disconnect, device number 44 [ 691.319647][ T24] usb 5-1: USB disconnect, device number 29 [ 691.501414][T13828] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2394'. [ 692.231754][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 692.237910][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 692.321246][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 692.327369][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 692.658946][ T24] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 692.869010][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 692.925067][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 692.999441][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.078526][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 693.210120][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.235328][ T24] usb 5-1: config 0 descriptor?? [ 694.187885][T13844] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 694.194422][T13844] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 694.200709][T13844] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 694.207008][T13844] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 694.213244][T13844] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 694.323204][ T24] usb 5-1: can't set config #0, error -71 [ 694.335492][ T24] usb 5-1: USB disconnect, device number 30 [ 695.988411][T13867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2405'. [ 696.241771][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 696.247945][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 696.254110][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 696.260678][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 697.054022][T13889] nbd: must specify at least one socket [ 699.030601][T13911] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2418'. [ 700.156678][T13917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2420'. [ 700.992590][T13933] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 702.418973][ T44] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 702.630379][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 702.637790][ T44] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 702.668906][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.694075][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.713635][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.729751][ T44] usb 2-1: Product: syz [ 702.734026][ T44] usb 2-1: Manufacturer: syz [ 702.738663][ T44] usb 2-1: SerialNumber: syz [ 702.982565][ T44] usb 2-1: 0:2 : does not exist [ 702.995068][ T44] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 703.040137][ T44] usb 2-1: USB disconnect, device number 41 [ 703.185952][T13960] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2435'. [ 705.969557][T13987] fuse: Bad value for 'group_id' [ 705.974638][T13987] fuse: Bad value for 'group_id' [ 707.499652][ T44] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 708.119628][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 708.130083][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 708.137853][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.151163][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.196471][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.234699][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.306736][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 708.315015][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.340937][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.364175][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.463696][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.476239][ T44] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 708.486507][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 708.498617][ T44] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.517435][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.531756][ T44] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 708.643451][ T44] usb 5-1: string descriptor 0 read error: -22 [ 708.652380][ T44] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 708.661832][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.725365][ T44] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 708.976409][ T44] usb 5-1: USB disconnect, device number 31 [ 709.470647][ T44] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 709.681751][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 709.708622][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.741816][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.928314][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 709.937848][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.952523][ T44] usb 5-1: config 0 descriptor?? [ 710.990530][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 711.029004][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 711.216782][ T44] usb 5-1: USB disconnect, device number 32 [ 714.062703][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2461'. [ 716.484114][T14076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 717.167879][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2469'. [ 719.029338][ T44] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 719.499894][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 719.512387][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 719.530287][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 719.569444][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 719.579075][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.948881][ T44] usb 2-1: Product: syz [ 719.979187][ T44] usb 2-1: Manufacturer: syz [ 719.983959][ T44] usb 2-1: SerialNumber: syz [ 720.065925][ T44] usb 2-1: config 0 descriptor?? [ 720.084328][ T44] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 720.123042][ T44] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 720.509305][ T980] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 720.673774][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 720.686978][ T980] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 720.699687][ T44] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 720.709575][ T44] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 720.721922][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.765958][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.786685][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.000219][ T980] usb 3-1: Product: syz [ 721.107971][ T980] usb 3-1: Manufacturer: syz [ 721.381703][ T44] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 721.411657][ T980] usb 3-1: SerialNumber: syz [ 721.630806][ T44] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 721.643665][ T44] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 721.655998][ T44] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 721.663452][ T44] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 721.674452][ T44] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 721.712683][ T44] usb 2-1: USB disconnect, device number 42 [ 722.383027][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2482'. [ 722.405187][ T980] usb 3-1: 0:2 : does not exist [ 722.435567][ T980] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 722.981520][T14137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2483'. [ 723.222859][ T980] usb 3-1: USB disconnect, device number 45 [ 725.666311][ T5823] syz_tun (unregistering): left allmulticast mode [ 727.005315][T14146] 9pnet_virtio: no channels available for device syz [ 727.042169][T14164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2490'. [ 729.653637][T14198] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 730.852257][T14203] 9pnet_virtio: no channels available for device syz [ 731.906074][T14212] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 733.011400][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2509'. [ 733.833406][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 733.861852][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 733.874141][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 733.882915][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 733.891219][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 733.919122][ T5881] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 734.148992][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 734.252786][ T5881] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 734.320991][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.253345][T14225] chnl_net:caif_netlink_parms(): no params data found [ 735.606953][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.620713][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 735.643001][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.689636][ T5881] usb 1-1: Product: syz [ 735.693894][ T5881] usb 1-1: Manufacturer: syz [ 735.719640][ T5881] usb 1-1: SerialNumber: syz [ 735.936172][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.959012][T14225] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.966340][T14225] bridge_slave_0: entered allmulticast mode [ 735.981450][T14225] bridge_slave_0: entered promiscuous mode [ 735.990645][T14225] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.991231][ T5881] usb 1-1: 0:2 : does not exist [ 735.998034][T14225] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.009615][T13797] Bluetooth: hci0: command tx timeout [ 736.023717][T14225] bridge_slave_1: entered allmulticast mode [ 736.035037][ T5881] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 736.050969][T14225] bridge_slave_1: entered promiscuous mode [ 736.122412][ T5881] usb 1-1: USB disconnect, device number 39 [ 736.128977][ T5983] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 736.208900][T14225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.226404][T14225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.279137][ T5983] usb 5-1: Using ep0 maxpacket: 8 [ 736.290913][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 736.298718][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 736.303650][T14225] team0: Port device team_slave_0 added [ 736.316640][ T5983] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.328240][T14225] team0: Port device team_slave_1 added [ 736.334514][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.346653][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.383809][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 736.396601][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 736.411853][T14225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.421334][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.447797][ T5983] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.448361][T14225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.460553][ T5897] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 736.460745][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.461049][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.463348][ T5983] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 736.516351][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 736.517665][T14225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.528336][ T5983] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 736.548267][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 736.562538][T14225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.585285][ T5983] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 736.592188][T14225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.611671][ T5983] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 736.621846][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 736.639206][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 736.659181][ T5897] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 736.668460][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.677105][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.685615][ T5983] usb 5-1: Product: syz [ 736.690163][ T5983] usb 5-1: Manufacturer: syz [ 736.697717][ T5983] usb 5-1: SerialNumber: syz [ 736.704050][ T5897] usb 2-1: config 0 descriptor?? [ 736.773260][T14225] hsr_slave_0: entered promiscuous mode [ 736.783875][T14225] hsr_slave_1: entered promiscuous mode [ 736.793520][T14225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 736.814316][T14225] Cannot create hsr debugfs directory [ 736.931339][T14247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.952008][ T5897] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 736.965935][T14247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.993277][ T5983] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 737.000951][ T5881] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 737.014583][ T5983] usb 5-1: USB disconnect, device number 33 [ 737.067570][T14225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.162506][ T5897] usb 2-1: USB disconnect, device number 43 [ 737.178995][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 737.180970][T14225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.207183][ T5881] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 737.238897][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.250934][ T5881] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 737.260271][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.275182][ T5881] usb 1-1: Product: syz [ 737.280093][ T5881] usb 1-1: Manufacturer: syz [ 737.314052][ T5881] usb 1-1: SerialNumber: syz [ 