last executing test programs: 13.684133925s ago: executing program 3 (id=254): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1204000000000010bd283409000000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) syz_usb_connect$uac1(0x3, 0xe0, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x3, 0x1, 0x9, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x5, 0x5, 0xe3}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0x1, 0xf5, "8aab66"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x9, 0x3, 0x1, 0x8, "c49e13", "4deb9a"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x22, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x4, 0xf, "11f2f2fa74f9"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5, 0x6, "ca802f", "eb"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x67, 0x8, {0x7, 0x25, 0x1, 0x0, 0x7, 0x2195}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x40, 0x1, 0x4}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x2, 0x3, "", "9e6719"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xe, 0x3}, @as_header={0x7, 0x24, 0x1, 0xee, 0x9, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0x4, 0xe7, "13", "70bbc2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x8, 0x9, {0x7, 0x25, 0x1, 0x4, 0x82, 0x5}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x4, 0x8, 0x7, 0xf050ba44b4cd68f, 0x7}, 0x23, &(0x7f0000000140)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4, 0x7, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "042f9f5efec78505682e0a0916febdd5"}]}, 0x4, [{0x69, &(0x7f00000001c0)=@string={0x69, 0x3, "403dacec5a9ad50d54f60c27f13c8c2df6e07fd4701b16636f187ed4eb47bf2b1398dc7b7288608f71d2853cb0726ef0e9fe6a3c0ccfbee23d957401497c4ccea200f058af25e5d075a08d2fd64ad0e9052000184578898e917dbd202e9c9e06be9c8dd1a1125f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x35156dae27e6201c}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="030005"], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.676708801s ago: executing program 4 (id=262): pipe(&(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 11.244970017s ago: executing program 4 (id=264): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="d4c9bade9bd1ff20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x8, 0x40, {0x0}, {0xffffffffffffffff}, 0x8, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)=0x0) r8 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffff8) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_io_uring_submit(0x0, r7, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) socket(0x21, 0xa, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5d80000, '\x00', 0x0, r4, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 11.036426675s ago: executing program 1 (id=265): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) socketpair(0x1f, 0x0, 0x3ff, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0xd, 0xfff, 0x0, "95890001000000000000f2f76d"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "3377f877c734c4f928875ab8db00", "000100", "060010bc", '\x00', ["c38600008000080000e6fc00", "51f3541a910080ffffcb3a10", "1ae50f8a285d9543c522afe1"]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0xc4382, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @private0}}}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000340)) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)={0x30, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x23, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xd, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}, @generic='=']}]}, 0x30}], 0x1}, 0x0) 10.660526086s ago: executing program 1 (id=266): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)={r1, 0x0, 0x20}, &(0x7f0000000080)=0x18) 10.498681215s ago: executing program 3 (id=267): io_uring_setup(0x0, &(0x7f0000000440)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r4, @ANYBLOB="60deb8c0d800ca4144516515af91dd6de50b77968eae3f7ddc7b93e1611e4a20c7555a5772ebecc4dc9d371a9f7ad41282adb9e3280277cd890f0408993e54f9f42e3f72f37b467827952e1df4b0c861ff569a8be83f27d1a341cd1cf8b11ac5e6e3f04b9762a8683f38cb6def3b0dae2a7c5b"], 