last executing test programs: 9.497414343s ago: executing program 2 (id=525): mkdir(0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 9.267444504s ago: executing program 2 (id=526): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x1, 0x8, '9P2000.u'}, 0x15) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 9.063082273s ago: executing program 2 (id=528): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xd7, 0x1000, 0x1156, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xc}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="930200007d00000005f0000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7892ffffff8102000000000031ffcebc920000003800f04a86cec602007dfa673effeb09b5351f5bde05f700000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/549, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) 8.986786156s ago: executing program 1 (id=529): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_usb_connect(0x0, 0xfffffffffffffe27, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100001823f0083f566612b2ad010203010902120001000000000904c00000ffffff00c47ae6f2efa7964cb9b842526abf8b766d8cd4b0ee8d57210a7f894ae0fc4e324fb6408af0c722ddb592480ad5b6690b9391fa6818fa274623bf4f1f2febb4ff3dd7954336826455cdd52a4e1541519b081bda4ace89ab87e6c5f4ec7f2d37ccbd5fdccc0576a5d3e87914701c8d2ef758ea34b9dd0d42c37f0495d62d33dc229542650c76333daffacdd2a2e086c67d32cfd43411129ef6232f4b65d83e4188ceaebe7a1c1766827967135a4411375e3f40"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000060005004f982237ba41"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) connect$pppl2tp(r6, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close(0xffffffffffffffff) close_range(r4, 0xffffffffffffffff, 0x0) r9 = socket$inet6(0xa, 0x3, 0xc6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r1}, 0xc) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRES8=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000fbff0000000000000000850000009e0000009500008a26a496e3"], 0x0}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x1b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x675f, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x4, 0x0, 0x2, 0x1, 0x4, 0xfffffffffffffff0}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x9, 0x1}, 0x10, 0x1f8f2, 0xffffffffffffffff, 0x7, &(0x7f0000000940)=[r1, 0xffffffffffffffff, r2, r2], &(0x7f0000000c80)=[{0x0, 0x4, 0x3, 0xb}, {0x2, 0x4, 0xd, 0x1}, {0x2, 0x5, 0x0, 0x1}, {0x0, 0x5, 0x5, 0x1}, {0x0, 0x1, 0x1, 0x4}, {0x1, 0x5, 0x1, 0xb}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x8}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.366499609s ago: executing program 4 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0xc, 0x4, 0x1}, 0x48) bpf$BPF_PROG_QUERY(0x1c, &(0x7f00000001c0)={@map=r1, 0xe, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000000007b1af8ff00000000bfa1000000000000070100002bffffffb702000008000000b7030000000000008500000006000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x5ad940, 0x0) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) r4 = add_key$fscrypt_v1(&(0x7f0000008ac0), &(0x7f0000008b00)={'fscrypt:', @desc3}, &(0x7f0000008b40)={0x0, "48e8cbc92351b0b93dadc13beee1418247807face679f3bf63d51135c9079dd4bdea22958a8945331fe85a7cf2cfb8d9e42a05c71cd5dacc07d1865437bd4ad0", 0x21}, 0x48, 0xfffffffffffffffc) (async) r5 = add_key$fscrypt_v1(&(0x7f0000008bc0), &(0x7f0000008c00)={'fscrypt:', @desc4}, &(0x7f0000008c40)={0x0, "bec3a30be41a54d3904b841b80771b01f8867f5c2a4c463c6c2b12b4e15ae16ba4ce653bf3634a269165a07de6ccd97d5cd1f9d1bf801f0c5da0812eb879c95a", 0x28}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'team0\x00', @broadcast}) (async) socket$inet6(0xa, 0x0, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async) io_uring_setup(0x69d, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8000003, 0x2cc}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="148071334d000900000000000000000001600000"], 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x32}}, 0x40000) (async) socket$key(0xf, 0x3, 0x2) 7.664015606s ago: executing program 4 (id=535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) r4 = socket(0x21, 0x2, 0xa) getsockopt$nfc_llcp(r4, 0x110, 0x6, 0x0, 0x20000000) write$cgroup_type(r3, &(0x7f0000000000), 0x248800) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x4}, {0x8}}]}, 0x20}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r6, 0x40046411, &(0x7f0000000140)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 7.534166858s ago: executing program 3 (id=536): mkdir(0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 7.522338113s ago: executing program 2 (id=537): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000000)='GPL\x00'}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000200)=[r7], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 7.146855915s ago: executing program 3 (id=539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x84, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) syz_pidfd_open(r0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$sock_inet_SIOCGIFADDR(r6, 0x8915, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{r7, r8/1000+60000}}) 6.776518701s ago: executing program 0 (id=540): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r1, 0x409, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xd7, 0x1000, 0x1156, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xc}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r3, 0x0, 0x0) r4 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[], 0x232) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) 5.894206241s ago: executing program 3 (id=541): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18faffffff020000311e11c0696a00000000000000000000820000000000"], 0x0, 0x2}, 0x90) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 5.846748539s ago: executing program 1 (id=542): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000000540)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="9bc38abd1e4141f60da7f37e9b3a879a95", 0x11}, {&(0x7f0000000340)="4f243243275bee980052e0ffd2e7e58232954d55f3062ecfe49c8b18dc49c8ae56081aa52aad0a133c03e34d0be474efb45b469b08ef6e6a5cd7a33f95f4425661e2ec8451a758bbc3543e2e46e6ab4507", 0x51}, {&(0x7f00000003c0)="6643f5e722c0015be55e88821c7e946905f49ce81927b7637b074eef767777acf4baf0", 0x23}], 0x3}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000500)}}], 0x2, 0x40) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000010180)=0x60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000180000000000000ba00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000b50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000184b0000070000000000000000000000fe82000805000000b7080000000000007b8af8ff00000000b7080000d61a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000e3b60500000800000085000000a5000000181b0000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0xfffffffffffffd80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0xa, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x200, 0x4000, "abd206a1ebd7cedfd17ebd65400ed41b"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f00000e0000/0x2000)=nil, &(0x7f0000636000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000e1000/0x3000)=nil, &(0x7f0000452000/0x4000)=nil, &(0x7f00005fd000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000187000/0x1000)=nil, &(0x7f00001a3000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, 0x0}, 0x68) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000131410000000000000000000f819841c71e5233c3d51c4ab0b01769e2ad6a794e3e2ab5532b9d7bf855f1b36f6efa5bedca91c599d34c6dc9ab1e386125e4480aaf030706a4a8fab7af60725cb1abb15bc07e782bc540bbd7964ef2b8957a829b76ea81bb7edb9e0820b54c42f4ec78ffe9746ba8acac8"], 0x10}, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 4.753772014s ago: executing program 0 (id=543): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000bf4f00000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000013ff0095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) unshare(0x400) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000080}}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioperm(0x0, 0x69, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) 4.566008035s ago: executing program 0 (id=544): syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60000000001406ca6425"], 0x0) 4.479900354s ago: executing program 1 (id=545): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018130100", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000088b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x138}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f00000031c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x4004) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/route\x00') read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x204c) 4.372665154s ago: executing program 0 (id=546): sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) write$smackfs_logging(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0xac802, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x20, &(0x7f0000001140)) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)}]) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000045}}) unshare(0x6a040000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r3) listen(0xffffffffffffffff, 0x0) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x0, @none}, 0xe) mkdir(&(0x7f0000000440)='./file1\x00', 0x122) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000100)={0x5}) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}) 4.180044511s ago: executing program 4 (id=547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = epoll_create(0x10000e9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCSETSF(r4, 0x80045438, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) set_mempolicy(0x4005, &(0x7f0000000000)=0x10000000005, 0xcbb) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7ff}) sendmsg$xdp(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d1", 0x1}], 0x1, 0x0, 0x0, 0x4044880}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x12, &(0x7f0000000140)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.87189706s ago: executing program 4 (id=548): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 3.850365581s ago: executing program 3 (id=549): socket$kcm(0x10, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e24, @private=0xa010100}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) shutdown(r5, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e22, 0xffff0001, @mcast2, 0x9}}, 0x0, 0x0, 0x37, 0x0, "61fdbfcfcc0550c4272ec14c514b8ba02498e87718b76f758b8ff484b99650d156670d12b75d3e5bcca36e009db753c25eee9943c9dc763d3b16beae1b50b1f627a6d0a9044bcb792acb4ed1b6674780"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x0, 0x0, 0x1e, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="04", 0xffffff1f, 0x20000003, &(0x7f0000b63fe4)={0xa, 0x2, 0xf5}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) 3.34501185s ago: executing program 4 (id=550): mkdir(0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) 3.151598817s ago: executing program 4 (id=551): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x4) fcntl$addseals(r1, 0x409, 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0xd7, 0x1000, 0x1156, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0xc}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/sync_on_suspend', 0x0, 0x80) finit_module(r3, 0x0, 0x0) r4 = io_uring_setup(0x547f, &(0x7f0000000080)={0x0, 0xf7d1, 0x0, 0x0, 0xfffffffe, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/549, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0xc}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) 3.130111996s ago: executing program 1 (id=552): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8299ac36dcf3ec35) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x7f}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.985941762s ago: executing program 1 (id=553): socket$netlink(0x10, 0x3, 0xa) io_setup(0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xf629) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x9, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000003c0)={0x2, 0x2000000}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0042011a000100000000000000000002102000000000936a0000080004"], 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r3 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^`\x04\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x06\x00\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0xffffffec, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r0}) close_range(r3, 0xffffffffffffffff, 0x0) 1.972467652s ago: executing program 0 (id=554): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x4}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000bf4f00000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000013ff0095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) unshare(0x400) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x10000080}}) ioperm(0x0, 0x69, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) 1.863872447s ago: executing program 3 (id=555): r0 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$sock(r0, &(0x7f0000000540)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000300)="9bc38abd1e4141f60da7f37e9b3a879a95", 0x11}, {&(0x7f0000000340)="4f243243275bee980052e0ffd2e7e58232954d55f3062ecfe49c8b18dc49c8ae56081aa52aad0a133c03e34d0be474efb45b469b08ef6e6a5cd7a33f95f4425661e2ec8451a758bbc3543e2e46e6ab4507", 0x51}, {&(0x7f00000003c0)="6643f5e722c0015be55e88821c7e946905f49ce81927b7637b074eef767777acf4baf0", 0x23}], 0x3}}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000500)}}], 0x2, 0x40) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f0000010180)=0x60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000180000000000000ba00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000b50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000184b0000070000000000000000000000fe82000805000000b7080000000000007b8af8ff00000000b7080000d61a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000e3b60500000800000085000000a5000000181b0000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0xfffffffffffffd80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000340)={0x0, 0xa, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x200, 0x4000, "abd206a1ebd7cedfd17ebd65400ed41b"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f00000e0000/0x2000)=nil, &(0x7f0000636000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000e1000/0x3000)=nil, &(0x7f0000452000/0x4000)=nil, &(0x7f00005fd000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000187000/0x1000)=nil, &(0x7f00001a3000/0x1000)=nil, &(0x7f00003e0000/0x1000)=nil, 0x0}, 0x68) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="10000000131410000000000000000000f819841c71e5233c3d51c4ab0b01769e2ad6a794e3e2ab5532b9d7bf855f1b36f6efa5bedca91c599d34c6dc9ab1e386125e4480aaf030706a4a8fab7af60725cb1abb15bc07e782bc540bbd7964ef2b8957a829b76ea81bb7edb9e0820b54c42f4ec78ffe9746ba8acac8"], 0x10}, 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"}) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1.742465995s ago: executing program 2 (id=556): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x68}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) syz_open_procfs(0x0, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000780)="6b10b7101b8e05524818ba1049", 0xd}) 1.726991235s ago: executing program 0 (id=557): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x4, 0x3, 0x799b, 0x180, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x40000001, 0x4, 0x5}, 0x48) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000340)={0x400003e, 0x2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x600002, 0x0) preadv(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0, 