737.335528][T14225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.405633][T14225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.536209][ T5881] usb 1-1: 0:2 : does not exist [ 737.578468][ T5881] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 737.608443][T14225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 737.622088][T14225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 737.646491][T14225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 737.646609][ T5881] usb 1-1: USB disconnect, device number 40 [ 737.674480][T14225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 738.069589][T13797] Bluetooth: hci0: command tx timeout [ 738.129372][ T980] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 738.175211][T14225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.223753][T14225] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.273072][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.280293][ T7551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.288879][ T980] usb 5-1: Using ep0 maxpacket: 8 [ 738.303622][ T980] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 738.309710][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.319978][ T7551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.374983][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.414483][ T980] usb 5-1: Product: syz [ 738.427831][ T980] usb 5-1: Manufacturer: syz [ 738.438006][ T980] usb 5-1: SerialNumber: syz [ 738.501431][ T980] usb 5-1: config 0 descriptor?? [ 738.722233][ T980] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 738.754751][T14285] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2530'. [ 738.773518][T14285] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 738.925953][ T980] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 738.943868][ T980] usb 5-1: USB disconnect, device number 34 [ 739.273490][T14225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.152089][T14225] veth0_vlan: entered promiscuous mode [ 740.249013][T13797] Bluetooth: hci0: command tx timeout [ 740.496356][T14312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2539'. [ 740.530373][T14225] veth1_vlan: entered promiscuous mode [ 740.692519][T14315] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2539'. [ 741.393825][T14225] veth0_macvtap: entered promiscuous mode [ 741.405370][T14225] veth1_macvtap: entered promiscuous mode [ 741.435966][T14225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.448837][T14225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.461259][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2543'. [ 741.495766][T14321] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2542'. [ 741.508919][T14321] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 741.573260][T14225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.598613][T14225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.621624][T14225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.635372][T14225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.797408][T13373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.818864][T13373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.839106][ T980] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 741.900779][ T6153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.924758][ T6153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.011900][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 742.027720][ T980] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 742.052177][ T980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 742.086066][ T980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 742.108099][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.126075][ T980] usb 2-1: Product: syz [ 742.134200][ T980] usb 2-1: Manufacturer: syz [ 742.140843][ T980] usb 2-1: SerialNumber: syz [ 742.399287][ T980] usb 2-1: 0:2 : does not exist [ 742.488283][T14346] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2554'. [ 742.505965][T14346] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 742.525267][ T980] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 742.593346][ T980] usb 2-1: USB disconnect, device number 44 [ 742.990020][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.186643][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.299004][ T980] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 743.534251][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.618915][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 743.628590][ T980] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 743.697737][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.703767][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.739032][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.753271][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.815070][ T980] usb 3-1: Product: syz [ 743.825011][ T980] usb 3-1: Manufacturer: syz [ 743.841971][ T980] usb 3-1: SerialNumber: syz [ 744.079019][ T5897] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 744.081532][ T980] usb 3-1: 0:2 : does not exist [ 744.117956][ T60] bridge_slave_1: left allmulticast mode [ 744.125169][ T60] bridge_slave_1: left promiscuous mode [ 744.143933][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.153905][ T980] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 744.197775][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 744.208089][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 744.217803][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 744.230054][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 744.236033][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 744.244286][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 744.255544][ T5897] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 744.268367][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 744.279016][ T60] bridge_slave_0: left allmulticast mode [ 744.280748][ T5897] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.305796][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.308708][ T60] bridge_slave_0: left promiscuous mode [ 744.318008][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 744.336081][ T5897] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 744.343685][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 744.346708][ T980] usb 3-1: USB disconnect, device number 46 [ 744.355518][ T5897] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.378885][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.390354][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 744.405304][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.413827][ T5897] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 744.421888][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 744.433641][ T5897] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 744.805062][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 744.818495][ T5897] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 744.853230][ T5897] usb 1-1: string descriptor 0 read error: -22 [ 745.021256][ T5897] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 745.041294][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.103026][ T5897] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 745.443286][ T980] usb 1-1: USB disconnect, device number 41 [ 745.966800][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.979798][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.991482][ T60] bond0 (unregistering): Released all slaves [ 746.309081][ T51] Bluetooth: hci0: command tx timeout [ 747.268609][T14401] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 747.310734][T14395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 747.370422][T14401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 747.528945][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 748.456608][ T51] Bluetooth: hci0: command tx timeout [ 748.655818][ T60] hsr_slave_0: left promiscuous mode [ 748.659660][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 748.669464][ T5911] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 748.682874][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 748.696909][ T60] hsr_slave_1: left promiscuous mode [ 748.706359][T14420] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2576'. [ 748.706362][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 748.706392][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.720811][T14420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2576'. [ 748.748880][ T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 748.809878][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.817801][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.826105][ T5911] usb 3-1: Product: syz [ 748.830534][ T5911] usb 3-1: Manufacturer: syz [ 748.837845][ T5911] usb 3-1: SerialNumber: syz [ 748.838043][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.862514][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.912173][ T60] veth1_macvtap: left promiscuous mode [ 748.918329][ T60] veth0_macvtap: left promiscuous mode [ 748.929882][ T60] veth1_vlan: left promiscuous mode [ 748.935719][ T60] veth0_vlan: left promiscuous mode [ 748.968933][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 748.981691][ T44] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 748.994085][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.007093][ T44] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.017296][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.025653][ T44] usb 2-1: Product: syz [ 749.030078][ T44] usb 2-1: Manufacturer: syz [ 749.034846][ T44] usb 2-1: SerialNumber: syz [ 749.065906][ T5911] usb 3-1: 0:2 : does not exist [ 749.077684][ T5911] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 749.113313][ T5911] usb 3-1: USB disconnect, device number 47 [ 749.249793][ T44] usb 2-1: 0:2 : does not exist [ 749.264361][ T44] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 749.325240][ T44] usb 2-1: USB disconnect, device number 45 [ 749.629896][ T60] team0 (unregistering): Port device team_slave_1 removed [ 749.689533][ T60] team0 (unregistering): Port device team_slave_0 removed [ 750.297303][T14425] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2578'. [ 750.307453][T14425] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 750.469361][ T51] Bluetooth: hci0: command tx timeout [ 750.493601][T14368] chnl_net:caif_netlink_parms(): no params data found [ 750.800346][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.841470][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.853723][T14368] bridge_slave_0: entered allmulticast mode [ 750.861766][T14368] bridge_slave_0: entered promiscuous mode [ 750.872816][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.880617][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.888595][T14368] bridge_slave_1: entered allmulticast mode [ 750.953937][T14368] bridge_slave_1: entered promiscuous mode [ 751.254734][T14454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2587'. [ 751.366389][T14454] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2587'. [ 751.623069][T14446] 8021q: adding VLAN 0 to HW filter on device bond4 [ 752.245100][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.308601][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.315149][ T51] block nbd20: Receive control failed (result -32) [ 752.332892][ T5911] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 752.359058][ T44] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 752.404850][T14368] team0: Port device team_slave_0 added [ 752.417140][T14368] team0: Port device team_slave_1 added [ 752.463459][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.479579][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.507741][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.523139][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.533390][ T5911] usb 1-1: config 0 has no interfaces? [ 752.539043][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 752.545487][ T5911] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.558599][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.567111][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.573675][ T51] Bluetooth: hci0: command tx timeout [ 752.582059][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.590585][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.617414][ T44] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 752.628466][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.645564][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.658191][ T5911] usb 1-1: config 0 descriptor?? [ 752.666919][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.676649][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.685153][ T44] usb 3-1: Product: syz [ 752.689594][ T44] usb 3-1: Manufacturer: syz [ 752.695051][ T44] usb 3-1: SerialNumber: syz [ 752.799407][T14368] hsr_slave_0: entered promiscuous mode [ 752.806502][T14368] hsr_slave_1: entered promiscuous mode [ 752.814059][T14368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.822546][T14368] Cannot create hsr debugfs directory [ 752.892927][ T5911] usb 1-1: USB disconnect, device number 42 [ 752.928604][ T44] usb 3-1: 0:2 : does not exist [ 752.949884][ T44] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 753.010903][ T44] usb 3-1: USB disconnect, device number 48 [ 753.287514][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 753.366049][T13797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.376366][T13797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 