0x3c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900c40000010000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x8b) openat(r6, &(0x7f0000000000)='./file0\x00', 0xf0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r9, 0x2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x164, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x10000}}}}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x6, 0xfffff6c8, 0x0, 0xdbb, 0x1000, 0x3}}, {0xa, 0x2, [0x20, 0x6, 0x5]}}, {{0x1c, 0x1, {0x81, 0x1, 0x9, 0x2, 0x2, 0x20, 0x2, 0x5}}, {0xe, 0x2, [0x7ff, 0x4, 0x4, 0x3, 0x0]}}, {{0x1c, 0x1, {0xff, 0x6, 0x4, 0x7, 0x1, 0x4, 0x4396, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x5, 0x1, 0x9, 0x7fffffff, 0x0, 0x400, 0x80, 0x3}}, {0xa, 0x2, [0x3dd0, 0x80, 0x4]}}, {{0x1c, 0x1, {0x1, 0xf9, 0x1164, 0x200, 0x1, 0x9, 0x9, 0x4}}, {0xc, 0x2, [0xd1, 0x8df, 0x5, 0x7]}}, {{0x1c}, {0x4}}]}]}, 0x164}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func, @map_fd, @generic, @initr0, @exit, @printk={@x={0x18, 0x0}, {0x2, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xc, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) 10.190188994s ago: executing program 1 (id=269): r0 = socket(0x1d, 0x800, 0x0) getsockopt(r0, 0x200000000114, 0x5, &(0x7f0000000200)=""/102383, &(0x7f00000001c0)=0x18fef) 9.236541757s ago: executing program 4 (id=271): r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c03, 0xffffffffffffffff) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000780)) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000100)="819bf873699ae735d58e51a4ffea3324", 0x10}, {&(0x7f00000004c0)="22c0df3b37cca1ba3a5be72fa546cc7275bf5db6b0cf902cbeae5ce2664dab58660aaf620be4c5b0bf2a331c0315839ec3679673298c76dce198db4645aec036dc3ae39a819ae9dbec074b06aa83af329c0c6d10a4d903aa8c027e4fd44f64699bb986684521fd44756f3ec0c7bbc630e1256b6f7ad559b94b57ab3c56751ec07f4a25ddcdb345c21fb59326acf0663dd96977c774f7f748a6bd8011d59222027d35e8fdeb7d3130884bbc3cdfa8f05ed8a640324fd39130378c879c9fb39ea4b797b9da98366d90343c4bb67d4d32cd613b04933c3e287aa26029631060c7360e2b160524bd859b4b17009eb7340d58cdc8014255ea", 0xf6}, {&(0x7f00000005c0)="825849ed91e694799c9bd5a35a2ad7128c0bb355f47439292a5af95a964ca377bc430fa20b7e674a6303e20c2e954b74f04a4ea50890c3ca2ccf0517eda660137ac9ea22260757ab7982d4c67a550e25c884a8110f479df2ef803d94096fb12ec6c6814d91", 0x65}, {&(0x7f0000000640)="44a051953ada1190fb9e254bfc6aab44128f0b55d8907618ed965855a369f0b200bd6860b3ea03872b2742984457ad08d17758c297203a4da439b203fd1289f71221d6428c586bdc287042d6f03322f714bff06a7396c1f2a6b967bc62789193d19ac6611c1800976940b2daddda975a4014254c227e6b02958777a608346f67939cfd2b6435d9aa105d0360d7c4424f78d158d06eb3bd52cf2f6f75c2c90518082138cda1a047dd2b9f37ab", 0xac}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f00000007c0)="71316fc070c0576aa6695e253ae93eaa24b67a9bdfb728170cde06f41eb50697b10eee1095b0c79b37d3574ef0cad6c5d5e20bd3b901a990eeaa04673e422a5357b74fb877c0c7174658f274b205dcfa18441be789a9fe6cb98027ed770453c86427efd43c7bf1d72243ea80fba44d562834f9e6704280985b1d80ce579da0932dc1895f6362e938e1c0071140070cda9925dda5e3fabd1c94c106f9a9fcedc9ee20e87e97212196a4d9ceb5fa92b2652ab9f040a24f94c483812113b03a287d810857054dffafd9833a4f2c6bd0f23078397ed6558a61512e269bd2", 0xdc}, {&(0x7f0000000700)="eba25460230f333ed8936b6d73cca5118fe5aca2da57a8adca7d5ed054198853d0f3415fc7522c90a06d8611ee66ee2edd95ac26070e80075643ccc0f0dd86c136bef9e22dd6b0e8289590063c34d8d2aa83e589285aab3185a8b9826a117ba857f2c6cf8ae8a6b7b850086710", 0x6d}, {&(0x7f00000008c0)="b666b2b2cbb59ef9e410d0ba00a6aa43523810f7185c37a8fb34252877a90fa6fb2600b096be9b6ed3472b3d56fb3b09168a373232076b8b95c30cf08597b792b2c409240f8fb5deffb991806888305f67faa542eae47aec5844c09a70c49ef8a518ad9b61942fed2098ebcdd983743bb755e05901f519ae", 0x78}], 0x8, 0x8) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b", 0xd}], 0x1}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x540a, 0x1) write(r7, &(0x7f0000000240)="a4", 0x1) r8 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_buf(r8, 0x0, 0x20, 0x0, 0xb) ioctl$TCXONC(r7, 0x540a, 0x0) ioctl$TCXONC(r7, 0x540a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 9.08271554s ago: executing program 1 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x84000, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0) 