0x0) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362fc0b6422c1688827c11c9242714287d9e56c433f490ff31c3c14ed7c5cf3603a16a24ca71ed137e565cf7be349106c07cd0afb435922d"], 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000033a80)=""/102381, 0x18fed}], 0x1, 0xbd9, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='hpfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 586.441645ms ago: executing program 2 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) r6 = socket(0x21, 0x2, 0xa) getsockopt$nfc_llcp(r6, 0x110, 0x6, 0x0, 0x20000000) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) 376.863965ms ago: executing program 1 (id=559): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18faffffff020000311e11c0696a00000000000000000000820000000000"], 0x0, 0x2}, 0x90) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 0s ago: executing program 3 (id=560): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket(0x40000000015, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): ndpoint 0xB has invalid maxpacket 1024 [ 128.161800][ T5273] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 128.196656][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.312129][ T5925] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 128.347743][ T5273] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.148446][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.175'. [ 129.171253][ T5947] VFS: could not find a valid V7 on nullb0. [ 129.199051][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 129.199066][ T29] audit: type=1326 audit(1724502508.701:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5941 comm="syz.4.175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8826579e79 code=0x0 [ 129.215332][ T5947] hpfs: Bad magic ... probably not HPFS [ 129.426350][ T5274] usb 2-1: USB disconnect, device number 5 [ 129.527947][ T5951] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 130.547115][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.781246][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 130.795749][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 130.842390][ T5966] FAULT_INJECTION: forcing a failure. [ 130.842390][ T5966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.856590][ T5273] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.882996][ T5966] CPU: 1 UID: 0 PID: 5966 Comm: syz.2.182 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 130.893608][ T5966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.902855][ T5970] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.903650][ T5966] Call Trace: [ 130.903662][ T5966] [ 130.915722][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 130.918605][ T5966] dump_stack_lvl+0x241/0x360 [ 130.918636][ T5966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.918655][ T5966] ? __pfx__printk+0x10/0x10 [ 130.918682][ T5966] ? __pfx_lock_release+0x10/0x10 [ 130.918712][ T5966] should_fail_ex+0x3b0/0x4e0 [ 130.925892][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 130.930451][ T5966] _copy_from_user+0x2f/0xe0 [ 130.930484][ T5966] __se_sys_mount+0x17d/0x3c0 [ 130.930515][ T5966] ? __pfx___se_sys_mount+0x10/0x10 [ 130.930536][ T5966] ? do_syscall_64+0x100/0x230 [ 130.930558][ T5966] ? __x64_sys_mount+0x20/0xc0 [ 130.987291][ T5966] do_syscall_64+0xf3/0x230 [ 130.991791][ T5966] ? clear_bhb_loop+0x35/0x90 [ 130.996462][ T5966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.002345][ T5966] RIP: 0033:0x7fb366379e79 [ 131.006762][ T5966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.026362][ T5966] RSP: 002b:00007fb367184038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 131.034768][ T5966] RAX: ffffffffffffffda RBX: 00007fb366515f80 RCX: 00007fb366379e79 [ 131.042728][ T5966] RDX: 0000000020000b80 RSI: 00000000200003c0 RDI: 0000000000000000 [ 131.050688][ T5966] RBP: 00007fb367184090 R08: 00000000200000c0 R09: 0000000000000000 [ 131.058649][ T5966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.066608][ T5966] R13: 0000000000000000 R14: 00007fb366515f80 R15: 00007ffdf19c1438 [ 131.074578][ T5966] [ 131.220011][ T5273] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 131.237615][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.248180][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 131.257308][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.269297][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.4.181'. [ 131.278288][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.287924][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.309507][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.370984][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 131.534099][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.542766][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.551765][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.556445][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 131.562751][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 131.584674][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 131.587902][ T9] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 131.595001][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 131.611331][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.061149][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.075379][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.078318][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 132.094262][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.124353][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.140403][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.159651][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.195083][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.203661][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.218647][ T9] usb 4-1: config 0 descriptor?? [ 132.235707][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.259026][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.286188][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.296642][ T5982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.320269][ T5273] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 132.335490][ T5273] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 132.353416][ T5273] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.373635][ T5273] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 132.391491][ T5273] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 132.410282][ T5273] usb 2-1: Product: syz [ 132.416100][ T5273] usb 2-1: Manufacturer: syz [ 132.431128][ T5273] usb 2-1: SerialNumber: syz [ 132.447278][ T5273] usb 2-1: config 0 descriptor?? [ 132.468631][ T5273] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 132.487010][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 132.592203][ T5971] Bluetooth: MGMT ver 1.23 [ 132.604384][ T5971] netlink: 60 bytes leftover after parsing attributes in process `syz.3.183'. [ 132.604411][ T5971] netlink: 23 bytes leftover after parsing attributes in process `syz.3.183'. [ 132.614236][ T5971] netlink: 23 bytes leftover after parsing attributes in process `syz.3.183'. [ 132.706768][ T8] usb 2-1: USB disconnect, device number 6 [ 132.725857][ T8] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 133.058585][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064919][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136416][ T943] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.205524][ T5993] FAULT_INJECTION: forcing a failure. [ 133.205524][ T5993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.223495][ T5993] CPU: 1 UID: 0 PID: 5993 Comm: syz.2.190 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 133.234094][ T5993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 133.244148][ T5993] Call Trace: [ 133.247423][ T5993] [ 133.250357][ T5993] dump_stack_lvl+0x241/0x360 [ 133.255046][ T5993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.260251][ T5993] ? __pfx__printk+0x10/0x10 [ 133.264838][ T5993] ? __pfx_lock_release+0x10/0x10 [ 133.269865][ T5993] should_fail_ex+0x3b0/0x4e0 [ 133.274553][ T5993] _copy_from_iter+0x1f6/0x1960 [ 133.279401][ T5993] ? __virt_addr_valid+0x183/0x530 [ 133.284491][ T5993] ? __pfx_lock_release+0x10/0x10 [ 133.289518][ T5993] ? __alloc_skb+0x28f/0x440 [ 133.294098][ T5993] ? __pfx__copy_from_iter+0x10/0x10 [ 133.299387][ T5993] ? __virt_addr_valid+0x183/0x530 [ 133.304479][ T5993] ? __virt_addr_valid+0x183/0x530 [ 133.309572][ T5993] ? __virt_addr_valid+0x45f/0x530 [ 133.314666][ T5993] ? __check_object_size+0x49c/0x900 [ 133.319962][ T5993] netlink_sendmsg+0x73d/0xcb0 [ 133.324731][ T5993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.330004][ T5993] ? __import_iovec+0x536/0x820 [ 133.334856][ T5993] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 133.340152][ T5993] ? security_socket_sendmsg+0x87/0xb0 [ 133.345607][ T5993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.350888][ T5993] __sock_sendmsg+0x221/0x270 [ 133.355558][ T5993] ____sys_sendmsg+0x525/0x7d0 [ 133.360356][ T5993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.365651][ T5993] __sys_sendmsg+0x2b0/0x3a0 [ 133.370239][ T5993] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.375338][ T5993] ? vfs_write+0x7c4/0xc90 [ 133.379809][ T5993] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.386140][ T5993] ? do_syscall_64+0x100/0x230 [ 133.390911][ T5993] ? do_syscall_64+0xb6/0x230 [ 133.395596][ T5993] do_syscall_64+0xf3/0x230 [ 133.400092][ T5993] ? clear_bhb_loop+0x35/0x90 [ 133.404753][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.410635][ T5993] RIP: 0033:0x7fb366379e79 [ 133.415047][ T5993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.434632][ T5993] RSP: 002b:00007fb367184038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.443052][ T5993] RAX: ffffffffffffffda RBX: 00007fb366515f80 RCX: 00007fb366379e79 [ 133.451025][ T5993] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 133.458983][ T5993] RBP: 00007fb367184090 R08: 0000000000000000 R09: 0000000000000000 [ 133.466944][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.474907][ T5993] R13: 0000000000000000 R14: 00007fb366515f80 R15: 00007ffdf19c1438 [ 133.482893][ T5993] [ 133.496185][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.497137][ T5273] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.794716][ T943] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.871534][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 134.496298][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 134.507574][ T943] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 134.520232][ T5273] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 134.532307][ T5273] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 134.555863][ T5273] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 134.596443][ T9] usb 4-1: string descriptor 0 read error: -71 [ 134.605227][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 134.612760][ T943] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 134.631945][ T5273] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 134.633845][ T943] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.662887][ T9] usb 4-1: USB disconnect, device number 6 [ 134.669767][ T8] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 134.678013][ T5273] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 134.696558][ T8] usb 2-1: can't read configurations, error -71 [ 134.707391][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.736393][ T5273] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.771246][ T5273] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 134.896789][ T5989] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.923153][ T943] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.924975][ T5273] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 135.120327][ T5273] usb 5-1: Product: syz [ 135.126999][ T5273] usb 5-1: Manufacturer: syz [ 135.133115][ T5273] usb 5-1: SerialNumber: syz [ 135.150624][ T5273] usb 5-1: config 0 descriptor?? [ 135.921495][ T5273] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 135.949625][ T5273] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 135.970861][ T5273] usb 5-1: USB disconnect, device number 5 [ 135.978514][ T5273] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 135.990396][ T6010] VFS: could not find a valid V7 on nullb0. [ 136.002444][ T6010] hpfs: Bad magic ... probably not HPFS [ 137.148349][ T5271] usb 1-1: USB disconnect, device number 7 [ 140.366397][ T943] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 140.382653][ T6070] FAULT_INJECTION: forcing a failure. [ 140.382653][ T6070] name failslab, interval 1, probability 0, space 0, times 0 [ 140.395864][ T6070] CPU: 1 UID: 0 PID: 6070 Comm: syz.4.208 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 140.406472][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 140.416521][ T6070] Call Trace: [ 140.419788][ T6070] [ 140.422709][ T6070] dump_stack_lvl+0x241/0x360 [ 140.427384][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.432573][ T6070] ? __pfx__printk+0x10/0x10 [ 140.437171][ T6070] ? ref_tracker_alloc+0x332/0x490 [ 140.442282][ T6070] should_fail_ex+0x3b0/0x4e0 [ 140.446952][ T6070] ? skb_clone+0x20c/0x390 [ 140.451363][ T6070] should_failslab+0xac/0x100 [ 140.456031][ T6070] ? skb_clone+0x20c/0x390 [ 140.460438][ T6070] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 140.465809][ T6070] skb_clone+0x20c/0x390 [ 140.470049][ T6070] __netlink_deliver_tap+0x3cc/0x7c0 [ 140.475331][ T6070] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.480517][ T6070] netlink_deliver_tap+0x19d/0x1b0 [ 140.485618][ T6070] netlink_unicast+0x7c4/0x990 [ 140.490381][ T6070] ? __pfx_netlink_unicast+0x10/0x10 [ 140.495658][ T6070] ? __virt_addr_valid+0x183/0x530 [ 140.500762][ T6070] ? __check_object_size+0x49c/0x900 [ 140.506038][ T6070] ? bpf_lsm_netlink_send+0x9/0x10 [ 140.511146][ T6070] netlink_sendmsg+0x8e4/0xcb0 [ 140.515907][ T6070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.521185][ T6070] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 140.526466][ T6070] ? security_socket_sendmsg+0x87/0xb0 [ 140.531915][ T6070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.537184][ T6070] __sock_sendmsg+0x221/0x270 [ 140.541858][ T6070] sock_write_iter+0x2dd/0x400 [ 140.546616][ T6070] ? __pfx_sock_write_iter+0x10/0x10 [ 140.551900][ T6070] ? bpf_lsm_file_permission+0x9/0x10 [ 140.557262][ T6070] ? security_file_permission+0x7f/0xa0 [ 140.562807][ T6070] vfs_write+0xa72/0xc90 [ 140.567049][ T6070] ? __pfx_sock_write_iter+0x10/0x10 [ 140.572326][ T6070] ? __pfx_vfs_write+0x10/0x10 [ 140.577092][ T6070] ksys_write+0x1a0/0x2c0 [ 140.581432][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 140.586286][ T6070] ? do_syscall_64+0x100/0x230 [ 140.591051][ T6070] ? do_syscall_64+0xb6/0x230 [ 140.595814][ T6070] do_syscall_64+0xf3/0x230 [ 140.600319][ T6070] ? clear_bhb_loop+0x35/0x90 [ 140.604993][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.610879][ T6070] RIP: 0033:0x7f8826579e79 [ 140.615286][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.634881][ T6070] RSP: 002b:00007f88272fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.643284][ T6070] RAX: ffffffffffffffda RBX: 00007f8826715f80 RCX: 00007f8826579e79 [ 140.651244][ T6070] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000003 [ 140.659201][ T6070] RBP: 00007f88272fb090 R08: 0000000000000000 R09: 0000000000000000 [ 140.667158][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.675117][ T6070] R13: 0000000000000000 R14: 00007f8826715f80 R15: 00007ffe5cae8a38 [ 140.683088][ T6070] [ 140.756373][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.787400][ T943] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 