753.385687][T13797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 753.395896][T13797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 753.407581][T13797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.629048][ T5983] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 753.721676][T14483] 8021q: adding VLAN 0 to HW filter on device bond5 [ 753.799527][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 753.812357][ T5983] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 753.815117][T14368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 753.855739][ T5983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 753.866202][T14368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 753.887169][ T5983] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.889938][T14368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 753.912243][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.922633][ T5983] usb 5-1: Product: syz [ 753.928186][ T5983] usb 5-1: Manufacturer: syz [ 753.943282][ T5983] usb 5-1: SerialNumber: syz [ 753.958117][T14368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 754.171384][ T5983] usb 5-1: 0:2 : does not exist [ 754.188101][ T5983] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 754.213408][ T5983] usb 5-1: USB disconnect, device number 35 [ 754.307367][T14475] chnl_net:caif_netlink_parms(): no params data found [ 754.426642][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.076699][T14475] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.094690][T14475] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.118129][T14475] bridge_slave_0: entered allmulticast mode [ 755.144416][T14475] bridge_slave_0: entered promiscuous mode [ 755.149100][ T5983] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 755.179869][T14475] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.188014][T14475] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.199323][T14475] bridge_slave_1: entered allmulticast mode [ 755.247186][T14475] bridge_slave_1: entered promiscuous mode [ 755.342961][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.441400][T13797] Bluetooth: hci1: command tx timeout [ 755.583001][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 755.696461][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.704581][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.722485][ T5983] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 755.732999][ T5983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.751261][ T5983] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.761890][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.772043][ T5983] usb 5-1: Product: syz [ 755.784578][ T5983] usb 5-1: Manufacturer: syz [ 755.793333][ T5983] usb 5-1: SerialNumber: syz [ 755.874884][T14475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.897293][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.904765][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.924185][T14475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.025275][ T5983] usb 5-1: 0:2 : does not exist [ 756.035697][ T5983] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 756.052999][T14475] team0: Port device team_slave_0 added [ 756.094181][ T5983] usb 5-1: USB disconnect, device number 36 [ 756.146967][T14524] 8021q: adding VLAN 0 to HW filter on device bond6 [ 756.166328][T14475] team0: Port device team_slave_1 added [ 756.287011][T14475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.314247][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.340463][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.348211][T14475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.364422][T14475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.377766][T14475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.403762][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.413203][T14475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.442711][T14368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 756.575121][T14475] hsr_slave_0: entered promiscuous mode [ 756.587521][T14475] hsr_slave_1: entered promiscuous mode [ 756.614112][T14475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 756.638709][T14475] Cannot create hsr debugfs directory [ 756.685454][T14539] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2619'. [ 757.428372][T14562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 757.442979][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.469713][T14566] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2627'. [ 757.478056][T14475] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.509525][T13797] Bluetooth: hci1: command tx timeout [ 757.650943][T14475] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.754784][T14475] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.839518][T14368] veth0_vlan: entered promiscuous mode [ 757.876860][T14475] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.945638][T14368] veth1_vlan: entered promiscuous mode [ 758.022266][T14368] veth0_macvtap: entered promiscuous mode [ 758.048299][T14368] veth1_macvtap: entered promiscuous mode [ 758.158010][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.166084][ T44] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 758.180498][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.227194][T14368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.249297][T14368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.258201][T14368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.268349][T14368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.309107][T14369] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 758.321001][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 758.337626][ T44] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 758.342977][T14475] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 758.364382][T14475] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 758.366320][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.390855][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.406299][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.409138][T14475] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 758.431067][ T44] usb 3-1: Product: syz [ 758.435879][ T44] usb 3-1: Manufacturer: syz [ 758.444893][ T44] usb 3-1: SerialNumber: syz [ 758.461124][T14475] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 758.482623][T14369] usb 5-1: Using ep0 maxpacket: 16 [ 758.492154][T14369] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 758.513469][T14369] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 758.541528][T14369] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.557641][T14369] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.575276][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.583928][T14369] usb 5-1: Product: syz [ 758.596917][T14369] usb 5-1: Manufacturer: syz [ 758.598928][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.602225][T14369] usb 5-1: SerialNumber: syz [ 758.670217][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.686635][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.695293][ T44] usb 3-1: 0:2 : does not exist [ 758.709727][ T44] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 758.772620][ T44] usb 3-1: USB disconnect, device number 49 [ 758.817150][T14475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.828347][T14369] usb 5-1: 0:2 : does not exist [ 758.861524][T14475] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.876223][T14369] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 758.911537][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.918856][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.937890][T14369] usb 5-1: USB disconnect, device number 37 [ 759.000207][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.007531][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.390477][ T6153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.593138][T13797] Bluetooth: hci1: command tx timeout [ 760.134339][ T6153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.310986][T14475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.413953][ T6153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.625769][T14475] veth0_vlan: entered promiscuous mode [ 760.689338][ T6153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.736992][T14475] veth1_vlan: entered promiscuous mode [ 760.782330][T14610] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2640'. [ 760.910272][T14475] veth0_macvtap: entered promiscuous mode [ 760.963048][T14475] veth1_macvtap: entered promiscuous mode [ 761.061495][T14475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.071272][ T6153] bridge_slave_1: left allmulticast mode [ 761.076988][ T6153] bridge_slave_1: left promiscuous mode [ 761.093301][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.126361][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 761.138191][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 761.139027][ T980] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 761.146860][ T6153] bridge_slave_0: left allmulticast mode [ 761.163417][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.171095][ T6153] bridge_slave_0: left promiscuous mode [ 761.177372][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.188161][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.197401][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.319001][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 761.326853][ T980] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 761.337944][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 761.352301][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 761.361910][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.370577][ T980] usb 5-1: Product: syz [ 761.375017][ T980] usb 5-1: Manufacturer: syz [ 761.380658][ T980] usb 5-1: SerialNumber: syz [ 761.614767][ T980] usb 5-1: 0:2 : does not exist [ 761.643406][ T980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 761.654574][ T6153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.669247][T13797] Bluetooth: hci1: command tx timeout [ 761.675373][ T6153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.691522][ T6153] bond0 (unregistering): Released all slaves [ 761.702079][ T980] usb 5-1: USB disconnect, device number 38 [ 761.737455][T14475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.753955][T14475] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.779016][T14475] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.798315][T14475] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.808707][T14475] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.269211][T13797] Bluetooth: hci0: command tx timeout [ 763.309428][ T6153] hsr_slave_0: left promiscuous mode [ 763.331607][ T6153] hsr_slave_1: left promiscuous mode [ 763.379685][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.387266][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.442654][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.454207][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.909098][ T6153] veth1_macvtap: left promiscuous mode [ 763.934122][ T6153] veth0_macvtap: left promiscuous mode [ 763.960666][ T6153] veth1_vlan: left promiscuous mode [ 763.982937][ T6153] veth0_vlan: left promiscuous mode [ 764.743335][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 764.795763][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 765.351105][T13797] Bluetooth: hci0: command tx timeout [ 765.433247][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.441377][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.605035][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.637100][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.702323][T14616] chnl_net:caif_netlink_parms(): no params data found [ 766.183232][T14616] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.193021][T14616] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.550875][T14616] bridge_slave_0: entered allmulticast mode [ 766.674262][T14616] bridge_slave_0: entered promiscuous mode [ 766.863452][T14616] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.922207][T14616] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.992652][T14616] bridge_slave_1: entered allmulticast mode [ 767.101562][T14616] bridge_slave_1: entered promiscuous mode [ 767.303188][T14616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.316494][T14616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.366279][T14616] team0: Port device team_slave_0 added [ 767.376163][T14616] team0: Port device team_slave_1 added [ 767.422798][T14616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.446752][T13797] Bluetooth: hci0: command tx timeout [ 767.459996][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 767.502261][T14616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.074532][ T6153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.121032][T14616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.145831][T14616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.197949][T14616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.430618][ T6153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.016362][T14693] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2665'. [ 769.058106][T14616] hsr_slave_0: entered promiscuous mode [ 769.079907][T14616] hsr_slave_1: entered promiscuous mode [ 769.103336][T14616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.136895][T14616] Cannot