8.809129523s ago: executing program 1 (id=274): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000280)="86", 0x1) write$dsp(r0, &(0x7f00000002c0)="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", 0xfff) write$dsp(r0, &(0x7f00000012c0)="bf", 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.636545152s ago: executing program 3 (id=275): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) (rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x61080, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x9a, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x19, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x6a4}) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async, rerun: 32) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) (async) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x8, 0x8000, 0x76, @remote, @mcast2, 0x10, 0x700, 0xb, 0x9}}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={@local, @mcast1, @remote, 0x3, 0x2e6, 0x6, 0x0, 0x5, 0x80000000, r7}) (async, rerun: 64) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (rerun: 64) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) (async) ptrace$getregset(0x4205, r8, 0x1, &(0x7f0000002140)={0x0, 0x300}) (async) recvmmsg(r6, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x3fffffff, 0x0, 0x0) 8.332533808s ago: executing program 3 (id=276): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000000)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0xfeffff, &(0x7f0000000000)="df"}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000000000003b0c0000000000000000000000000036acdc9e81875e9ea77d7b5437f7ffc816d7e49615dc87463db9d7adc874379ce7355c4f5de9264ba60affae259afc12c3e1a2c71010a049eac840a0538e356dca5774"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r3}, 0x14) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x0, 0x0, 0x148, 0xf4, 0x148, 0x1c4, 0x240, 0x240, 0x1c4, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x94, 0xf4, 0x0, {}, [@common=@ttl={{0x24}, {0x0, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x0, 0x6, 0x5, 0x6, 0x4], 0x5, 0x6}, {0x4, [0x0, 0x5, 0x1, 0x1, 0x4, 0x5], 0x6, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x6, 0x7, 0x4, 0x8, 0x2]}, {0xffffffffffffffff, [0x1, 0x0, 0x4, 0x5, 0x2, 0x1], 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)='9\x00', 0x2}], 0x1) syz_io_uring_setup(0x24f6, &(0x7f0000000400)={0x0, 0x10b3, 0x10100, 0x20000, 0x344}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNISCRNMAP(r6, 0x4b4d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000140009050000000000000000020100fd", @ANYRES32=r9, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1e000108000100ac1414aac25746e8a95609080004007f00000108000400e00000021400030076657468315f746f5f626f6e6400000008000800000300000800080030000000"], 0x70}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000006110240000004f345dab50d000009500000000000000", @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.566272289s ago: executing program 0 (id=277): semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000000c0)=""/225) futex(&(0x7f000000cffc)=0x1, 0xd, 0x3, 0x0, 0x0, 0xfffffffc) futex(&(0x7f0000000040)=0x80004, 0x2, 0x2000000, 0x0, &(0x7f0000048000)=0x2, 0x1) 5.681549889s ago: executing program 2 (id=279): alarm(0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x60000000, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) alarm(0x0) 5.575524135s ago: executing program 2 (id=280): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x580, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_fw={{0x7}, {0x544, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_ACT={0x350, 0x4, [@m_vlan={0x9c, 0x0, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x65, 0x6, "f370dfc26bda3e8bd45216da1aa3964ed3b60b4334447ba4ec948d16c5ea9e784cb150ef66ab93528c18790962548e5c98822116cbfdcf7c3a8c7c2ee29dd2ff997bf0d0f836545bbd9b9302deb518f69dfe39552cca68ac02e9c6dbf11370b01a"}, {0xc}, {0xc}}}, @m_ctinfo={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}]}, {0xa9, 