140.802162][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.812572][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.823742][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.831317][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.840288][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.851593][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.859605][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.866380][ T5271] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 140.868536][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.887021][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.894402][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.903352][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.916116][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.923764][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.933494][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.944426][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.952538][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 140.961851][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.972885][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 140.983772][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 140.994922][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.001605][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 141.012496][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.023834][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.032749][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.040834][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.052880][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.061077][ T5271] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.070290][ T6062] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.080040][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.093107][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.100700][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 141.112147][ T943] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 141.125092][ T943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.138810][ T943] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 141.161789][ T943] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 141.171603][ T943] usb 4-1: Product: syz [ 141.177118][ T943] usb 4-1: Manufacturer: syz [ 141.192705][ T943] usb 4-1: SerialNumber: syz [ 141.212176][ T943] usb 4-1: config 0 descriptor?? [ 141.229810][ T5271] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 141.238718][ T943] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 141.313874][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.325956][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 141.368454][ T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 141.389368][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.403891][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.442624][ T6073] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 141.445355][ T5274] usb 4-1: USB disconnect, device number 7 [ 141.462471][ T5271] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.476578][ T5271] usb usb2-port1: attempt power cycle [ 141.484942][ T5274] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 141.490324][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.548257][ T6065] VFS: could not find a valid V7 on nullb0. [ 141.607456][ T6065] hpfs: Bad magic ... probably not HPFS [ 141.937545][ T5271] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 141.979239][ T5271] usb 2-1: Invalid ep0 maxpacket: 16 [ 141.995838][ T6078] VFS: could not find a valid V7 on nullb0. [ 142.016787][ T6078] hpfs: Bad magic ... probably not HPFS [ 142.079124][ T5274] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 142.109396][ T5273] usb 5-1: USB disconnect, device number 6 [ 142.156568][ T5271] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 142.207916][ T5271] usb 2-1: Invalid ep0 maxpacket: 16 [ 142.224493][ T5271] usb usb2-port1: unable to enumerate USB device [ 142.235002][ T51] usb 3-1: USB disconnect, device number 6 [ 142.299310][ T5274] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 142.336842][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.348205][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.361032][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.370620][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.397494][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.425305][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.443930][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.470419][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.487171][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.502012][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.515028][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.533184][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.544630][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.565782][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.588521][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.603814][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.616701][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.631376][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.641417][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.657815][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.672091][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.683711][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 142.705119][ T5274] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 142.722889][ T5274] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.730197][ T5274] usb 4-1: string descriptor 0 read error: -71 [ 142.751962][ T5274] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 142.769751][ T5274] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 142.783846][ T5274] usb 4-1: config 0 descriptor?? [ 142.789609][ T5274] usb 4-1: can't set config #0, error -71 [ 142.801183][ T5274] usb 4-1: USB disconnect, device number 8 [ 143.236681][ T51] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.466113][ T6096] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 143.570438][ T51] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 144.075202][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.221134][ T51] usb 3-1: config 0 descriptor?? [ 144.255839][ T29] audit: type=1326 audit(1724502523.751:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 144.354387][ T29] audit: type=1326 audit(1724502523.751:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 144.506482][ T29] audit: type=1326 audit(1724502523.761:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 144.550314][ T51] ath6kl: Failed to submit usb control message: -71 [ 144.570654][ T51] ath6kl: unable to send the bmi data to the device: -71 [ 144.725544][ T51] ath6kl: Unable to send get target info: -71 [ 144.793692][ T29] audit: type=1326 audit(1724502523.761:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 144.988317][ T51] ath6kl: Failed to init ath6kl core: -71 [ 145.229714][ T51] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 145.418047][ T29] audit: type=1326 audit(1724502523.761:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 145.489955][ T51] usb 3-1: USB disconnect, device number 7 [ 145.498235][ T29] audit: type=1326 audit(1724502523.761:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 145.536841][ T29] audit: type=1326 audit(1724502523.761:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 145.575576][ T29] audit: type=1326 audit(1724502523.761:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 145.682451][ T29] audit: type=1326 audit(1724502523.761:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6098 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3355d79e79 code=0x7ffc0000 [ 146.426372][ T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.438889][ T6124] misc userio: Invalid payload size [ 146.627152][ T51] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 146.665806][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.690968][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.743074][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.771220][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.803981][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.841523][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.870750][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.895562][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 146.927716][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.958735][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 146.987355][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.023009][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.065144][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.088895][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.110199][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.126017][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.140742][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.327298][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.341304][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.351565][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.367383][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.398903][ T51] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 147.409491][ T51] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 147.423454][ T51] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.499919][ T51] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 147.509675][ T51] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 147.534654][ T51] usb 3-1: Product: syz [ 147.573585][ T51] usb 3-1: Manufacturer: syz [ 147.596382][ T51] usb 3-1: SerialNumber: syz [ 147.668559][ T51] usb 3-1: config 0 descriptor?? [ 147.776007][ T51] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 148.049703][ T5319] usb 3-1: USB disconnect, device number 8 [ 148.083400][ T5319] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 151.206370][ T5319] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.513242][ T6160] FAULT_INJECTION: forcing a failure. [ 151.513242][ T6160] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 151.568606][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.4.234 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 151.579237][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 151.589315][ T6160] Call Trace: [ 151.592601][ T6160] [ 151.595536][ T6160] dump_stack_lvl+0x241/0x360 [ 151.600225][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.605450][ T6160] ? __pfx__printk+0x10/0x10 [ 151.610082][ T6160] should_fail_ex+0x3b0/0x4e0 [ 151.614780][ T6160] prepare_alloc_pages+0x1da/0x5d0 [ 151.619910][ T6160] __alloc_pages_noprof+0x166/0x6c0 [ 151.625124][ T6160] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 151.630853][ T6160] ? do_splice_direct+0x28c/0x3e0 [ 151.635893][ T6160] ? __se_sys_sendfile64+0x17c/0x1e0 [ 151.641187][ T6160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.647283][ T6160] alloc_pages_bulk_noprof+0x729/0xd40 [ 151.652768][ T6160] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 151.658762][ T6160] ? copy_splice_read+0x18d/0xb60 [ 151.663801][ T6160] ? copy_splice_read+0x18d/0xb60 [ 151.668843][ T6160] ? copy_splice_read+0x18d/0xb60 [ 151.673878][ T6160] ? copy_splice_read+0x18d/0xb60 [ 151.678917][ T6160] ? __kmalloc_noprof+0x21a/0x400 [ 151.683963][ T6160] copy_splice_read+0x1c5/0xb60 [ 151.688830][ T6160] ? __asan_memset+0x23/0x50 [ 151.693440][ T6160] ? __pfx_copy_splice_read+0x10/0x10 [ 151.698832][ T6160] ? __raw_spin_lock_init+0x45/0x100 [ 151.704132][ T6160] ? alloc_pipe_info+0x370/0x4d0 [ 151.709076][ T6160] ? __pfx_copy_splice_read+0x10/0x10 [ 151.714462][ T6160] splice_direct_to_actor+0x4b7/0xc90 [ 151.719865][ T6160] ? __pfx_direct_splice_actor+0x10/0x10 [ 151.725518][ T6160] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 151.731435][ T6160] ? __fget_files+0x29/0x470 [ 151.736039][ T6160] ? __pfx_lock_release+0x10/0x10 [ 151.741092][ T6160] do_splice_direct+0x28c/0x3e0 [ 151.745970][ T6160] ? __pfx_do_splice_direct+0x10/0x10 [ 151.751362][ T6160] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 151.757276][ T6160] ? rw_verify_area+0x1d2/0x6b0 [ 151.762154][ T6160] do_sendfile+0x56d/0xe20 [ 151.763322][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 151.766581][ T6160] ? __pfx_do_sendfile+0x10/0x10 [ 151.766622][ T6160] __se_sys_sendfile64+0x17c/0x1e0 [ 151.766647][ T6160] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 151.766669][ T6160] ? do_syscall_64+0x100/0x230 [ 151.766691][ T6160] ? do_syscall_64+0xb6/0x230 [ 151.766711][ T6160] do_syscall_64+0xf3/0x230 [ 151.766729][ T6160] ? clear_bhb_loop+0x35/0x90 [ 151.766752][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.766771][ T6160] RIP: 0033:0x7f8826579e79 [ 151.766789][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.766805][ T6160] RSP: 002b:00007f88272fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 151.766827][ T6160] RAX: ffffffffffffffda RBX: 00007f8826715f80 RCX: 00007f8826579e79 [ 151.766841][ T6160] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 151.766853][ T6160] RBP: 00007f88272fb090 R08: 0000000000000000 R09: 0000000000000000 [ 151.766865][ T6160] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 151.766877][ T6160] R13: 0000000000000000 R14: 00007f8826715f80 R15: 00007ffe5cae8a38 [ 151.766907][ T6160] [ 151.951505][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 152.597579][ T6175] netlink: 'syz.1.240': attribute type 1 has an invalid length. [ 152.627412][ T6180] misc userio: Invalid payload size [ 152.680689][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 152.828968][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 153.223434][ T6189] veth0_vlan: entered allmulticast mode [ 156.085931][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 156.160676][ T5309] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.168958][ T5319] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.364090][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.248'. [ 157.265963][ T6231] misc userio: Invalid payload size [ 157.308716][ T5309] usb 5-1: Using ep0 maxpacket: 8 [ 157.367726][ T5309] usb 5-1: config 0 has an invalid interface number: 11 but max is 3 [ 157.385575][ T5309] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 157.848301][ T5309] usb 5-1: config 0 has an invalid interface number: 239 but max is 3 [ 157.864095][ T5319] usb 3-1: device descriptor read/all, error -71 [ 157.896419][ T5309] usb 5-1: config 0 has an invalid interface number: 12 but max is 3 [ 157.904525][ T5309] usb 5-1: config 0 has an invalid interface number: 221 but max is 3 [ 157.967000][ T5309] usb 5-1: config 0 has an invalid interface number: 20 but max is 3 [ 157.976034][ T6240] pimreg: entered allmulticast mode [ 157.989352][ T5309] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 158.126729][ T5309] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 158.142919][ T5309] usb 5-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 158.153359][ T5309] usb 5-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 158.174663][ T5309] usb 5-1: config 0 has no interface number 0 [ 158.283810][ T5309] usb 5-1: config 0 has no interface number 1 [ 158.290125][ T5309] usb 5-1: config 0 has no interface number 2 [ 158.296414][ T5309] usb 5-1: config 0 has no interface number 3 [ 158.302646][ T5309] usb 5-1: config 0 has no interface number 4 [ 158.309224][ T5309] usb 5-1: config 0 interface 11 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 158.355152][ T5309] usb 5-1: config 0 interface 11 altsetting 4 has an endpoint descriptor with address 0x7E, changing to 0xE [ 158.630259][ T6240] pimreg: left allmulticast mode [ 158.862965][ T5309] usb 5-1: config 0 interface 11 altsetting 4 endpoint 0xE has an invalid bInterval 147, changing to 7 [ 158.876416][ T5309] usb 5-1: config 0 interface 11 altsetting 4 endpoint 0xE has invalid maxpacket 25720, setting to 1024 [ 158.890531][ T5309] usb 5-1: config 0 interface 11 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 158.947059][ T5309] usb 5-1: config 0 interface 11 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 158.976431][ T5309] usb 5-1: config 0 interface 11 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 159.005288][ T5309] usb 5-1: too many endpoints for config 0 interface 239 altsetting 58: 157, using maximum allowed: 30 [ 159.175000][ T5309] usb 5-1: config 0 interface 239 altsetting 58 endpoint 0xB has invalid maxpacket 80, setting to 64 [ 159.187212][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x7, skipping [ 159.201000][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x3, skipping [ 159.306670][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 159.324741][ T6254] FAULT_INJECTION: forcing a failure. [ 159.324741][ T6254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.346885][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 159.430638][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz.0.261 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 159.441273][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 159.451327][ T6254] Call Trace: [ 159.454623][ T6254] [ 159.457562][ T6254] dump_stack_lvl+0x241/0x360 [ 159.462254][ T6254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.467465][ T6254] ? __pfx__printk+0x10/0x10 [ 159.472060][ T6254] ? __pfx_lock_release+0x10/0x10 [ 159.477088][ T6254] should_fail_ex+0x3b0/0x4e0 [ 159.481785][ T6254] _copy_from_iter+0x1f6/0x1960 [ 159.486651][ T6254] ? __virt_addr_valid+0x183/0x530 [ 159.491776][ T6254] ? __pfx_lock_release+0x10/0x10 [ 159.496792][ T6254] ? __alloc_skb+0x28f/0x440 [ 159.501375][ T6254] ? __pfx__copy_from_iter+0x10/0x10 [ 159.506667][ T6254] ? __virt_addr_valid+0x183/0x530 [ 159.511776][ T6254] ? __virt_addr_valid+0x183/0x530 [ 159.517495][ T6254] ? __virt_addr_valid+0x45f/0x530 [ 159.522594][ T6254] ? __check_object_size+0x49c/0x900 [ 159.527885][ T6254] netlink_sendmsg+0x73d/0xcb0 [ 159.532677][ T6254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.537968][ T6254] ? __import_iovec+0x536/0x820 [ 159.542998][ T6254] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.548281][ T6254] ? security_socket_sendmsg+0x87/0xb0 [ 159.553749][ T6254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.559025][ T6254] __sock_sendmsg+0x221/0x270 [ 159.563707][ T6254] ____sys_sendmsg+0x525/0x7d0 [ 159.568473][ T6254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.573751][ T6254] __sys_sendmmsg+0x3b2/0x740 [ 159.578435][ T6254] ? __pfx___sys_sendmmsg+0x10/0x10 [ 159.583694][ T6254] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.589690][ T6254] ? ksys_write+0x23e/0x2c0 [ 159.594180][ T6254] ? __pfx_lock_release+0x10/0x10 [ 159.599222][ T6254] ? vfs_write+0x7c4/0xc90 [ 159.603624][ T6254] ? __mutex_unlock_slowpath+0x21d/0x750 [ 159.609245][ T6254] ? __pfx_vfs_write+0x10/0x10 [ 159.614014][ T6254] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 159.619983][ T6254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 159.626317][ T6254] ? do_syscall_64+0x100/0x230 [ 159.631099][ T6254] __x64_sys_sendmmsg+0xa0/0xb0 [ 159.635960][ T6254] do_syscall_64+0xf3/0x230 [ 159.640465][ T6254] ? clear_bhb_loop+0x35/0x90 [ 159.645127][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.651015][ T6254] RIP: 0033:0x7f5f3d579e79 [ 159.655445][ T6254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.675065][ T6254] RSP: 002b:00007f5f3e3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 159.683505][ T6254] RAX: ffffffffffffffda RBX: 00007f5f3d715f80 RCX: 00007f5f3d579e79 [ 159.691490][ T6254] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 159.699474][ T6254] RBP: 00007f5f3e3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.707456][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.715439][ T6254] R13: 0000000000000000 R14: 00007f5f3d715f80 R15: 00007ffd033d7a48 [ 159.723509][ T6254] [ 159.766510][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 159.907731][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 159.936046][ T5309] usb 5-1: config 0 interface 239 altsetting 58 has 9 endpoint descriptors, different from the interface descriptor's value: 157 [ 159.964744][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 160.026496][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 160.063682][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 160.075060][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 160.112864][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 160.138883][ T5309] usb 5-1: config 0 interface 12 altsetting 129 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 160.153383][ T5309] usb 5-1: config 0 interface 221 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 160.167927][ T5309] usb 5-1: too many endpoints for config 0 interface 20 altsetting 199: 123, using maximum allowed: 30 [ 160.181148][ T29] audit: type=1326 audit(1724502539.681:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb366379e79 code=0x0 [ 160.194469][ T5309] usb 5-1: config 0 interface 20 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 160.393191][ T5309] usb 5-1: config 0 interface 11 has no altsetting 0 [ 160.496042][ T5309] usb 5-1: config 0 interface 239 has no altsetting 0 [ 160.507064][ T5309] usb 5-1: config 0 interface 12 has no altsetting 0 [ 160.513808][ T5309] usb 5-1: config 0 interface 221 has no altsetting 0 [ 160.520928][ T5309] usb 5-1: config 0 interface 20 has no altsetting 0 [ 160.572397][ T5309] usb 5-1: string descriptor 0 read error: -71 [ 161.283928][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.292746][ T5309] usb 5-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=90.13 [ 161.304657][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.335849][ T5309] usb 5-1: config 0 descriptor?? [ 161.347182][ T5309] usb 5-1: can't set config #0, error -71 [ 161.405478][ T5309] usb 5-1: USB disconnect, device number 7 [ 161.486330][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 161.494995][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 161.625755][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 161.652283][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 161.693214][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.400783][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.416005][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.631910][ T6285] libceph: resolve '0.' (ret=-3): failed [ 162.642445][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 162.649340][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 162.659019][ T9] usbtmc 1-1:16.0: can't read capabilities [ 162.756447][ T5309] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 162.844612][ T6270] FAULT_INJECTION: forcing a failure. [ 162.844612][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.858537][ T5319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 162.867575][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.0.264 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 162.878172][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.888230][ T6270] Call Trace: [ 162.891498][ T6270] [ 162.894435][ T6270] dump_stack_lvl+0x241/0x360 [ 162.899129][ T6270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.904317][ T6270] ? __pfx__printk+0x10/0x10 [ 162.908908][ T6270] ? __pfx_lock_release+0x10/0x10 [ 162.913917][ T6270] ? rcu_is_watching+0x15/0xb0 [ 162.918680][ T6270] ? trace_contention_end+0x3c/0x120 [ 162.923970][ T6270] should_fail_ex+0x3b0/0x4e0 [ 162.928651][ T6270] _copy_from_user+0x2f/0xe0 [ 162.933238][ T6270] usbtmc_ioctl_config_termc+0xa3/0x2c0 [ 162.938797][ T6270] ? __pfx_usbtmc_ioctl_config_termc+0x10/0x10 [ 162.944938][ T6270] ? __pfx_smack_file_ioctl+0x10/0x10 [ 162.950322][ T6270] usbtmc_ioctl+0x2d5/0x8b0 [ 162.954811][ T6270] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 162.959821][ T6270] ? bpf_lsm_file_ioctl+0x9/0x10 [ 162.964748][ T6270] ? security_file_ioctl+0x87/0xb0 [ 162.969857][ T6270] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 162.974895][ T6270] __se_sys_ioctl+0xfc/0x170 [ 162.979489][ T6270] do_syscall_64+0xf3/0x230 [ 162.983979][ T6270] ? clear_bhb_loop+0x35/0x90 [ 162.988644][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.994521][ T6270] RIP: 0033:0x7f5f3d579e79 [ 162.998919][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.018519][ T6270] RSP: 002b:00007f5f3e3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.026942][ T6270] RAX: ffffffffffffffda RBX: 00007f5f3d715f80 RCX: 00007f5f3d579e79 [ 163.034904][ T6270] RDX: 0000000000000000 RSI: 0000000040025b0c RDI: 0000000000000004 [ 163.042861][ T6270] RBP: 00007f5f3e3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.050816][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.058768][ T6270] R13: 0000000000000000 R14: 00007f5f3d715f80 R15: 00007ffd033d7a48 [ 163.066751][ T6270] [ 163.084536][ T5274] usb 1-1: USB disconnect, device number 8 [ 163.097999][ T5309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.109189][ T5309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 163.129057][ T5309] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 163.155308][ T5309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.167738][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.195428][ T6280] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 163.204820][ T5309] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.248129][ T5319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.284836][ T5319] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 163.323687][ T5319] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 163.353606][ T5319] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.363492][ T5319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.379982][ T6283] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 163.400236][ T5319] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.497845][ T6287] VFS: could not find a valid V7 on nullb0. [ 163.507862][ T6287] hpfs: Bad magic ... probably not HPFS [ 163.929112][ T6297] VFS: could not find a valid V7 on nullb0. [ 164.003347][ T6297] hpfs: Bad magic ... probably not HPFS [ 164.089963][ T5319] usb 5-1: USB disconnect, device number 8 [ 164.118136][ T51] usb 2-1: USB disconnect, device number 13 [ 165.233663][ T5274] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 166.148182][ T5274] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.166337][ T5274] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.186320][ T5274] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.205651][ T5274] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.258937][ T5274] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.298510][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.340916][ T5274] usb 3-1: Product: syz [ 166.371673][ T5274] usb 3-1: Manufacturer: syz [ 166.396526][ T51] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.450497][ T5274] cdc_wdm 3-1:1.0: skipping garbage [ 166.471746][ T5274] cdc_wdm 3-1:1.0: skipping garbage [ 166.498632][ T5274] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 166.504562][ T5274] cdc_wdm 3-1:1.0: Unknown control protocol [ 166.534420][ T6323] pipefs: Unknown parameter '5o¤bÁÊY ˜žì­r' [ 166.648302][ T51] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 166.891206][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.907451][ T51] usb 1-1: config 0 descriptor?? [ 167.219738][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.226464][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.232827][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.239424][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.245691][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.252283][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.258543][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.265142][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.271402][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.277993][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.284249][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.290839][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.297105][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.303699][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.309960][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.316551][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.322813][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.329404][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.335668][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 167.342261][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 167.912656][ T9] usb 3-1: USB disconnect, device number 12 [ 167.918637][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 167.929085][ T51] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 167.978315][ T51] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 168.001512][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.005419][ T51] [drm:udl_init] *ERROR* Selecting channel failed [ 168.021922][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.099369][ T51] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 168.110211][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.125431][ T51] [drm] Initialized udl on minor 2 [ 168.129954][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.142791][ T51] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 168.182427][ T51] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 168.223787][ T5271] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 168.235697][ T51] usb 1-1: USB disconnect, device number 9 [ 168.262105][ T5271] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 168.361513][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.396620][ T6335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 168.999976][ T6329] ALSA: mixer_oss: invalid OSS volume 'üZ­y' [ 171.778554][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 173.541622][ T6378] netlink: 24 bytes leftover after parsing attributes in process `syz.1.291'. [ 173.550960][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 174.858013][ T6399] FAULT_INJECTION: forcing a failure. [ 174.858013][ T6399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.881688][ T6399] CPU: 0 UID: 0 PID: 6399 Comm: syz.2.298 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 174.892313][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 174.902371][ T6399] Call Trace: [ 174.905642][ T6399] [ 174.908565][ T6399] dump_stack_lvl+0x241/0x360 [ 174.913326][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.918518][ T6399] ? __pfx__printk+0x10/0x10 [ 174.923108][ T6399] ? __pfx_lock_release+0x10/0x10 [ 174.928137][ T6399] should_fail_ex+0x3b0/0x4e0 [ 174.932814][ T6399] _copy_from_iter+0x1f6/0x1960 [ 174.937660][ T6399] ? __virt_addr_valid+0x183/0x530 [ 174.942763][ T6399] ? __pfx_lock_release+0x10/0x10 [ 174.947789][ T6399] ? __alloc_skb+0x28f/0x440 [ 174.952369][ T6399] ? __pfx__copy_from_iter+0x10/0x10 [ 174.957647][ T6399] ? __virt_addr_valid+0x183/0x530 [ 174.962748][ T6399] ? __virt_addr_valid+0x183/0x530 [ 174.967845][ T6399] ? __virt_addr_valid+0x45f/0x530 [ 174.972944][ T6399] ? __check_object_size+0x49c/0x900 [ 174.978225][ T6399] netlink_sendmsg+0x73d/0xcb0 [ 174.982987][ T6399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.988265][ T6399] ? __import_iovec+0x536/0x820 [ 174.993110][ T6399] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 174.998389][ T6399] ? security_socket_sendmsg+0x87/0xb0 [ 175.003840][ T6399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.009113][ T6399] __sock_sendmsg+0x221/0x270 [ 175.013792][ T6399] ____sys_sendmsg+0x525/0x7d0 [ 175.018559][ T6399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.023851][ T6399] __sys_sendmsg+0x2b0/0x3a0 [ 175.028437][ T6399] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.033539][ T6399] ? vfs_write+0x7c4/0xc90 [ 175.037977][ T6399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.044299][ T6399] ? do_syscall_64+0x100/0x230 [ 175.049057][ T6399] ? do_syscall_64+0xb6/0x230 [ 175.053722][ T6399] do_syscall_64+0xf3/0x230 [ 175.058219][ T6399] ? clear_bhb_loop+0x35/0x90 [ 175.062888][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.068769][ T6399] RIP: 0033:0x7fb366379e79 [ 175.073173][ T6399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.092792][ T6399] RSP: 002b:00007fb367184038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.101197][ T6399] RAX: ffffffffffffffda RBX: 00007fb366515f80 RCX: 00007fb366379e79 [ 175.109156][ T6399] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 175.117117][ T6399] RBP: 00007fb367184090 R08: 0000000000000000 R09: 0000000000000000 [ 175.125077][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.133036][ T6399] R13: 0000000000000000 R14: 00007fb366515f80 R15: 00007ffdf19c1438 [ 175.141013][ T6399] [ 175.144038][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.477376][ T51] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 175.836298][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 176.021924][ T51] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 176.036661][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.055385][ T51] usb 2-1: config 0 descriptor?? [ 176.196327][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 176.269812][ T51] viperboard 2-1:0.0: version 0.00 found at bus 002 address 014 [ 177.402047][ T51] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 177.413656][ T51] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 177.431732][ T51] usb 2-1: USB disconnect, device number 14 [ 177.758634][ T6430] FAULT_INJECTION: forcing a failure. [ 177.758634][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.918601][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.1.307 Not tainted 6.11.0-rc4-syzkaller-00255-gd2bafcf224f3 #0 [ 177.929245][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 177.939314][ T6430] Call Trace: [ 177.942606][ T6430] [ 177.945543][ T6430] dump_stack_lvl+0x241/0x360 [ 177.950240][ T6430] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.955446][ T6430] ? __pfx__printk+0x10/0x10 [ 177.960055][ T6430] ? __pfx_lock_release+0x10/0x10 [ 177.965096][ T6430] ? vfs_write+0x7c4/0xc90 [ 177.969526][ T6430] should_fail_ex+0x3b0/0x4e0 [ 177.974223][ T6430] _copy_from_user+0x2f/0xe0 [ 177.978828][ T6430] __sys_bpf+0x1a4/0x810 [ 177.983092][ T6430] ? __pfx___sys_bpf+0x10/0x10 [ 177.987886][ T6430] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 177.993888][ T6430] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.000234][ T6430] ? do_syscall_64+0x100/0x230 [ 178.005020][ T6430] __x64_sys_bpf+0x7c/0x90 [ 178.009450][ T6430] do_syscall_64+0xf3/0x230 [ 178.013964][ T6430] ? clear_bhb_loop+0x35/0x90 [ 178.018657][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.024564][ T6430] RIP: 0033:0x7f2ec9779e79 [ 178.028988][ T6430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.048604][ T6430] RSP: 002b:00007f2eca50d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.057031][ T6430] RAX: ffffffffffffffda RBX: 00007f2ec9915f80 RCX: 00007f2ec9779e79 [ 178.065011][ T6430] RDX: 0000000000000020 RSI: 0000000020000040 RDI: 0000000000000009 [ 178.072990][ T6430] RBP: 00007f2eca50d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.080972][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.088952][ T6430] R13: 0000000000000000 R14: 00007f2ec9915f80 R15: 00007fff6d0e2b78 [ 178.096955][ T6430] [ 178.100171][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.935808][ T29] audit: type=1326 audit(1724502559.411:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6438 comm="syz.0.310" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f3d579e79 code=0x0 [ 181.342683][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'. [ 181.369579][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 181.375756][ T5229] Bluetooth: hci1: command 0x0406 tx timeout [ 181.376297][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 181.381998][ T5229] Bluetooth: hci4: command 0x0406 tx timeout [ 181.387823][ T5239] Bluetooth: hci2: command 0x0405 tx timeout [ 181.446534][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.2.315'. [ 185.386437][ T5309] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.429211][ T5309] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.559754][ T5309] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 186.591300][ T5309] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 186.625439][ T5309] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.668239][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.692858][ T6489] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 186.712793][ T5309] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.809089][ T6507] VFS: could not find a valid V7 on nullb0. [ 187.834361][ T6507] hpfs: Bad magic ... probably not HPFS [ 187.847497][ T5274] usb 3-1: USB disconnect, device number 13 [ 188.496471][ T5309] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.696484][ T5309] usb 5-1: Using ep0 maxpacket: 32 [ 188.716210][ T5309] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 188.745980][ T5309] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.780051][ T5309] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 188.804371][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.858407][ T5309] usb 5-1: config 0 descriptor?? [ 189.235662][ T6523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.329'. [ 189.262721][ T6523] netlink: 23 bytes leftover after parsing attributes in process `syz.4.329'. [ 189.273146][ T6523] netlink: 23 bytes leftover after parsing attributes in process `syz.4.329'. [ 189.758510][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.900238][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 190.935080][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.976971][ T9] usb 2-1: config 0 descriptor?? [ 191.491418][ T9] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 191.578465][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 191.593745][ T5309] usb 5-1: string descriptor 0 read error: -71 [ 191.611604][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 191.621193][ T5309] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 191.653969][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 191.669835][ T5309] usb 5-1: USB disconnect, device number 9 [ 191.688150][ T9] [drm] Initialized udl on minor 2 [ 191.698407][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 191.716742][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 191.724874][ T5319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 191.750734][ T5319] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 191.789027][ T9] usb 2-1: USB disconnect, device number 15 [ 191.858503][ T6537] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 192.556589][ T5319] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 193.198953][ T29] audit: type=1326 audit(1724502572.701:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.1.339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec9779e79 code=0x0 [ 194.868672][ T6546] sched: RT throttling activated [ 196.826835][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.833191][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.956870][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.963210][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.413051][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.428393][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.436101][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.486917][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.503374][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 256.516913][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.649043][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 256.665067][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 256.673204][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 256.691876][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 256.732095][ T4605] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 256.739780][ T4605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.748216][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.757826][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.765710][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.773823][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.781543][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 256.788956][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.821346][ T4605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.851213][ T4605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.864500][ T4605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.890150][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.899584][ T4605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.911910][ T4605] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.919474][ T4605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.928812][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.931707][ T4605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.949613][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.958806][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.966102][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.115300][ T6033] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.270820][ T6033] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.333561][ T6033] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.398421][ T6033] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.736808][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 257.784811][ T6576] chnl_net:caif_netlink_parms(): no params data found [ 257.918648][ T6033] bridge_slave_1: left allmulticast mode [ 257.924542][ T6033] bridge_slave_1: left promiscuous mode [ 257.933813][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.945823][ T6033] bridge_slave_0: left allmulticast mode [ 257.951647][ T6033] bridge_slave_0: left promiscuous mode [ 257.962237][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.265301][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.276087][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.287809][ T6033] bond0 (unregistering): Released all slaves [ 258.383670][ T6573] chnl_net:caif_netlink_parms(): no params data found [ 258.532561][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 258.636056][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.645314][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.662316][ T6575] bridge_slave_0: entered allmulticast mode [ 258.671463][ T6575] bridge_slave_0: entered promiscuous mode [ 258.684809][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.692316][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.699544][ T6575] bridge_slave_1: entered allmulticast mode [ 258.707360][ T6575] bridge_slave_1: entered promiscuous mode [ 258.727174][ T5229] Bluetooth: hci1: command tx timeout [ 258.751617][ T6576] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.774177][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.783306][ T6576] bridge_slave_0: entered allmulticast mode [ 258.791152][ T6576] bridge_slave_0: entered promiscuous mode [ 258.804539][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 258.886668][ T5229] Bluetooth: hci2: command tx timeout [ 258.886694][ T5239] Bluetooth: hci0: command tx timeout [ 258.951339][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.958958][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.966078][ T6576] bridge_slave_1: entered allmulticast mode [ 258.974053][ T5229] Bluetooth: hci3: command tx timeout [ 258.982812][ T6576] bridge_slave_1: entered promiscuous mode [ 259.017907][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.050032][ T5229] Bluetooth: hci4: command tx timeout [ 259.265867][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.275374][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.295527][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.316621][ T6573] bridge_slave_0: entered allmulticast mode [ 259.323918][ T6573] bridge_slave_0: entered promiscuous mode [ 259.355089][ T6033] hsr_slave_0: left promiscuous mode [ 259.376503][ T6033] hsr_slave_1: left promiscuous mode [ 259.386137][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.394838][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.406185][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.413950][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.439301][ T6033] veth1_macvtap: left promiscuous mode [ 259.445277][ T6033] veth0_macvtap: left promiscuous mode [ 259.462454][ T6033] veth1_vlan: left promiscuous mode [ 259.872329][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 259.904548][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 260.229821][ T6576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.242345][ T6576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.309916][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.317350][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.324503][ T6573] bridge_slave_1: entered allmulticast mode [ 260.332193][ T6573] bridge_slave_1: entered promiscuous mode [ 260.398461][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.405660][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.414577][ T6583] bridge_slave_0: entered allmulticast mode [ 260.422332][ T6583] bridge_slave_0: entered promiscuous mode [ 260.431608][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.439052][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.446227][ T6583] bridge_slave_1: entered allmulticast mode [ 260.452940][ T6583] bridge_slave_1: entered promiscuous mode [ 260.463406][ T6575] team0: Port device team_slave_0 added [ 260.472385][ T6575] team0: Port device team_slave_1 added [ 260.589535][ T6576] team0: Port device team_slave_0 added [ 260.599754][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.625740][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.633210][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.640768][ T6580] bridge_slave_0: entered allmulticast mode [ 260.648474][ T6580] bridge_slave_0: entered promiscuous mode [ 260.658448][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.671215][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.703819][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.711088][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.743142][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.765655][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.791320][ T6576] team0: Port device team_slave_1 added [ 260.799029][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.806206][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.813518][ T5229] Bluetooth: hci1: command tx timeout [ 260.817480][ T6580] bridge_slave_1: entered allmulticast mode [ 260.828855][ T6580] bridge_slave_1: entered promiscuous mode [ 260.846175][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.853420][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.879441][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.966404][ T5229] Bluetooth: hci0: command tx timeout [ 260.966557][ T5239] Bluetooth: hci2: command tx timeout [ 260.990868][ T6583] team0: Port device team_slave_0 added [ 261.000834][ T6583] team0: Port device team_slave_1 added [ 261.021858][ T6573] team0: Port device