create hsr debugfs directory [ 769.203084][ T6153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.225186][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 769.234731][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 769.246353][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 769.256124][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 769.265946][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.435762][ T6153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.514466][ T51] Bluetooth: hci0: command tx timeout [ 769.869177][ T980] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 770.009496][ T6153] bridge_slave_1: left allmulticast mode [ 770.015468][ T6153] bridge_slave_1: left promiscuous mode [ 770.022196][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 770.027758][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.039944][ T980] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 770.056870][ T6153] bridge_slave_0: left allmulticast mode [ 770.083009][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 770.099371][ T6153] bridge_slave_0: left promiscuous mode [ 770.110452][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.130902][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.154159][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.208171][ T980] usb 5-1: Product: syz [ 770.213982][ T980] usb 5-1: Manufacturer: syz [ 770.218728][ T980] usb 5-1: SerialNumber: syz [ 770.999431][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 771.007843][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 771.015731][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 771.030002][ T980] usb 5-1: 0:2 : does not exist [ 771.040950][ T980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 771.102089][ T980] usb 5-1: USB disconnect, device number 39 [ 771.352635][ T51] Bluetooth: hci1: command tx timeout [ 771.653101][ T6153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.712932][ T6153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.733752][ T6153] bond0 (unregistering): Released all slaves [ 772.001189][ T5983] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 772.159965][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 772.167935][ T5983] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 772.179779][ T5983] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.201241][ T5983] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 772.211531][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.220154][ T5983] usb 5-1: Product: syz [ 772.261125][ T5983] usb 5-1: Manufacturer: syz [ 772.499107][ T5983] usb 5-1: SerialNumber: syz [ 772.715738][ T5983] usb 5-1: 0:2 : does not exist [ 772.749673][ T5983] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 772.833737][ T5983] usb 5-1: USB disconnect, device number 40 [ 773.065689][ T6153] hsr_slave_0: left promiscuous mode [ 773.075952][ T6153] hsr_slave_1: left promiscuous mode [ 773.083206][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.091743][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.104177][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.112288][ T6153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.143522][ T6153] veth1_macvtap: left promiscuous mode [ 773.150549][ T6153] veth0_macvtap: left promiscuous mode [ 773.156282][ T6153] veth1_vlan: left promiscuous mode [ 773.162688][ T6153] veth0_vlan: left promiscuous mode [ 773.430383][ T51] Bluetooth: hci1: command tx timeout [ 773.717547][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 773.763126][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 774.244502][T14699] chnl_net:caif_netlink_parms(): no params data found [ 774.322318][T14616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 774.360631][T14616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 774.450989][T14751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2681'. [ 774.466452][T14616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 774.472499][T14751] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2681'. [ 774.618902][T14616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 775.519724][ T51] Bluetooth: hci1: command tx timeout [ 775.991031][T14699] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.013438][T14699] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.026086][T14699] bridge_slave_0: entered allmulticast mode [ 776.043158][T14699] bridge_slave_0: entered promiscuous mode [ 776.095668][T14699] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.104005][T14699] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.117620][T14699] bridge_slave_1: entered allmulticast mode [ 776.126959][T14699] bridge_slave_1: entered promiscuous mode [ 776.225160][T14616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.248062][T14616] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.346804][T14616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.371715][T14616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 776.462645][ T7547] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.469988][ T7547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.486982][ T7547] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.494304][ T7547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.742572][T14699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.778554][T14699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.649137][ T51] Bluetooth: hci1: command tx timeout [ 778.807493][T14699] team0: Port device team_slave_0 added [ 778.880954][T14699] team0: Port device team_slave_1 added [ 779.026884][T14699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.036107][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.062505][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.072879][T14699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.125863][T14699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.143364][T14699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.192095][T14699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.302233][T14802] sctp: [Deprecated]: syz.0.2695 (pid 14802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 779.302233][T14802] Use struct sctp_sack_info instead [ 779.621256][T14699] hsr_slave_0: entered promiscuous mode [ 779.633221][T14699] hsr_slave_1: entered promiscuous mode [ 779.643751][T14699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.657633][T14699] Cannot create hsr debugfs directory [ 779.769414][ T980] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 779.887418][T14616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.929019][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 779.999113][ T980] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 780.054674][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.150057][ T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 780.159526][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.167697][ T980] usb 1-1: Product: syz [ 780.177614][ T980] usb 1-1: Manufacturer: syz [ 780.184563][ T980] usb 1-1: SerialNumber: syz [ 780.456620][ T980] usb 1-1: 0:2 : does not exist [ 780.482790][ T980] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 780.530278][ T980] usb 1-1: USB disconnect, device number 43 [ 780.674558][T14616] veth0_vlan: entered promiscuous mode [ 781.223296][T14830] Driver unsupported XDP return value 0 on prog (id 429) dev N/A, expect packet loss! [ 781.286936][T14616] veth1_vlan: entered promiscuous mode [ 781.390596][T14616] veth0_macvtap: entered promiscuous mode [ 781.404750][T14616] veth1_macvtap: entered promiscuous mode [ 781.436818][T14616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.591766][T14616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.662019][T14616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.685843][T14616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.696290][T14616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.706608][T14616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.976596][T14843] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2708'. [ 782.054799][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.079582][T14843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2708'. [ 782.945180][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.965530][T14849] : entered promiscuous mode [ 783.073362][T14699] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.091129][T14699] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.114367][ T7551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.123990][T14699] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 783.130834][ T7551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.169628][T14699] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.625938][T14699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.664646][T14699] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.694073][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.701339][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.737228][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.744535][ T6153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.010733][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.245345][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.411524][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.570794][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.717322][ T60] bridge_slave_1: left allmulticast mode [ 784.723170][ T60] bridge_slave_1: left promiscuous mode [ 784.729883][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.741182][ T60] bridge_slave_0: left allmulticast mode [ 784.748139][ T60] bridge_slave_0: left promiscuous mode [ 784.755634][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.214059][T14888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 785.682320][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.697960][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.716079][ T60] bond0 (unregistering): Released all slaves [ 785.737985][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.756797][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.848287][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 785.891127][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 785.908872][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 785.917256][T14699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.749450][T14900] netlink: 'syz.4.2723': attribute type 11 has an invalid length. [ 786.757843][T14900] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2723'. [ 787.384770][ T60] hsr_slave_0: left promiscuous mode [ 787.413237][ T60] hsr_slave_1: left promiscuous mode [ 787.419718][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.427237][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.520822][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.576129][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.923574][ T60] veth1_macvtap: left promiscuous mode [ 787.960253][ T60] veth0_macvtap: left promiscuous mode [ 787.973185][ T980] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 787.998882][ T5147] Bluetooth: hci0: command tx timeout [ 788.008600][ T60] veth1_vlan: left promiscuous mode [ 788.062424][ T60] veth0_vlan: left promiscuous mode [ 788.200393][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 788.270169][ T980] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 788.343618][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.372357][ T980] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 788.408892][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.416982][ T980] usb 1-1: Product: syz [ 788.616344][ T980] usb 1-1: Manufacturer: syz [ 788.649216][ T980] usb 1-1: SerialNumber: syz [ 788.673926][ T980] usb 1-1: config 0 descriptor?? [ 788.688539][ T980] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 788.723661][ T980] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 789.580909][ T980] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 789.596379][ T980] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 789.749387][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 789.810418][ T60] team0 (unregistering): Port device team_slave_1 removed [ 789.864124][ T60] team0 (unregistering): Port device team_slave_0 removed [ 789.898888][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 789.906584][ T9] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 789.918705][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.930540][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.940044][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.948098][ T9] usb 3-1: Product: syz [ 789.954602][ T9] usb 3-1: Manufacturer: syz [ 789.966800][ T9] usb 3-1: SerialNumber: syz [ 790.012963][ T980] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 790.033200][ T980] em28xx 1-1:0.0: No AC97 audio processor [ 790.069027][ T5147] Bluetooth: hci0: command tx timeout [ 790.184935][ T9] usb 3-1: 0:2 : does not exist [ 790.196010][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 790.235889][ T9] usb 3-1: USB disconnect, device number 50 [ 790.558232][T14699] veth0_vlan: entered promiscuous mode [ 790.599639][T14699] veth1_vlan: entered promiscuous mode [ 790.721342][T14699] veth0_macvtap: entered promiscuous mode [ 790.732550][T14699] veth1_macvtap: entered promiscuous mode [ 790.795125][T14699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.840979][T14699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.848572][T14889] chnl_net:caif_netlink_parms(): no