0x6, "8c4274210bf4344eee0ade94d895eb3f5fdc4ec866ec0d5005a60331686a8486fa8e91c85c847181e823fee4afb8a60979707828e026c45a9f6bd9f7ee27bef80232e58cb39f657808a8baeadea90445f236d2258ab3605aad1caf64002deeb4d8a5343c583834755ade8cf160436309025cb38b6c9299c2c1cd0ef13722520a49dd39f5764b7ab61e70dca6442cd72486bed389794867ca6a1ff829148784451724a821e4"}, {0xc}, {0xc}}}, @m_skbedit={0xc0, 0x0, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_MARK={0x8}]}, {0x81, 0x6, "c7edfeac621139196345a6f8a58e296e7b575b7c0378eaffc10c3da07f6334206643a2e68c91a8b4902ecb43b8a7f223c44b62e3db93dda61a92e5954dc28e03fbca5aa97221e43a236c3a9ceec773a2788904f1555a0ad9445498987e4e4c2eec07efb6469fd17acc2abe301331b06a3bd50774f35a7dc2597ab865c0"}, {0xc}, {0xc}}}, @m_skbmod={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "be55bff691533e94de09ed9bad82256009362c9d3574a6b99e33706b0f0231574705a47990aef3802fbf834b6a38694135ceea751b58dbb126083b120c1a2fdc50bdb043e9620b3ed622634d55d1ebdf64b587e4e5ce2f87cd842a014f2429c40521b161d39ecd7569abacb93592b30a623b5a2d1bb484573e87ba3247"}, {0xc}, {0xc}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_FW_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_ACT={0x184, 0x4, [@m_simple={0x180, 0x0, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x4000000}}, @TCA_DEF_DATA={0x7, 0x3, '9p\x00'}, @TCA_DEF_DATA={0x7, 0x3, '#\xee\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x9, 0x3, 'fd/3\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x3}}]}, {0xbd, 0x6, "4609dc63a7e2c1e8d8f3947bfe64049bafc10942cf56376c73961c5ee06f3a38e48c1a286e545dd4a521f2869b54fbcf1c7958eb636e54a910cbe3d0b34b67c9400d92c4bd68f2a5e196d558cfa1c8440806e82a3b539579ffad8fa8a57d9e0f03a55d685ca9804d9ab3e8fc9ec628c9215f2dd203c0df39c16e305c6a3779e502b765346f18214d779c47efff0383ed043d1ab0f727724ceef38cec021286c237c74581b6534e7063efefb444946942ef5c15dc40d8b81fe0"}, {0xc}, {0xc}}}]}]}}]}, 0x580}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.480188294s ago: executing program 0 (id=281): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="d4c9bade9bd1ff20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x8, 0x40, {0x0}, {0xffffffffffffffff}, 0x8, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)=0x0) r8 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffff8) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_io_uring_submit(0x0, r7, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) socket(0x21, 0xa, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5d80000, '\x00', 0x0, r4, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 5.302310736s ago: executing program 2 (id=282): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)={r1, 0x0, 0x20}, &(0x7f0000000080)=0x18) 5.015134711s ago: executing program 2 (id=283): r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r2}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000003c0)={0x0, 0x400, 0xffffffc0, 0xfffffffe, 0x1, "83843c556dec3a9a90800124b924cfc27929a3", 0x200, 0x87}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x96, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @mptcp=@generic={0x0, 0xd, "9142cc2b04d4917fe04b70"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001380), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0x89, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r10 = dup(r9) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004380), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r11, 0x5502, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x853, r10, 0x0) ioctl$TIOCPKT(r8, 0x541a, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x2b, 0xb, 0x2, 0x4, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80, 0x80, 0x9, 0x1000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r12, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) 3.508061717s ago: executing program 2 (id=286): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000067c000/0x4000)=nil, 0x4000, 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000001380)='./file0/file0\x00', 0x2, 0x103) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0xfffffffffffffd46) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000006c000000000000000000000000000000000000feb5d1568169bf0a17747e964f18138cb113f6cc382335fb02002429757474b7cc75a254000000000000000c001800000000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000000000)=""/16, 