team_slave_0 added [ 261.039554][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.047510][ T5239] Bluetooth: hci3: command tx timeout [ 261.053025][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.079245][ T6576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.092981][ T6576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.100040][ T6576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.126688][ T5239] Bluetooth: hci4: command tx timeout [ 261.130394][ T6576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.157780][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.203761][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.222761][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.261433][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.286142][ T6573] team0: Port device team_slave_1 added [ 261.378023][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.420241][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.427734][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.456165][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.488398][ T6575] hsr_slave_0: entered promiscuous mode [ 261.495211][ T6575] hsr_slave_1: entered promiscuous mode [ 261.502326][ T6575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.510281][ T6575] Cannot create hsr debugfs directory [ 261.573599][ T6576] hsr_slave_0: entered promiscuous mode [ 261.581229][ T6576] hsr_slave_1: entered promiscuous mode [ 261.598899][ T6576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.615687][ T6576] Cannot create hsr debugfs directory [ 261.659796][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.667187][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.693524][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.746114][ T6580] team0: Port device team_slave_0 added [ 261.757544][ T6580] team0: Port device team_slave_1 added [ 261.785838][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.795360][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.821828][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.905725][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.917813][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.952507][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.005970][ T6583] hsr_slave_0: entered promiscuous mode [ 262.012637][ T6583] hsr_slave_1: entered promiscuous mode [ 262.019494][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.027104][ T6583] Cannot create hsr debugfs directory [ 262.048533][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.055866][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.082877][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.245430][ T6033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.277670][ T6580] hsr_slave_0: entered promiscuous mode [ 262.283938][ T6580] hsr_slave_1: entered promiscuous mode [ 262.290998][ T6580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.299960][ T6580] Cannot create hsr debugfs directory [ 262.310943][ T6573] hsr_slave_0: entered promiscuous mode [ 262.317658][ T6573] hsr_slave_1: entered promiscuous mode [ 262.323819][ T6573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.333405][ T6573] Cannot create hsr debugfs directory [ 262.387994][ T6033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.455988][ T6576] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.495439][ T6576] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.541738][ T6033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.644904][ T6576] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.752463][ T6033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.884799][ T6576] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.895531][ T5239] Bluetooth: hci1: command tx timeout [ 263.046491][ T5229] Bluetooth: hci0: command tx timeout [ 263.051997][ T5239] Bluetooth: hci2: command tx timeout [ 263.127792][ T5239] Bluetooth: hci3: command tx timeout [ 263.225104][ T5239] Bluetooth: hci4: command tx timeout [ 263.341815][ T6033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.439131][ T6033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.581720][ T6033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.718642][ T6033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.932631][ T6575] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.960095][ T6575] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.002725][ T6575] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.018413][ T6575] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.072336][ T6033] bridge_slave_1: left allmulticast mode [ 264.078168][ T6033] bridge_slave_1: left promiscuous mode [ 264.083901][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.093139][ T6033] bridge_slave_0: left allmulticast mode [ 264.099968][ T6033] bridge_slave_0: left promiscuous mode [ 264.105633][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.115965][ T6033] bridge_slave_1: left allmulticast mode [ 264.126225][ T6033] bridge_slave_1: left promiscuous mode [ 264.131929][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.143873][ T6033] bridge_slave_0: left allmulticast mode [ 264.149888][ T6033] bridge_slave_0: left promiscuous mode [ 264.155550][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.167977][ T6033] bridge_slave_1: left allmulticast mode [ 264.173641][ T6033] bridge_slave_1: left promiscuous mode [ 264.179507][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.189020][ T6033] bridge_slave_0: left allmulticast mode [ 264.194665][ T6033] bridge_slave_0: left promiscuous mode [ 264.202877][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.868464][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.880267][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.891790][ T6033] bond0 (unregistering): Released all slaves [ 264.966836][ T5239] Bluetooth: hci1: command tx timeout [ 264.983555][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.995939][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.006064][ T6033] bond0 (unregistering): Released all slaves [ 265.095742][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.107791][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.117838][ T6033] bond0 (unregistering): Released all slaves [ 265.127079][ T5239] Bluetooth: hci2: command tx timeout [ 265.132809][ T5239] Bluetooth: hci0: command tx timeout [ 265.207252][ T5239] Bluetooth: hci3: command tx timeout [ 265.213777][ T6576] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.277506][ T6576] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.286446][ T5239] Bluetooth: hci4: command tx timeout [ 265.294914][ T6576] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.330470][ T6576] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.511495][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.566030][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.662948][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.670083][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.682890][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.690011][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.789526][ T6583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.828936][ T6583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.871104][ T6583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.899538][ T6576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.922696][ T6583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.022731][ T6575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.034056][ T6575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.059493][ T6576] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.206512][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.213648][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.233226][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.240400][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.403748][ T6573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.483982][ T6033] hsr_slave_0: left promiscuous mode [ 266.493294][ T6033] hsr_slave_1: left promiscuous mode [ 266.507105][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.514547][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.532404][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.544534][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.567663][ T6033] hsr_slave_0: left promiscuous mode [ 266.575441][ T6033] hsr_slave_1: left promiscuous mode [ 266.585730][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.593217][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.612184][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.625146][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.641572][ T6033] hsr_slave_0: left promiscuous mode [ 266.657214][ T6033] hsr_slave_1: left promiscuous mode [ 266.663680][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.681024][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.689692][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.706575][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.785034][ T6033] veth1_macvtap: left promiscuous mode [ 266.807701][ T6033] veth0_macvtap: left promiscuous mode [ 266.813271][ T6033] veth1_vlan: left promiscuous mode [ 266.819377][ T6033] veth0_vlan: left promiscuous mode [ 266.826179][ T6033] veth1_macvtap: left promiscuous mode [ 266.832293][ T6033] veth0_macvtap: left promiscuous mode [ 266.837990][ T6033] veth1_vlan: left promiscuous mode [ 266.843254][ T6033] veth0_vlan: left promiscuous mode [ 266.850422][ T6033] veth1_macvtap: left promiscuous mode [ 266.855906][ T6033] veth0_macvtap: left promiscuous mode [ 266.861655][ T6033] veth1_vlan: left promiscuous mode [ 266.867473][ T6033] veth0_vlan: left promiscuous mode [ 267.390117][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 267.420863][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 267.975770][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 268.009750][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 268.566545][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 268.599848][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 268.948213][ T6573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.004882][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.053759][ T6573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.178730][ T6573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.221702][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.337315][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.349355][ T6575] veth0_vlan: entered promiscuous mode [ 269.388150][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.395264][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.440782][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.447966][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.468905][ T6575] veth1_vlan: entered promiscuous mode [ 269.599824][ T6576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.697173][ T6580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 269.719971][ T6580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 269.739623][ T6580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 269.827951][ T6580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 269.846278][ T6575] veth0_macvtap: entered promiscuous mode [ 269.872042][ T6575] veth1_macvtap: entered promiscuous mode [ 269.950282][ T6573] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.004903][ T6573] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.084336][ T6573] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.107549][ T6573] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 270.133069][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.156152][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.179375][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.223616][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.237584][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.265767][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.288031][ T6576] veth0_vlan: entered promiscuous mode [ 270.382423][ T6576] veth1_vlan: entered promiscuous mode [ 270.394517][ T6033] IPVS: stop unused estimator thread 0... [ 270.419928][ T6575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.429382][ T6575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.446919][ T6575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.455634][ T6575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.514599][ T6583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.703227][ T6576] veth0_macvtap: entered promiscuous mode [ 270.727955][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.787380][ T6576] veth1_macvtap: entered promiscuous mode [ 270.834315][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.867702][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.910094][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.933542][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.944834][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.955886][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.972286][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.995264][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.005680][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.068677][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.096843][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.108851][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.121959][ T6576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.135321][ T6576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.155207][ T6576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.171447][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.178612][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.204319][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.219806][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.245469][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.252657][ T6036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.264359][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.271518][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.298822][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.305953][ T6036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.318452][ T6576] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.327308][ T6576] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.336106][ T6576] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.352588][ T6576] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.643971][ T6583] veth0_vlan: entered promiscuous mode [ 271.711272][ T6583] veth1_vlan: entered promiscuous mode [ 271.810719][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.840159][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.938621][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.969258][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.064112][ T6583] veth0_macvtap: entered promiscuous mode [ 272.093868][ T6583] veth1_macvtap: entered promiscuous mode [ 272.248493][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.266929][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.281371][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.301461][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.311712][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.323052][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.347445][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.401847][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.415812][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.441264][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.459629][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.473402][ T6583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.493949][ T6583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.514274][ T6583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.526228][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.526985][ T5309] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 272.543818][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.594680][ T6583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.614259][ T6583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.625664][ T6583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.642363][ T6583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.726938][ T5309] usb 4-1: Using ep0 maxpacket: 32 [ 272.740942][ T5309] usb 4-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 272.777081][ T5309] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.796866][ T5309] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 272.816226][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.877328][ T5309] usb 4-1: config 0 descriptor?? [ 272.915587][ T6580] veth0_vlan: entered promiscuous mode [ 272.995598][ T6573] veth0_vlan: entered promiscuous mode [ 273.075092][ T6573] veth1_vlan: entered promiscuous mode [ 273.121931][ T6580] veth1_vlan: entered promiscuous mode [ 273.272061][ T6035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.288976][ T6787] Bluetooth: MGMT ver 1.23 [ 273.293129][ T6035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.387515][ T6787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.345'. [ 273.399974][ T6787] netlink: 23 bytes leftover after parsing attributes in process `syz.3.345'. [ 273.410004][ T6787] netlink: 23 bytes leftover after parsing attributes in process `syz.3.345'. [ 273.552967][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.599421][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.608209][ T6573] veth0_macvtap: entered promiscuous mode [ 273.650616][ T6580] veth0_macvtap: entered promiscuous mode [ 273.693585][ T6573] veth1_macvtap: entered promiscuous mode [ 273.750176][ T6580] veth1_macvtap: entered promiscuous mode [ 273.803014][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.871543][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.919995][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.126880][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.154332][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.946401][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.061617][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.112915][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.160824][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.196079][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.348645][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.359221][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.372779][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.383297][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.574260][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.593668][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.604760][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.113326][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.146591][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.159827][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.188250][ T5309] usb 4-1: string descriptor 0 read error: -71 [ 276.198187][ T5309] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 276.206451][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.220280][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.230422][ T5309] usb 4-1: USB disconnect, device number 9 [ 276.247012][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.263153][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.274211][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.287159][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.297331][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.307881][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.321606][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.360088][ T6580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.391010][ T6580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.416323][ T6580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.584701][ T6580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.645913][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.723758][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.781803][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.864698][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.915381][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.968406][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.990565][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.019838][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.069811][ T6573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.096430][ T6573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.120748][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.275917][ T6573] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.304059][ T6573] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.398211][ T6573] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.429933][ T6573] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.936710][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.964025][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.059125][ T6035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.080509][ T6035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.532622][ T6036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.449267][ T6036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.102785][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.179813][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.367117][ T6883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.357'. [ 283.424434][ T6883] pimreg: entered allmulticast mode [ 283.464691][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 283.489941][ T6890] pimreg: left allmulticast mode [ 283.646396][ T5271] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 283.847361][ T5271] usb 3-1: Using ep0 maxpacket: 32 [ 283.864366][ T5271] usb 3-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 283.894283][ T5271] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.916842][ T5273] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 283.947436][ T5271] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 283.956733][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.977817][ T5271] usb 3-1: config 0 descriptor?? [ 284.218279][ T5273] usb 2-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 284.307965][ T5273] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 284.327491][ T5273] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 284.343725][ T5273] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 284.354918][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.399859][ T5273] usb 2-1: config 0 descriptor?? [ 284.770048][ C1] hrtimer: interrupt took 48781 ns [ 284.801307][ T5273] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 284.996536][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.358'. [ 285.005610][ T6900] netlink: 23 bytes leftover after parsing attributes in process `syz.2.358'. [ 285.014736][ T6900] netlink: 23 bytes leftover after parsing attributes in process `syz.2.358'. [ 286.670716][ T5273] usb 2-1: USB disconnect, device number 16 [ 286.806356][ T5271] usb 3-1: string descriptor 0 read error: -71 [ 286.841779][ T5271] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 286.872456][ T5271] usb 3-1: USB disconnect, device number 14 [ 289.649688][ T6946] libceph: resolve '0.' (ret=-3): failed [ 289.746579][ T5319] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 289.949148][ T5319] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.973204][ T5319] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 290.012402][ T5319] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 290.043153][ T5319] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 290.067520][ T5319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.091139][ T6932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.111250][ T5319] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 290.640238][ T6954] hpfs: Bad magic ... probably not HPFS [ 290.850620][ T5273] usb 5-1: USB disconnect, device number 10 [ 296.220642][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 301.010755][ T7040] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.394'. [ 305.955183][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.406'. [ 306.067751][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.405'. [ 306.165904][ T7081] netlink: 'syz.0.406': attribute type 16 has an invalid length. [ 307.570741][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 312.567141][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.418'. [ 312.579253][ T7132] netlink: 'syz.0.418': attribute type 16 has an invalid length. [ 316.634250][ T7168] cgroup: Unknown parameter 'usrquota' [ 317.044667][ T7174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 317.373124][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.379752][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.936458][ T5231] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.357960][ T5231] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.423841][ T5231] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 320.496193][ T5231] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 320.561109][ T5231] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.603592][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.678204][ T7202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.741888][ T5231] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.171383][ T7214] VFS: could not find a valid V7 on nullb0. [ 321.207742][ T7214] hpfs: Bad magic ... probably not HPFS [ 321.482318][ T5273] usb 3-1: USB disconnect, device number 15 [ 322.437020][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.442'. [ 322.460523][ T7226] cgroup: Unknown parameter 'usrquota' [ 325.396598][ T5319] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 325.618179][ T5319] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 325.659101][ T5319] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 325.686144][ T5319] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 325.711874][ T5319] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 325.866542][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.925429][ T7249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 325.970921][ T5319] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.469775][ T7259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.454'. [ 327.147419][ T7260] VFS: could not find a valid V7 on nullb0. [ 327.166788][ T7260] hpfs: Bad magic ... probably not HPFS [ 327.342968][ T25] usb 4-1: USB disconnect, device number 10 [ 327.807367][ T5273] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 328.192546][ T5273] usb 2-1: Using ep0 maxpacket: 8 [ 328.215741][ T5273] usb 2-1: config 0 has an invalid interface number: 11 but max is 3 [ 328.236339][ T5273] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 328.254870][ T5273] usb 2-1: config 0 has an invalid interface number: 239 but max is 3 [ 328.272236][ T5273] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 328.281184][ T5273] usb 2-1: config 0 has an invalid interface number: 221 but max is 3 [ 328.303147][ T5273] usb 2-1: config 0 has an invalid interface number: 20 but max is 3 [ 328.343693][ T5273] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 328.372301][ T5273] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 328.608725][ T5273] usb 2-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 328.621032][ T5273] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 328.630368][ T5273] usb 2-1: config 0 has no interface number 0 [ 328.636743][ T5273] usb 2-1: config 0 has no interface number 1 [ 328.642827][ T5273] usb 2-1: config 0 has no interface number 2 [ 328.661062][ T5273] usb 2-1: config 0 has no interface number 3 [ 328.675724][ T5273] usb 2-1: config 0 has no interface number 4 [ 328.693561][ T5273] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 328.732771][ T5273] usb 2-1: config 0 interface 11 altsetting 4 has an endpoint descriptor with address 0x7E, changing to 0xE [ 328.784734][ T5273] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0xE has an invalid bInterval 147, changing to 7 [ 328.867758][ T5273] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0xE has invalid maxpacket 25720, setting to 1024 [ 328.935886][ T5273] usb 2-1: config 0 interface 11 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 329.040775][ T5273] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 329.155228][ T5273] usb 2-1: config 0 interface 11 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 329.514056][ T5273] usb 2-1: too many endpoints for config 0 interface 239 altsetting 58: 157, using maximum allowed: 30 [ 329.546348][ T5273] usb 2-1: config 0 interface 239 altsetting 58 endpoint 0xB has invalid maxpacket 80, setting to 64 [ 329.576724][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x7, skipping [ 329.611718][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x3, skipping [ 329.632530][ T7281] cgroup: Unknown parameter 'usrquota' [ 329.641990][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 329.679389][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 329.712485][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 329.776566][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 329.806090][ T5273] usb 2-1: config 0 interface 239 altsetting 58 has 9 endpoint descriptors, different from the interface descriptor's value: 157 [ 329.864969][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 329.908183][ T7289] cgroup: Unknown parameter 'usrquota' [ 329.971538][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 331.245562][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 331.361199][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 331.410912][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 331.436417][ T5273] usb 2-1: config 0 interface 12 altsetting 129 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 331.459643][ T5273] usb 2-1: config 0 interface 221 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 331.473148][ T5273] usb 2-1: too many endpoints for config 0 interface 20 altsetting 199: 123, using maximum allowed: 30 [ 331.486754][ T5273] usb 2-1: config 0 interface 20 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 331.515544][ T5273] usb 2-1: config 0 interface 11 has no altsetting 0 [ 331.522837][ T5273] usb 2-1: config 0 interface 239 has no altsetting 0 [ 331.530490][ T5273] usb 2-1: config 0 interface 12 has no altsetting 0 [ 331.538262][ T5273] usb 2-1: config 0 interface 221 has no altsetting 0 [ 331.545211][ T5273] usb 2-1: config 0 interface 20 has no altsetting 0 [ 331.627480][ T5273] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=90.13 [ 331.662533][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.716447][ T5273] usb 2-1: Product: syz [ 331.868328][ T5273] usb 2-1: config 0 descriptor?? [ 331.880041][ T5273] usb 2-1: can't set config #0, error -71 [ 332.053781][ T7307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 332.685128][ T5273] usb 2-1: USB disconnect, device number 17 [ 335.909907][ T5231] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 336.818989][ T5231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.848528][ T5231] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 336.860564][ T5231] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 336.871112][ T5231] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.880465][ T5231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.942029][ T7341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 337.025083][ T5231] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.409035][ T7355] VFS: could not find a valid V7 on nullb0. [ 337.455864][ T7355] hpfs: Bad magic ... probably not HPFS [ 338.720034][ T5319] usb 5-1: USB disconnect, device number 11 [ 340.705509][ T5319] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 341.383369][ T5319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 341.394759][ T5319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 341.406715][ T5319] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 341.418294][ T5319] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 341.427628][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.443217][ T7394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 341.452510][ T5319] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 341.667672][ T7394] VFS: could not find a valid V7 on nullb0. [ 341.743225][ T7394] hpfs: Bad magic ... probably not HPFS [ 341.894637][ T5319] usb 1-1: USB disconnect, device number 10 [ 345.990926][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 346.876777][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 346.951318][ T51] usb 2-1: config 0 has an invalid interface number: 11 but max is 3 [ 346.964455][ T51] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 346.979796][ T51] usb 2-1: config 0 has an invalid interface number: 239 but max is 3 [ 346.989265][ T51] usb 2-1: config 0 has an invalid interface number: 12 but max is 3 [ 347.024921][ T51] usb 2-1: config 0 has an invalid interface number: 221 but max is 3 [ 347.053422][ T7455] netlink: 'syz.2.516': attribute type 1 has an invalid length. [ 347.078296][ T51] usb 2-1: config 0 has an invalid interface number: 20 but max is 3 [ 347.111282][ T51] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 347.177267][ T51] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 347.232677][ T51] usb 2-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 347.294495][ T51] usb 2-1: config 0 has 5 interfaces, different from the descriptor's value: 4 [ 347.337877][ T51] usb 2-1: config 0 has no interface number 0 [ 347.347734][ T51] usb 2-1: config 0 has no interface number 1 [ 347.355162][ T51] usb 2-1: config 0 has no interface number 2 [ 347.361759][ T51] usb 2-1: config 0 has no interface number 3 [ 347.368121][ T51] usb 2-1: config 0 has no interface number 4 [ 347.374534][ T51] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 347.385679][ T51] usb 2-1: config 0 interface 11 altsetting 4 has an endpoint descriptor with address 0x7E, changing to 0xE [ 347.445629][ T51] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0xE has an invalid bInterval 147, changing to 7 [ 347.459832][ T51] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0xE has invalid maxpacket 25720, setting to 1024 [ 347.471216][ T51] usb 2-1: config 0 interface 11 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 347.482471][ T51] usb 2-1: config 0 interface 11 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 347.494209][ T51] usb 2-1: config 0 interface 11 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 14 [ 347.529923][ T51] usb 2-1: too many endpoints for config 0 interface 239 altsetting 58: 157, using maximum allowed: 30 [ 347.547675][ T51] usb 2-1: config 0 interface 239 altsetting 58 endpoint 0xB has invalid maxpacket 80, setting to 64 [ 347.560455][ T51] usb 2-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x7, skipping [ 347.572632][ T51] usb 2-1: config 0 interface 239 altsetting 58 has a duplicate endpoint with address 0x3, skipping [ 347.584352][ T51] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 347.644411][ T51] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 347.757919][ T51] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 347.838506][ T51] usb 2-1: config 0 interface 239 altsetting 58 has an invalid descriptor for endpoint zero, skipping [ 347.889484][ T51] usb 2-1: config 0 interface 239 altsetting 58 has 9 endpoint descriptors, different from the interface descriptor's value: 157 [ 347.967046][ T51] usb 2-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 348.020091][ T51] usb 2-1: config 0 interface 12 altsetting 129 has an invalid endpoint descriptor of length 2, skipping [ 348.089207][ T51] usb 2-1: config 0 interface 12 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 348.164264][ T51] usb 2-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0xE, skipping [ 348.210409][ T51] usb 2-1: config 0 interface 12 altsetting 129 has a duplicate endpoint with address 0x6, skipping [ 348.370679][ T51] usb 2-1: config 0 interface 12 altsetting 129 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 348.384857][ T51] usb 2-1: config 0 interface 221 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 349.356678][ T51] usb 2-1: too many endpoints for config 0 interface 20 altsetting 199: 123, using maximum allowed: 30 [ 349.422473][ T51] usb 2-1: config 0 interface 20 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 123 [ 349.467666][ T51] usb 2-1: config 0 interface 11 has no altsetting 0 [ 349.626817][ T51] usb 2-1: config 0 interface 239 has no altsetting 0 [ 349.642567][ T51] usb 2-1: config 0 interface 12 has no altsetting 0 [ 349.654005][ T51] usb 2-1: config 0 interface 221 has no altsetting 0 [ 350.428632][ T51] usb 2-1: config 0 interface 20 has no altsetting 0 [ 350.436026][ T51] usb 2-1: string descriptor 0 read error: -71 [ 350.447075][ T51] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff42, bcdDevice=90.13 [ 350.456217][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.488457][ T51] usb 2-1: config 0 descriptor?? [ 350.521103][ T51] usb 2-1: can't set config #0, error -71 [ 350.553433][ T51] usb 2-1: USB disconnect, device number 18 [ 350.920370][ T5309] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 351.237338][ T5309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.287563][ T5309] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 351.305243][ T5309] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 351.316506][ T5309] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.325865][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.340459][ T7478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 351.361726][ T5309] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.607844][ T7478] VFS: could not find a valid V7 on nullb0. [ 351.633006][ T7478] hpfs: Bad magic ... probably not HPFS [ 351.666619][ T5309] usb 5-1: USB disconnect, device number 12 [ 352.116405][ T51] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 352.376458][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 352.397786][ T51] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 352.410905][ T51] usb 2-1: can't read configurations, error -22 [ 352.576540][ T51] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 352.766344][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 352.775595][ T51] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 352.789588][ T51] usb 2-1: can't read configurations, error -22 [ 352.798922][ T51] usb usb2-port1: attempt power cycle [ 353.226916][ T51] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 353.254383][ T7523] netlink: 'syz.4.535': attribute type 1 has an invalid length. [ 353.297133][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 353.744198][ T51] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 353.756345][ T51] usb 2-1: can't read configurations, error -22 [ 353.916453][ T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 354.816070][ T51] usb 2-1: device descriptor read/8, error -71 [ 354.987696][ T51] usb usb2-port1: unable to enumerate USB device [ 360.548481][ T5319] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 360.769737][ T5319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.796486][ T5319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 361.946447][ T5319] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 422.956863][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.956283][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 468.963251][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6036/1:b..l P7603/1:b..l [ 468.972623][ C0] rcu: (detected by 0, t=10502 jiffies, g=30089, q=469 ncpus=2) [ 468.980317][ C0] task:syz.2.558 state:R running task stack:23096 pid:7603 tgid:7601 ppid:6580 flags:0x00004006 [ 468.992634][ C0] Call Trace: [ 468.995894][ C0] [ 468.998815][ C0] __schedule+0x17ae/0x4a10 [ 469.003340][ C0] ? __pfx___schedule+0x10/0x10 [ 469.008195][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.014212][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 469.019522][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 469.024649][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 469.030401][ C0] irqentry_exit+0x5e/0x90 [ 469.034823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.040822][ C0] RIP: 0010:lock_release+0x5/0xa30 [ 469.045952][ C0] Code: 8f e8 2f b5 87 00 e9 f1 f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 00 01 00 [ 469.065571][ C0] RSP: 0018:ffffc9000cd2eea8 EFLAGS: 00000202 [ 469.071653][ C0] RAX: 0000000000000001 RBX: ffff88807d8ec010 RCX: ffff888066ab3c00 [ 469.079631][ C0] RDX: dffffc0000000000 RSI: ffffffff820071f9 RDI: ffffffff8e738320 [ 469.087610][ C0] RBP: ffffc9000cd2ef98 R08: ffffffff934f4847 R09: 1ffffffff269e908 [ 469.095587][ C0] R10: dffffc0000000000 R11: fffffbfff269e909 R12: dffffc0000000000 [ 469.103571][ C0] R13: ffffea000172fb40 R14: 0000000000000001 R15: ffffffff820071f9 [ 469.111556][ C0] ? percpu_ref_get_many+0x19/0x140 [ 469.116784][ C0] ? percpu_ref_get_many+0x19/0x140 [ 469.122005][ C0] percpu_ref_get_many+0xfa/0x140 [ 469.127054][ C0] mem_cgroup_commit_charge+0xa0/0x380 [ 469.132526][ C0] ? __pfx_mem_cgroup_commit_charge+0x10/0x10 [ 469.138616][ C0] charge_memcg+0xb1/0x160 [ 469.143053][ C0] __mem_cgroup_charge+0x27/0x80 [ 469.148001][ C0] folio_prealloc+0x52/0x170 [ 469.152610][ C0] do_wp_page+0x11cc/0x52f0 [ 469.157136][ C0] ? __pfx_do_wp_page+0x10/0x10 [ 469.162003][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 469.167047][ C0] ? pte_offset_map_nolock+0xc3/0x1f0 [ 469.172432][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 469.177486][ C0] handle_pte_fault+0x115a/0x6fc0 [ 469.182528][ C0] ? mark_lock+0x9a/0x350 [ 469.186882][ C0] ? mark_lock+0x9a/0x350 [ 469.191227][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 469.196643][ C0] ? mt_find+0x226/0x850 [ 469.200891][ C0] ? __pfx_lock_release+0x10/0x10 [ 469.205941][ C0] handle_mm_fault+0xf70/0x1880 [ 469.210832][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 469.216145][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.222494][ C0] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 469.227790][ C0] exc_page_fault+0x2b9/0x8c0 [ 469.232487][ C0] asm_exc_page_fault+0x26/0x30 [ 469.237346][ C0] RIP: 0010:__put_user_nocheck_4+0x7/0x20 [ 469.243079][ C0] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 469.262691][ C0] RSP: 0018:ffffc9000cd2f8f8 EFLAGS: 00050202 [ 469.268770][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000002003b030 [ 469.276747][ C0] RDX: ffff888066ab3c00 RSI: 0000000000000002 RDI: 00000000ffffffff [ 469.284723][ C0] RBP: ffffc9000cd2fa70 R08: ffffffff8971c563 R09: 1ffff920019a5ed0 [ 469.292703][ C0] R10: dffffc0000000000 R11: fffff520019a5ed1 R12: dffffc0000000000 [ 469.300679][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 000000002003b000 [ 469.308664][ C0] ? ____sys_recvmsg+0x2a3/0x470 [ 469.313644][ C0] ____sys_recvmsg+0x2b9/0x470 [ 469.318443][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 469.323764][ C0] ? __might_fault+0xaa/0x120 [ 469.328458][ C0] do_recvmmsg+0x474/0xae0 [ 469.332900][ C0] ? count_memcg_event_mm+0x94/0x420 [ 469.338205][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.343153][ C0] ? mark_lock+0x9a/0x350 [ 469.347526][ C0] ? reacquire_held_locks+0x3eb/0x690 [ 469.352907][ C0] ? vma_end_read+0x18/0x170 [ 469.357529][ C0] ? __pfx_reacquire_held_locks+0x10/0x10 [ 469.363288][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 469.368332][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.373896][ C0] ? exc_page_fault+0x590/0x8c0 [ 469.378797][ C0] ? do_syscall_64+0xb6/0x230 [ 469.383502][ C0] do_syscall_64+0xf3/0x230 [ 469.388024][ C0] ? clear_bhb_loop+0x35/0x90 [ 469.392721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.398627][ C0] RIP: 0033:0x7f9c7a579e79 [ 469.403057][ C0] RSP: 002b:00007f9c7b2d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.411489][ C0] RAX: ffffffffffffffda RBX: 00007f9c7a716058 RCX: 00007f9c7a579e79 [ 469.419477][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 469.427458][ C0] RBP: 00007f9c7a5e793e R08: 0000000000000000 R09: 0000000000000000 [ 469.435436][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 469.443413][ C0] R13: 0000000000000001 R14: 00007f9c7a716058 R15: 00007ffead541408 [ 469.451411][ C0] [ 469.454473][ C0] task:kworker/u8:14 state:R running task stack:21008 pid:6036 tgid:6036 ppid:2 flags:0x00004000 [ 469.466224][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 469.472487][ C0] Call Trace: [ 469.475773][ C0] [ 469.478712][ C0] __schedule+0x17ae/0x4a10 [ 469.483255][ C0] ? __pfx___schedule+0x10/0x10 [ 469.488124][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.494115][ C0] ? mark_lock+0x9a/0x350 [ 469.498454][ C0] ? __lock_acquire+0x137a/0x2040 [ 469.503480][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 469.508761][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 469.513856][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 469.519564][ C0] irqentry_exit+0x5e/0x90 [ 469.523956][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 469.529915][ C0] RIP: 0010:ieee80211_sta_get_rates+0x385/0x660 [ 469.536141][ C0] Code: 00 fc ff df 42 0f b6 04 20 84 c0 0f 85 d9 00 00 00 0f b7 1b 8b 6c 24 48 89 ef 89 de e8 84 ed 68 f6 39 dd 4c 8b 74 24 28 75 5e 40 00 00 00 44 89 fe e8 ee ef 68 f6 41 83 ff 3f 0f 87 e2 00 00 [ 469.555731][ C0] RSP: 0018:ffffc90017117798 EFLAGS: 00000246 [ 469.561779][ C0] RAX: 0000000000000000 RBX: 000000000000021c RCX: dffffc0000000000 [ 469.569743][ C0] RDX: ffff888029649e00 RSI: 000000000000021c RDI: 000000000000021c [ 469.577699][ C0] RBP: 000000000000021c R08: ffffffff8b2aa1bc R09: 1ffffffff1fed90d [ 469.585658][ C0] R10: dffffc0000000000 R11: fffffbfff1fed90e R12: dffffc0000000000 [ 469.593611][ C0] R13: 0000000000000021 R14: ffff88801e9730d0 R15: 000000000000000b [ 469.601564][ C0] ? ieee80211_sta_get_rates+0x37c/0x660 [ 469.607183][ C0] ? ieee80211_sta_get_rates+0x37c/0x660 [ 469.612797][ C0] ieee80211_ibss_rx_queued_mgmt+0x11e1/0x2d70 [ 469.618943][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 469.625160][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 469.631643][ C0] ? mark_lock+0x9a/0x350 [ 469.635954][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.641915][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.648229][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 469.653419][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 469.658603][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 469.663694][ C0] ? process_scheduled_works+0x945/0x1830 [ 469.669392][ C0] process_scheduled_works+0xa2c/0x1830 [ 469.674935][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 469.680899][ C0] ? assign_work+0x364/0x3d0 [ 469.685479][ C0] worker_thread+0x86d/0xd10 [ 469.690060][ C0] ? __kthread_parkme+0x169/0x1d0 [ 469.695070][ C0] ? __pfx_worker_thread+0x10/0x10 [ 469.700159][ C0] kthread+0x2f0/0x390 [ 469.704223][ C0] ? __pfx_worker_thread+0x10/0x10 [ 469.709314][ C0] ? __pfx_kthread+0x10/0x10 [ 469.713886][ C0] ret_from_fork+0x4b/0x80 [ 469.718283][ C0] ? __pfx_kthread+0x10/0x10 [ 469.722853][ C0] ret_from_fork_asm+0x1a/0x30 [ 469.727601][ C0]