params data found [ 790.859121][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 790.881913][T14699] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.893952][T14699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.903850][T14699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.913064][T14699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.021276][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 791.039500][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.066301][ T9] usb 5-1: config 0 descriptor?? [ 791.098560][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 791.163719][ T5983] usb 1-1: USB disconnect, device number 44 [ 791.182852][ T5983] em28xx 1-1:0.0: Disconnecting em28xx [ 791.325705][ T5983] em28xx 1-1:0.0: Freeing device [ 792.007393][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.030857][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.152376][ T5147] Bluetooth: hci0: command tx timeout [ 792.165042][T14889] bridge_slave_0: entered allmulticast mode [ 792.186245][T14889] bridge_slave_0: entered promiscuous mode [ 792.350040][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.369317][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.389615][T14889] bridge_slave_1: entered allmulticast mode [ 792.409821][T14889] bridge_slave_1: entered promiscuous mode [ 792.631317][ T9] gspca_cpia1: usb_control_msg 01, error -110 [ 792.637591][ T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 792.785216][ T7547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.797619][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.808258][ T7547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.851041][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.040778][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.051596][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.079060][T14889] team0: Port device team_slave_0 added [ 793.159930][T14889] team0: Port device team_slave_1 added [ 793.497632][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.521464][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.565857][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.587880][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.676631][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.793892][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.873067][ T5983] usb 5-1: USB disconnect, device number 41 [ 794.229114][ T5147] Bluetooth: hci0: command tx timeout [ 794.362511][ T2900] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.563727][ T2900] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.617202][T14889] hsr_slave_0: entered promiscuous mode [ 794.624169][T14889] hsr_slave_1: entered promiscuous mode [ 794.631097][T14889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.639366][T14889] Cannot create hsr debugfs directory [ 794.689578][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 794.804230][ T2900] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.953678][ T2900] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.969418][ T5983] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 795.167539][ T5983] usb 5-1: Using ep0 maxpacket: 32 [ 795.180644][ T5983] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 795.189215][ T5983] usb 5-1: config 0 has no interface number 0 [ 795.202260][ T5983] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 795.232037][ T5983] usb 5-1: config 0 interface 1 has no altsetting 0 [ 795.262665][ T5983] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 795.278856][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.293297][ T5983] usb 5-1: Product: syz [ 795.297528][ T5983] usb 5-1: Manufacturer: syz [ 795.333163][ T5983] usb 5-1: SerialNumber: syz [ 795.369613][ T5881] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 795.546938][T13797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 795.560505][T13797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 795.573047][T13797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 795.589405][T13797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 795.602468][T13797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 795.678876][ T5983] usb 5-1: config 0 descriptor?? [ 795.692687][ T2900] bridge_slave_1: left allmulticast mode [ 795.805336][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 795.892108][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 795.942841][ T2900] bridge_slave_1: left promiscuous mode [ 795.967961][ T2900] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.982051][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.013497][ T2900] bridge_slave_0: left allmulticast mode [ 796.013971][ T5881] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 796.028656][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.029753][ T2900] bridge_slave_0: left promiscuous mode [ 796.036950][ T5881] usb 1-1: Product: syz [ 796.042786][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.056930][ T5881] usb 1-1: Manufacturer: syz [ 796.067078][ T5881] usb 1-1: SerialNumber: syz [ 796.089998][ T5881] usb 1-1: config 0 descriptor?? [ 796.110599][ T5881] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 796.131686][ T5881] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 796.253916][T14982] No such timeout policy "syz1" [ 796.554206][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.566143][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.577283][ T2900] bond0 (unregistering): Released all slaves [ 796.617350][ T5983] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 796.645522][ T5983] cx231xx 5-1:0.1: Not found matching IAD interface [ 796.655297][ T5983] usb 5-1: USB disconnect, device number 42 [ 796.724250][ T5881] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 796.736569][ T5881] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 796.750344][ T5881] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 796.757551][ T5881] em28xx 1-1:0.0: No AC97 audio processor [ 796.993491][ T2900] hsr_slave_0: left promiscuous mode [ 797.003599][ T2900] hsr_slave_1: left promiscuous mode [ 797.010056][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.017602][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.030463][ T2900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.046554][ T2900] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.079323][ T2900] veth1_macvtap: left promiscuous mode [ 797.084978][ T2900] veth0_macvtap: left promiscuous mode [ 797.095630][ T2900] veth1_vlan: left promiscuous mode [ 797.102034][ T2900] veth0_vlan: left promiscuous mode [ 797.157627][T14990] delete_channel: no stack [ 797.166173][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 797.216048][ T30] audit: type=1800 audit(1749992677.547:2): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2749" name="/" dev="9p" ino=2 res=0 errno=0 [ 797.663459][ T5983] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 797.775930][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 797.820817][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 797.853742][ T5983] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 797.864054][ T5983] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 797.884762][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.915166][ T5147] Bluetooth: hci1: command tx timeout [ 797.919995][ T5983] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 798.146557][ T5881] usb 1-1: USB disconnect, device number 45 [ 798.161070][ T5881] em28xx 1-1:0.0: Disconnecting em28xx [ 798.177458][ T5881] em28xx 1-1:0.0: Freeing device [ 798.478635][T14889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.504703][T15005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2752'. [ 798.584202][T14889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.637801][T14889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 798.699598][T14889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 798.839570][T14975] chnl_net:caif_netlink_parms(): no params data found [ 799.013532][ T5983] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 799.038893][ T5983] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 799.048667][ T5983] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 799.073732][ T5983] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 799.119441][ T5983] usb 3-1: USB disconnect, device number 51 [ 799.145143][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2754'. [ 799.226491][T14975] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.244000][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.257022][T14975] bridge_slave_0: entered allmulticast mode [ 799.266492][T14975] bridge_slave_0: entered promiscuous mode [ 799.298027][T14975] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.306143][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.315794][T14975] bridge_slave_1: entered allmulticast mode [ 799.325761][T14975] bridge_slave_1: entered promiscuous mode [ 799.488477][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.517072][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.706756][T14975] team0: Port device team_slave_0 added [ 799.884082][T14975] team0: Port device team_slave_1 added [ 799.989189][ T5147] Bluetooth: hci1: command tx timeout [ 800.118350][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.136883][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.171127][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.186437][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.201220][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.277175][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.311346][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.453201][T14975] hsr_slave_0: entered promiscuous mode [ 800.478288][T14975] hsr_slave_1: entered promiscuous mode [ 800.489225][T14975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.497075][T14975] Cannot create hsr debugfs directory [ 800.546165][T15039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2761'. [ 800.672285][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.734483][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.741860][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.790737][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.797958][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.890684][T15047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 800.939264][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 801.020572][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2767'. [ 801.067480][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2767'. [ 801.098986][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 801.120294][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 801.157706][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 801.181868][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 801.193636][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.204404][ T24] usb 3-1: Product: syz [ 801.208628][ T24] usb 3-1: Manufacturer: syz [ 801.300883][ T24] usb 3-1: SerialNumber: syz [ 801.326147][ T24] usb 3-1: config 0 descriptor?? [ 801.342181][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 801.358993][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 801.623460][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.726758][T14975] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.739212][ T44] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 801.739964][T14975] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.799120][T14975] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.817275][T14975] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.856903][T14889] veth0_vlan: entered promiscuous mode [ 801.899071][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 801.906969][ T44] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 801.918198][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 801.932969][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 801.942863][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.952615][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 801.959601][ T44] usb 1-1: Product: syz [ 801.964508][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 801.974670][T14889] veth1_vlan: entered promiscuous mode [ 801.982082][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 801.996591][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 802.007505][ T44] usb 1-1: Manufacturer: syz [ 802.020554][ T44] usb 1-1: SerialNumber: syz [ 802.069294][ T5147] Bluetooth: hci1: command tx timeout [ 802.120178][T14889] veth0_macvtap: entered promiscuous mode [ 802.143344][T14889] veth1_macvtap: entered promiscuous mode [ 802.217568][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 802.242440][ T44] usb 1-1: 0:2 : does not exist [ 802.253791][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.270788][ T44] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 802.281927][T14975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.295701][T14889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.306307][T14889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.328111][ T44] usb 1-1: USB disconnect, device number 46 [ 