0x4}, 0x1c) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0900000000460000000000000000008000000000000000000000e0c2"], 0x50) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000001580)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000f000000095000000000000001e211b98c11040fd0d211520105c6938658080889d370cbadd3cb6d2a0508fe7d77e3eb2ff32287822c7f379461e03d6cfbc0e0ee8bc47ad984377790e704ae8f9e1234a84ac032daeb8f0dadb3135665718cde84f6bb2a90590cc3f114b8d13c5b3d652433e62e1cb42c023d6359369"], &(0x7f0000000080)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="8022bdf1b8ec022ef513744a6028524d647e7c6304ebf2c164e5c3f7a3bd0a3baa26c86456125044ececab0be92954687caad2ef8707220e4f40966b36347b26da", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004e40)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r6, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/98, 0x62}], 0x1}}], 0x1, 0x7fb14726dcaa, 0x0) close(r7) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="210f000000000000000067"], 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) 3.507119237s ago: executing program 4 (id=287): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = epoll_create1(0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000280)) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000100000000000000000000000180100002020702500000000000420207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000200000b703000000000000850000002d1d000095", @ANYRES32=r2, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001516a534c13760ee6a103e414a8432f380e1aa0f314525a75610406718d1a1bfdc8070d9bcc48621dfb"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(r7) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) r9 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e24, @local}}, 0xfffffff1, 0x3, 0x0, 0x847e, 0xdf68}, &(0x7f00000003c0)=0x98) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000040)={@hyper}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r9, 0x7ab, &(0x7f0000000100)={0x0, 0x6, 0xffffffffffffff36, 0x101}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14000000100001b5307886f6104e22000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440040000000900010073797a30000000000800034000000004140000001100010000000000000000000000000ac467fdaea96682129834154bbf5df6e7a6e918e35ff6a5d09a4b362628d1344e3b6bbdf81d99a116c806036c6e67ffb6f26ea3b0ec50ddfa21a4e6d586b4b991ddc60e4a540929a458d7211dcaaafe4caf371201e08618830d0dfaf5533a6f6f6de063cbc8e5bb652c60addc3b9a52eb4d98fbf7ee9a523c4a7bee5242c3576b64574d10c1489c94f58069888abae34d2001669f7c8a9332e6edf6c66a420bbaac13858b104180d06e3e9e5d2515d6a080f77652511d"], 0x64}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="120100004114f540f30c75939e1a000000010902240011000000000904000002befff9000905030000000000000905f4f636"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x74, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0xa, 0x0, 0x2d, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d81f99db2e21"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x7, 0x7, 0x81}, {0x6, 0x24, 0x1a, 0x6, 0x39}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x8, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0xdb, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x6, 0x52}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x79, 0x80, 0xff, 0x10, 0xee}, 0x34, &(0x7f00000000c0)={0x5, 0xf, 0x34, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "aaf5858eb66328583369a30135d528ce"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x2, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x2, 0x7fff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x9, 0x400}]}, 0x7, [{0xb6, &(0x7f0000000100)=@string={0xb6, 0x3, "9682aa6a7e2d66887e1a515ee07a4e05a04792c16bcd90ce78c35834389e0feafd2baac48fa83b7d7a7fdc93aa60f15d87d36f7d9091ddfd47e28540dd167401de26efed2d536e275ba8b78dbdcc88ba9917c9ed9065d1afb2e2251c06c7bea9f2a58c94bfa24e6bda01a9e18e239cb9da47469e26520a3452dcf9457335ea3ad5ac5e7e683edd52272bd13a3efd4aaa99f80628d7429f876bd794625882c584a52b05eee00119f916d1dafa500609f743ec4b9a"}}, {0x68, &(0x7f00000001c0)=@string={0x68, 