802.335563][T14889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.349180][T14889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.452980][T14975] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.506919][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.514352][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.550444][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.557767][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.599888][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.608013][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.677480][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.688527][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.052291][T14975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.113836][T14975] veth0_vlan: entered promiscuous mode [ 803.135893][T14975] veth1_vlan: entered promiscuous mode [ 803.254320][T14917] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.341917][T14975] veth0_macvtap: entered promiscuous mode [ 803.372645][T14975] veth1_macvtap: entered promiscuous mode [ 803.437711][T14917] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.505243][T14975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.519981][T14975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.556436][T14917] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.576315][T14975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.585856][T14975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.596704][T14975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.606766][T14975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.667942][T14917] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.727702][ T9] usb 3-1: USB disconnect, device number 52 [ 803.750577][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 803.762732][ T9] em28xx 3-1:0.0: Freeing device [ 803.789369][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.804720][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.879120][T13373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.887314][T14917] bridge_slave_1: left allmulticast mode [ 803.893174][T13373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.896256][T14917] bridge_slave_1: left promiscuous mode [ 803.908437][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.918698][T14917] bridge_slave_0: left allmulticast mode [ 803.924789][T14917] bridge_slave_0: left promiscuous mode [ 803.931212][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.149038][ T5147] Bluetooth: hci1: command tx timeout [ 804.657183][T14917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.689118][T13797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 804.690029][T14917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.716422][T13797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 804.726438][T13797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 804.727716][T14917] bond0 (unregistering): Released all slaves [ 804.754442][T13797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 804.763482][T13797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 805.129368][T15113] FAULT_INJECTION: forcing a failure. [ 805.129368][T15113] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 805.169305][T15113] CPU: 0 UID: 0 PID: 15113 Comm: syz.2.2785 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 805.169338][T15113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 805.169353][T15113] Call Trace: [ 805.169362][T15113] [ 805.169372][T15113] dump_stack_lvl+0x189/0x250 [ 805.169412][T15113] ? __pfx____ratelimit+0x10/0x10 [ 805.169446][T15113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 805.169479][T15113] ? __pfx__printk+0x10/0x10 [ 805.169516][T15113] should_fail_ex+0x414/0x560 [ 805.169551][T15113] _copy_to_user+0x31/0xb0 [ 805.169576][T15113] simple_read_from_buffer+0xe1/0x170 [ 805.169623][T15113] proc_fail_nth_read+0x1df/0x250 [ 805.169659][T15113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.169695][T15113] ? rw_verify_area+0x258/0x650 [ 805.169719][T15113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 805.169753][T15113] vfs_read+0x200/0x980 [ 805.169785][T15113] ? __pfx___mutex_lock+0x10/0x10 [ 805.169821][T15113] ? __pfx_vfs_read+0x10/0x10 [ 805.169847][T15113] ? __fget_files+0x2a/0x420 [ 805.169882][T15113] ? __fget_files+0x3a0/0x420 [ 805.169910][T15113] ? __fget_files+0x2a/0x420 [ 805.169950][T15113] ksys_read+0x145/0x250 [ 805.169979][T15113] ? __pfx_ksys_read+0x10/0x10 [ 805.170001][T15113] ? rcu_is_watching+0x15/0xb0 [ 805.170041][T15113] ? do_syscall_64+0xbe/0x3b0 [ 805.170079][T15113] do_syscall_64+0xfa/0x3b0 [ 805.170111][T15113] ? lockdep_hardirqs_on+0x9c/0x150 [ 805.170142][T15113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.170165][T15113] ? clear_bhb_loop+0x60/0xb0 [ 805.170191][T15113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.170213][T15113] RIP: 0033:0x7fa87678d33c [ 805.170234][T15113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 805.170253][T15113] RSP: 002b:00007fa8745f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 805.170277][T15113] RAX: ffffffffffffffda RBX: 00007fa8769b5fa0 RCX: 00007fa87678d33c [ 805.170293][T15113] RDX: 000000000000000f RSI: 00007fa8745f60a0 RDI: 0000000000000006 [ 805.170306][T15113] RBP: 00007fa8745f6090 R08: 0000000000000000 R09: 0000000000000000 [ 805.170320][T15113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.170332][T15113] R13: 0000000000000000 R14: 00007fa8769b5fa0 R15: 00007ffdd85d7118 [ 805.170368][T15113] [ 806.088557][T15117] tty tty4: ldisc open failed (-12), clearing slot 3 [ 806.197543][T15118] netlink: 'syz.4.2784': attribute type 13 has an invalid length. [ 806.347633][T14917] hsr_slave_0: left promiscuous mode [ 806.409858][T14917] hsr_slave_1: left promiscuous mode [ 806.416088][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.439837][T14917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.800689][T13797] Bluetooth: hci0: command tx timeout [ 806.982060][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.039540][T14917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.142142][T14917] veth1_macvtap: left promiscuous mode [ 807.161866][T14917] veth0_macvtap: left promiscuous mode [ 807.179051][T14917] veth1_vlan: left promiscuous mode [ 807.200818][T14917] veth0_vlan: left promiscuous mode [ 808.076800][T14917] team0 (unregistering): Port device team_slave_1 removed [ 808.152080][T14917] team0 (unregistering): Port device team_slave_0 removed [ 808.875042][T13797] Bluetooth: hci0: command tx timeout [ 809.259503][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 809.269764][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 809.308053][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 809.316632][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 809.346139][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 809.869013][ T980] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 810.009014][ T980] usb 1-1: device descriptor read/64, error -71 [ 810.335019][T15109] chnl_net:caif_netlink_parms(): no params data found [ 810.349499][ T24] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 810.362812][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 810.481297][T15109] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.488679][T15109] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.496358][T15109] bridge_slave_0: entered allmulticast mode [ 810.505291][T15109] bridge_slave_0: entered promiscuous mode [ 810.511831][ T980] usb 1-1: device descriptor read/64, error -71 [ 810.524679][ T24] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 810.533211][ T24] usb 3-1: config 0 has no interface number 0 [ 810.542565][ T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 810.553851][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.563199][ T24] usb 3-1: Product: syz [ 810.567522][ T24] usb 3-1: Manufacturer: syz [ 810.572643][ T24] usb 3-1: SerialNumber: syz [ 810.577682][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.585267][T15109] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.590661][ T24] usb 3-1: config 0 descriptor?? [ 810.599303][T15109] bridge_slave_1: entered allmulticast mode [ 810.608232][T15109] bridge_slave_1: entered promiscuous mode [ 810.629463][ T980] usb usb1-port1: attempt power cycle [ 810.690672][T15109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.712905][T15109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.821816][T15109] team0: Port device team_slave_0 added [ 810.838530][T15136] chnl_net:caif_netlink_parms(): no params data found [ 810.899074][ T24] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 810.911863][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 810.920683][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 810.929757][ T24] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 810.935083][T14917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.943948][ T24] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 810.956418][T13797] Bluetooth: hci0: command tx timeout [ 810.978929][ T980] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 810.998809][T15109] team0: Port device team_slave_1 added [ 810.999892][ T980] usb 1-1: device descriptor read/8, error -71 [ 811.093165][T14917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.139259][T15109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 811.148091][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.180747][T15109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 811.220204][T14917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.237878][T15109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 811.245306][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 811.253682][T15109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 811.281351][ T980] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 811.283144][T15109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 811.310630][ T980] usb 1-1: device descriptor read/8, error -71 [ 811.322267][T15144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.331343][T15144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.431887][ T980] usb usb1-port1: unable to enumerate USB device [ 811.437199][T13797] Bluetooth: hci1: command tx timeout [ 811.499465][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 811.639239][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 811.702721][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 811.756930][T14917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.813029][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 811.882429][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.929436][ T24] usb 5-1: Product: syz [ 811.949704][ T24] usb 5-1: Manufacturer: syz [ 811.974488][ T24] usb 5-1: SerialNumber: syz [ 812.075844][ T24] usb 5-1: config 0 descriptor?? [ 812.087602][ T24] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 812.097816][ T24] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 812.144646][ T980] usb 3-1: USB disconnect, device number 53 [ 812.166813][ T980] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 812.178312][ T980] keyspan 3-1:0.133: device disconnected [ 812.227718][T15136] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.236266][T15136] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.249860][T15136] bridge_slave_0: entered allmulticast mode [ 812.257923][T15136] bridge_slave_0: entered promiscuous mode [ 812.275306][T15109] hsr_slave_0: entered promiscuous mode [ 812.282875][T15109] hsr_slave_1: entered promiscuous mode [ 812.289879][T15109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 812.301830][T15109] Cannot create hsr debugfs directory [ 812.307822][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.316363][T15136] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.324056][T15136] bridge_slave_1: entered allmulticast mode [ 812.332552][T15136] bridge_slave_1: entered promiscuous mode [ 812.422206][T15136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.435903][T15136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.530633][T15136] team0: Port device team_slave_0 added [ 812.554069][T15136] team0: Port device team_slave_1 added [ 812.587947][T14917] bridge_slave_1: left allmulticast mode [ 812.599767][T14917] bridge_slave_1: left promiscuous mode [ 812.605724][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.623301][T14917] bridge_slave_0: left allmulticast mode [ 812.634591][T14917] bridge_slave_0: left promiscuous mode [ 812.642287][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.703211][ T24] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 812.726562][ T24] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 812.747048][ T24] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 812.768367][ T24] em28xx 5-1:0.0: No AC97 audio processor [ 813.107945][T15170] netlink: 'syz.2.2794': attribute type 10 has an invalid length. [ 813.118602][T15170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2794'. [ 813.154134][T13797] Bluetooth: hci0: command tx timeout [ 813.510614][T13797] Bluetooth: hci1: command tx timeout [ 813.822478][T14917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.837985][T14917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.857315][T14917] bond0 (unregistering): Released all slaves [ 813.911859][T15136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.930664][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.995442][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.006066][T15136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.029538][ T980] usb 5-1: USB disconnect, device number 43 [ 814.037867][ T980] em28xx 5-1:0.0: Disconnecting em28xx [ 814.062740][ T980] em28xx 5-1:0.0: Freeing device [ 814.175811][T15136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.189003][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.214949][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.236092][T15136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.445743][T15136] hsr_slave_0: entered promiscuous mode [ 814.460871][T15136] hsr_slave_1: entered promiscuous mode [ 814.471736][T15136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.479942][T15136] Cannot create hsr debugfs directory [ 815.648942][T13797] Bluetooth: hci1: command tx timeout [ 815.751052][T15199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 815.764901][T14917] hsr_slave_0: left promiscuous mode [ 815.775694][T14917] hsr_slave_1: left promiscuous mode [ 815.785308][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.793892][T14917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.806878][T14917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 815.836555][T14917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.879571][T14917] veth1_macvtap: left promiscuous mode [ 815.885207][T14917] veth0_macvtap: left promiscuous mode [ 815.899323][T14917] veth1_vlan: left promiscuous mode [ 815.904736][T14917] veth0_vlan: left promiscuous mode [ 816.409181][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 816.459746][T15211] FAULT_INJECTION: forcing a failure. [ 816.459746][T15211] name failslab, interval 1, probability 0, space 0, times 1 [ 816.479380][T15211] CPU: 1 UID: 0 PID: 15211 Comm: syz.4.2809 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 816.479419][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 816.479432][T15211] Call Trace: [ 816.479440][T15211] [ 816.479449][T15211] dump_stack_lvl+0x189/0x250 [ 816.479483][T15211] ? __pfx____ratelimit+0x10/0x10 [ 816.479510][T15211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.479536][T15211] ? __pfx__printk+0x10/0x10 [ 816.479561][T15211] ? __pfx___might_resched+0x10/0x10 [ 816.479591][T15211] ? fs_reclaim_acquire+0x7d/0x100 [ 816.479628][T15211] should_fail_ex+0x414/0x560 [ 816.479660][T15211] should_failslab+0xa8/0x100 [ 816.479690][T15211] kmem_cache_alloc_noprof+0x73/0x3c0 [ 816.479715][T15211] ? vm_area_dup+0x2b/0x680 [ 816.479749][T15211] vm_area_dup+0x2b/0x680 [ 816.479784][T15211] __split_vma+0x1a9/0xa00 [ 816.479809][T15211] ? mas_next_slot+0xc20/0xcf0 [ 816.479845][T15211] ? __pfx___split_vma+0x10/0x10 [ 816.479883][T15211] ? userfaultfd_unmap_prep+0x99/0x3e0 [ 816.479912][T15211] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 816.479957][T15211] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 816.480003][T15211] mmap_region+0x678/0x1f30 [ 816.480048][T15211] ? __pfx_mmap_region+0x10/0x10 [ 816.480077][T15211] ? is_bpf_text_address+0x26/0x2b0 [ 816.480123][T15211] ? __lock_acquire+0xab9/0xd20 [ 816.480189][T15211] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 816.480227][T15211] ? cap_mmap_addr+0xb0/0x100 [ 816.480252][T15211] ? bpf_lsm_mmap_addr+0x9/0x20 [ 816.480275][T15211] ? security_mmap_addr+0x71/0x270 [ 816.480307][T15211] do_mmap+0xc45/0x10d0 [ 816.480339][T15211] ? __pfx_do_mmap+0x10/0x10 [ 816.480356][T15211] ? down_write_killable+0x178/0x230 [ 816.480375][T15211] ? __pfx_vfs_write+0x10/0x10 [ 816.480407][T15211] ? __pfx_down_write_killable+0x10/0x10 [ 816.480426][T15211] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 816.480460][T15211] vm_mmap_pgoff+0x31b/0x4c0 [ 816.480485][T15211] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 816.480499][T15211] ? ksys_write+0x22a/0x250 [ 816.480522][T15211] ? __pfx_ksys_write+0x10/0x10 [ 816.480539][T15211] ? rcu_is_watching+0x15/0xb0 [ 816.480566][T15211] ? ksys_mmap_pgoff+0xf4/0x760 [ 816.480587][T15211] ? __x64_sys_mmap+0x7f/0x140 [ 816.480614][T15211] do_syscall_64+0xfa/0x3b0 [ 816.480640][T15211] ? lockdep_hardirqs_on+0x9c/0x150 [ 816.480666][T15211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.480684][T15211] ? clear_bhb_loop+0x60/0xb0 [ 816.480706][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.480723][T15211] RIP: 0033:0x7f51e9f8e929 [ 816.480741][T15211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.480756][T15211] RSP: 002b:00007f51ead88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 816.480776][T15211] RAX: ffffffffffffffda RBX: 00007f51ea1b5fa0 RCX: 00007f51e9f8e929 [ 816.480789][T15211] RDX: 000000000000000f RSI: 0000000000b36000 RDI: 0000200000000000 [ 816.480799][T15211] RBP: 00007f51ead88090 R08: ffffffffffffffff R09: 0000000000000000 [ 816.480811][T15211] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 816.480822][T15211] R13: 0000000000000000 R14: 00007f51ea1b5fa0 R15: 00007fff9c14d9d8 [ 816.480851][T15211] [ 816.807922][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.899644][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 816.907528][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 816.920033][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 817.026882][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 817.036853][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.050453][ T24] usb 3-1: Product: syz [ 817.054896][ T24] usb 3-1: Manufacturer: syz [ 817.060176][ T24] usb 3-1: SerialNumber: syz [ 817.097613][ T24] usb 3-1: config 0 descriptor?? [ 817.204626][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 817.215691][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 817.657664][T14917] team0 (unregistering): Port device team_slave_1 removed [ 817.672030][T13797] Bluetooth: hci1: command tx timeout [ 817.737967][T14917] team0 (unregistering): Port device team_slave_0 removed [ 817.980073][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 817.993299][ T24] em28xx 3-1:0.0: Config register raw data: 0x00 [ 818.496509][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2814'. [ 818.828926][ T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 818.988897][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 819.006230][ T24] usb 1-1: config 8 interface 0 has no altsetting 0 [ 819.025695][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 819.042494][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.068866][ T24] usb 1-1: Product: syz [ 819.073235][ T24] usb 1-1: Manufacturer: syz [ 819.077942][ T24] usb 1-1: SerialNumber: syz [ 819.098354][T15109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 819.126908][T15109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 819.168645][T15109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 819.196650][T15109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 819.255707][ T5881] usb 3-1: USB disconnect, device number 54 [ 819.263862][ T5881] em28xx 3-1:0.0: Disconnecting em28xx [ 819.280026][ T5881] em28xx 3-1:0.0: Freeing device [ 819.333900][T15136] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 819.353680][T15136] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 819.375621][T15136] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 819.399918][T15136] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 819.594391][ T24] gs_usb 1-1:8.0: Configuring for 1 interfaces [ 819.612812][T15109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.728184][T15136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.746193][T15109] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.557378][ T980] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 821.459084][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 821.495939][ T980] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 821.506303][ T980] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 821.534389][ T980] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.559066][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 821.568231][ T980] usb 5-1: SerialNumber: syz [ 821.593380][T15258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.605224][T15258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.745007][ T24] usb 1-1: USB disconnect, device number 51 [ 823.075861][T14917] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.083151][T14917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.406945][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.414246][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.587944][T15136] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.707303][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.714544][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.349950][T14917] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.357176][T14917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.497277][T15256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 824.530968][ T980] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 824.541458][T15256] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 824.584000][ T980] usb 5-1: USB disconnect, device number 44 [ 824.621521][T15256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 824.678907][T15256] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 824.736731][T15256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 824.768862][T15256] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 825.056092][T15296] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2824'. [ 825.100543][T15296] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2824'. [ 825.887746][T15109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.088811][ T30] audit: type=1326 audit(1749992706.407:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15309 comm="syz.2.2826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa87678e929 code=0x0 [ 826.206225][T15256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 826.233323][T15136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.309233][T15256] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 826.387280][T15256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 826.414146][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 826.430719][T15256] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 826.516756][T15109] veth0_vlan: entered promiscuous mode [ 826.600172][T15324] usb usb8: usbfs: process 15324 (syz.2.2828) did not claim interface 0 before use [ 826.630307][T15109] veth1_vlan: entered promiscuous mode [ 826.707906][T15136] veth0_vlan: entered promiscuous mode [ 826.745701][T15136] veth1_vlan: entered promiscuous mode [ 826.768472][T15109] veth0_macvtap: entered promiscuous mode [ 826.798619][T15109] veth1_macvtap: entered promiscuous mode [ 826.878024][T15109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.908197][T15109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.931467][T15136] veth0_macvtap: entered promiscuous mode [ 826.956796][T15109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.975583][T15109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.997044][T15109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.177302][T15109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.222731][T15136] veth1_macvtap: entered promiscuous mode [ 827.395566][T15136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.434659][T15336] FAULT_INJECTION: forcing a failure. [ 827.434659][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.460471][T15136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.509498][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz.2.2831 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 827.509531][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.509545][T15336] Call Trace: [ 827.509554][T15336] [ 827.509563][T15336] dump_stack_lvl+0x189/0x250 [ 827.509601][T15336] ? __pfx____ratelimit+0x10/0x10 [ 827.509633][T15336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 827.509665][T15336] ? __pfx__printk+0x10/0x10 [ 827.509702][T15336] should_fail_ex+0x414/0x560 [ 827.509735][T15336] _copy_to_user+0x31/0xb0 [ 827.509759][T15336] simple_read_from_buffer+0xe1/0x170 [ 827.509793][T15336] proc_fail_nth_read+0x1df/0x250 [ 827.509829][T15336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.509863][T15336] ? rw_verify_area+0x258/0x650 [ 827.509886][T15336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 827.509918][T15336] vfs_read+0x200/0x980 [ 827.509948][T15336] ? __pfx___mutex_lock+0x10/0x10 [ 827.509982][T15336] ? __pfx_vfs_read+0x10/0x10 [ 827.510009][T15336] ? __fget_files+0x2a/0x420 [ 827.510040][T15336] ? __fget_files+0x3a0/0x420 [ 827.510062][T15336] ? __fget_files+0x2a/0x420 [ 827.510093][T15336] ksys_read+0x145/0x250 [ 827.510111][T15336] ? __fget_files+0x3a0/0x420 [ 827.510135][T15336] ? __pfx_ksys_read+0x10/0x10 [ 827.510168][T15336] ? do_syscall_64+0xbe/0x3b0 [ 827.510198][T15336] do_syscall_64+0xfa/0x3b0 [ 827.510223][T15336] ? lockdep_hardirqs_on+0x9c/0x150 [ 827.510248][T15336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.510265][T15336] ? clear_bhb_loop+0x60/0xb0 [ 827.510286][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.510302][T15336] RIP: 0033:0x7fa87678d33c [ 827.510318][T15336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 827.510333][T15336] RSP: 002b:00007fa8745f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 827.510351][T15336] RAX: ffffffffffffffda RBX: 00007fa8769b5fa0 RCX: 00007fa87678d33c [ 827.510364][T15336] RDX: 000000000000000f RSI: 00007fa8745f60a0 RDI: 0000000000000005 [ 827.510375][T15336] RBP: 00007fa8745f6090 R08: 0000000000000000 R09: 0000000000000000 [ 827.510385][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.510395][T15336] R13: 0000000000000000 R14: 00007fa8769b5fa0 R15: 00007ffdd85d7118 [ 827.510424][T15336] [ 827.742294][ C0] vkms_vblank_simulate: vblank timer overrun [ 827.745852][T15136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.769355][T15136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.788931][T15136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.797692][T15136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.069977][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 875.432383][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.872661][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 968.869209][ T31] INFO: task kworker/0:6:5983 blocked for more than 143 seconds. [ 968.877313][ T31] Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 [ 968.885182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 968.893990][ T31] task:kworker/0:6 state:D stack:20760 pid:5983 tgid:5983 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 968.906343][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 968.913347][ T31] Call Trace: [ 968.916672][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 968.919720][ T31] __schedule+0x16a2/0x4cb0 [ 968.924313][ T31] ? schedule+0x165/0x360 [ 968.928988][ T31] ? __pfx___schedule+0x10/0x10 [ 968.934466][ T31] ? schedule+0x91/0x360 [ 968.939274][ T31] schedule+0x165/0x360 [ 968.943501][ T31] schedule_preempt_disabled+0x13/0x30 [ 968.949365][ T31] __mutex_lock+0x724/0xe80 [ 968.953933][ T31] ? look_up_lock_class+0x74/0x170 [ 968.959284][ T31] ? __mutex_lock+0x51b/0xe80 [ 968.968307][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 968.998744][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 969.003896][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 969.028955][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 969.034795][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 969.047416][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 969.062228][ T31] process_scheduled_works+0xade/0x17b0 [ 969.067923][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 969.074341][ T31] worker_thread+0x8a0/0xda0 [ 969.079276][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 969.085669][ T31] ? __kthread_parkme+0x7b/0x200 [ 969.090974][ T31] kthread+0x70e/0x8a0 [ 969.095112][ T31] ? __pfx_worker_thread+0x10/0x10 [ 969.100752][ T31] ? __pfx_kthread+0x10/0x10 [ 969.105480][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 969.111104][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.116371][ T31] ? __pfx_kthread+0x10/0x10 [ 969.121272][ T31] ret_from_fork+0x3fc/0x770 [ 969.125916][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 969.131593][ T31] ? __switch_to_asm+0x39/0x70 [ 969.136400][ T31] ? __switch_to_asm+0x33/0x70 [ 969.141518][ T31] ? __pfx_kthread+0x10/0x10 [ 969.146149][ T31] ret_from_fork_asm+0x1a/0x30 [ 969.151402][ T31] [ 969.154590][ T31] INFO: task syz.0.2813:15255 blocked for more than 143 seconds. [ 969.162474][ T31] Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 [ 969.170247][ T31] Blocked by coredump. [ 969.174864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 969.183620][ T31] task:syz.0.2813 state:D stack:26856 pid:15255 tgid:15255 ppid:5834 task_flags:0x40044c flags:0x00004006 [ 969.195654][ T31] Call Trace: [ 969.199006][ T31] [ 969.201973][ T31] __schedule+0x16a2/0x4cb0 [ 969.206542][ T31] ? schedule+0x165/0x360 [ 969.211002][ T31] ? __pfx___schedule+0x10/0x10 [ 969.215989][ T31] ? schedule+0x91/0x360 [ 969.220331][ T31] schedule+0x165/0x360 [ 969.224532][ T31] schedule_preempt_disabled+0x13/0x30 [ 969.230085][ T31] __mutex_lock+0x724/0xe80 [ 969.234641][ T31] ? kobject_put+0x43f/0x480 [ 969.239309][ T31] ? __mutex_lock+0x51b/0xe80 [ 969.244088][ T31] ? rfkill_unregister+0xc8/0x220 [ 969.249277][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 969.254396][ T31] ? __pfx_device_del+0x10/0x10 [ 969.259334][ T31] rfkill_unregister+0xc8/0x220 [ 969.264242][ T31] nfc_unregister_device+0x96/0x2a0 [ 969.270109][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 969.275864][ T31] virtual_ncidev_close+0x56/0x90 [ 969.280968][ T31] __fput+0x449/0xa70 [ 969.284991][ T31] task_work_run+0x1d1/0x260 [ 969.289742][ T31] ? __pfx_task_work_run+0x10/0x10 [ 969.294904][ T31] do_exit+0x6ad/0x22e0 [ 969.299161][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 969.304565][ T31] ? do_raw_spin_lock+0x121/0x290 [ 969.309672][ T31] ? __pfx_do_exit+0x10/0x10 [ 969.314332][ T31] do_group_exit+0x21c/0x2d0 [ 969.319270][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.324534][ T31] get_signal+0x125e/0x1310 [ 969.329477][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 969.335067][ T31] ? __pfx_get_timespec64+0x10/0x10 [ 969.340354][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 969.346557][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 969.352518][ T31] exit_to_user_mode_loop+0x75/0x110 [ 969.357857][ T31] do_syscall_64+0x2bd/0x3b0 [ 969.362637][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.367908][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.374032][ T31] ? clear_bhb_loop+0x60/0xb0 [ 969.378806][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.384734][ T31] RIP: 0033:0x7f9c68bc11e5 [ 969.389202][ T31] RSP: 002b:00007f9c669f5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 969.397659][ T31] RAX: fffffffffffffdfc RBX: 00007f9c68db5fa0 RCX: 00007f9c68bc11e5 [ 969.405717][ T31] RDX: 00007f9c669f5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 969.413755][ T31] RBP: 00007f9c68c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 969.421806][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 969.429926][ T31] R13: 0000000000000000 R14: 00007f9c68db5fa0 R15: 00007fff83f0ce78 [ 969.437964][ T31] [ 969.441108][ T31] [ 969.441108][ T31] Showing all locks held in the system: [ 969.450455][ T31] 5 locks held by kworker/u8:1/13: [ 969.455615][ T31] 1 lock held by khungtaskd/31: [ 969.461302][ T31] #0: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 969.477647][ T31] 2 locks held by getty/5586: [ 969.482420][ T31] #0: ffff88814d19e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 969.492283][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 969.502500][ T31] 3 locks held by kworker/0:6/5983: [ 969.507722][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 969.519089][ T31] #1: ffffc90004f77bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 969.532726][ T31] #2: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 969.544163][ T31] 2 locks held by syz-executor/15109: [ 969.549742][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.558271][ T31] #1: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 969.568383][ T31] 1 lock held by syz-executor/15136: [ 969.574978][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.583594][ T31] 2 locks held by syz.4.2817/15256: [ 969.588867][ T31] #0: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 969.599148][ T31] #1: ffff888052a42100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 969.608941][ T31] 2 locks held by syz.0.2813/15255: [ 969.614173][ T31] #0: ffff888052a42100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 969.624081][ T31] #1: ffffffff8f7d8d28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 969.634318][ T31] 1 lock held by syz.0.2833/15344: [ 969.639515][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.648032][ T31] 1 lock held by syz.2.2834/15346: [ 969.653215][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.661956][ T31] 1 lock held by syz-executor/15404: [ 969.667267][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.676096][ T31] 1 lock held by syz-executor/15407: [ 969.681512][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.691087][ T31] 1 lock held by syz-executor/15408: [ 969.696434][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.705189][ T31] 1 lock held by syz-executor/15410: [ 969.710614][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.719191][ T31] 1 lock held by syz-executor/15412: [ 969.724543][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.733096][ T31] 1 lock held by syz-executor/15418: [ 969.738407][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.747172][ T31] 1 lock held by syz-executor/15421: [ 969.752627][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.761195][ T31] 1 lock held by syz-executor/15422: [ 969.766503][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.775075][ T31] 1 lock held by syz-executor/15424: [ 969.780442][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.789065][ T31] 1 lock held by syz-executor/15426: [ 969.794389][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.803052][ T31] 1 lock held by syz-executor/15428: [ 969.808382][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.816993][ T31] 1 lock held by syz-executor/15434: [ 969.822354][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.830916][ T31] 1 lock held by syz-executor/15436: [ 969.836210][ T31] #0: ffffffff8e9b0788 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 969.844794][ T31] [ 969.847153][ T31] ============================================= [ 969.847153][ T31] [ 969.855715][ T31] NMI backtrace for cpu 0 [ 969.855733][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 969.855758][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 969.855771][ T31] Call Trace: [ 969.855779][ T31] [ 969.855788][ T31] dump_stack_lvl+0x189/0x250 [ 969.855821][ T31] ? __wake_up_klogd+0xd9/0x110 [ 969.855847][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.855901][ T31] ? __pfx__printk+0x10/0x10 [ 969.855939][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 969.855972][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 969.855997][ T31] ? _printk+0xcf/0x120 [ 969.856023][ T31] ? __pfx__printk+0x10/0x10 [ 969.856048][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 969.856088][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 969.856122][ T31] watchdog+0xfee/0x1030 [ 969.856153][ T31] ? watchdog+0x1de/0x1030 [ 969.856191][ T31] kthread+0x70e/0x8a0 [ 969.856218][ T31] ? __pfx_watchdog+0x10/0x10 [ 969.856244][ T31] ? __pfx_kthread+0x10/0x10 [ 969.856270][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 969.856299][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.856329][ T31] ? __pfx_kthread+0x10/0x10 [ 969.856354][ T31] ret_from_fork+0x3fc/0x770 [ 969.856386][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 969.856423][ T31] ? __switch_to_asm+0x39/0x70 [ 969.856443][ T31] ? __switch_to_asm+0x33/0x70 [ 969.856462][ T31] ? __pfx_kthread+0x10/0x10 [ 969.856486][ T31] ret_from_fork_asm+0x1a/0x30 [ 969.856525][ T31] [ 969.856534][ T31] Sending NMI from CPU 0 to CPUs 1: [ 970.014208][ C1] NMI backtrace for cpu 1 [ 970.014227][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 970.014249][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 970.014261][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 970.014300][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 970.014317][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 970.014334][ C1] RAX: 0d7a9916d5a9ee00 RBX: ffffffff81975c68 RCX: 0d7a9916d5a9ee00 [ 970.014348][ C1] RDX: 0000000000000001 RSI: ffffffff8d96e80b RDI: ffffffff8be1b700 [ 970.014361][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 970.014375][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fe2f0 [ 970.014389][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5db40 [ 970.014402][ C1] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 970.014417][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 970.014429][ C1] CR2: 00005570e4019fb0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 970.014445][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 970.014456][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 970.014467][ C1] Call Trace: [ 970.014474][ C1] [ 970.014481][ C1] default_idle+0x13/0x20 [ 970.014499][ C1] default_idle_call+0x74/0xb0 [ 970.014519][ C1] do_idle+0x1e8/0x510 [ 970.014550][ C1] ? __pfx_do_idle+0x10/0x10 [ 970.014575][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.014612][ C1] cpu_startup_entry+0x44/0x60 [ 970.014638][ C1] start_secondary+0x101/0x110 [ 970.014660][ C1] common_startup_64+0x13e/0x147 [ 970.014688][ C1] [ 970.015195][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 970.205563][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 970.217389][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 970.227461][ T31] Call Trace: [ 970.230757][ T31] [ 970.233712][ T31] dump_stack_lvl+0x99/0x250 [ 970.238332][ T31] ? __asan_memcpy+0x40/0x70 [ 970.242946][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 970.248171][ T31] ? __pfx__printk+0x10/0x10 [ 970.252811][ T31] panic+0x2db/0x790 [ 970.256773][ T31] ? __pfx_panic+0x10/0x10 [ 970.261231][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 970.267087][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 970.272486][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 970.278678][ T31] watchdog+0x102d/0x1030 [ 970.283142][ T31] ? watchdog+0x1de/0x1030 [ 970.287587][ T31] kthread+0x70e/0x8a0 [ 970.291678][ T31] ? __pfx_watchdog+0x10/0x10 [ 970.296407][ T31] ? __pfx_kthread+0x10/0x10 [ 970.301018][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 970.306249][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 970.311512][ T31] ? __pfx_kthread+0x10/0x10 [ 970.316122][ T31] ret_from_fork+0x3fc/0x770 [ 970.320739][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 970.325886][ T31] ? __switch_to_asm+0x39/0x70 [ 970.330667][ T31] ? __switch_to_asm+0x33/0x70 [ 970.335447][ T31] ? __pfx_kthread+0x10/0x10 [ 970.340056][ T31] ret_from_fork_asm+0x1a/0x30 [ 970.344855][ T31] [ 970.348251][ T31] Kernel Offset: disabled [ 970.352612][ T31] Rebooting in 86400 seconds..