0x3, "077b6e05f6949540c040140e3278b633054cfa916f608ffeb5a5f2ee7093600ff895cff9e4b512540f7b05c5a8f0a6d2a73eff093ce1b6c46da04f777cbe7ef43509c01cd3314e42bbba573d0536577da9cee4d7bea319647d4cfd57a631a5072ca4631c1195"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf68ba2d2e859fae1}}, {0x3f, &(0x7f0000000280)=@string={0x3f, 0x3, "d0c1059d1bd20442a28ffbb649ad86990a997650e179d044480719f07e8b69345f9763f77bade83b7b70243c4ea103a0adc21519f61593a3e88353e380"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x400a}}, {0x19, &(0x7f0000000400)=@string={0x19, 0x3, "26645451e3b2f97c6edb7fdc8b612f23cb5a6350288894"}}]}) 3.504612332s ago: executing program 3 (id=288): r0 = io_uring_setup(0x6c2b, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$dsp(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x810, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r11, 0x40585414, &(0x7f0000000140)) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r7, 0x3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf2564000000080001004d00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00d9000000000000000000"], 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000da5ef908030410600001100101010902120001000000000904"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)={@random="a0c88807722b", @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private=0xa010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfff9, @local, @dev={0xac, 0x14, 0x14, 0xfc}, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0xc, 0x9c, 0x1, 0xa, [{@multicast2, 0x39668405}]}]}}}}}}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.397310369s ago: executing program 0 (id=289): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_io_uring_setup(0x24fb, &(0x7f0000000280)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) dup(r0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.376016208s ago: executing program 0 (id=290): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, &(0x7f0000000000)={0x2}, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000300)={0x12000, 0x1, 0x4, 0x0, 0xfa}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000000200002eff4a125aca978adf00000000000016200000000000009500fab6f329438809b52f2231c456dcd57d4de1c0ab8230f5ce60fee50ab1faef309156692413f0a1f28b901210e2bd98f5b2b1c171cb20a5566c92bea89e6ca86f51cc9fd6c201"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) connect$inet6(r3, &(0x7f0000000080), 0x1c) syz_usb_connect$uac1(0x0, 0x142, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x130, 0x3, 0x1, 0x0, 0x0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x5, 0x32, 0x200, 0xfa, 0x9b}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x4}, @extension_unit={0xa, 0x24, 0x8, 0x0, 0x0, 0x0, "d76cd3"}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "fde5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "414c84"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "111f38", "f1282b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "fdac25a8ddfcd94d10"}, @as_header={0x7}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, '$', '%'}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a59c988936"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x0, 0xa, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "659361f43d22da"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "0d04298c169a3c73"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "bb2850c7"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a3d4f85cb7ffa2"}, @as_header={0x7}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0xfe, 0x0, 0x0, "7cfa93", 'I'}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x3, 0x7}}}}}}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x5, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x2, [{0xee, &(0x7f00000000c0)=@string={0xee, 0x3, "37af2ca556e8d4989e6b15359b0e32a3428ff823b6bb51093a63ce4d353269c9e25b4bbb0cbccd28766b5fa852518ea8525ffe305932818d664c15fc7624d18a91580c4fd8234778c800489ea9adf040b3ad6ba79a80ba793fdcf8fdde9eaec12a54b3b2f9b45482847f4bea4293b92cff0df620b04bf5a3ad75c50570fece03d36181ebb6964b1d2160bc2d76c96700718238c20b110628738c76d1c602f361acd721d635ba3e6385346c85f708bee763f6e78244c8ddee4b695a5514d994b598024629c18e5938c3b54c4c49dec9c81172cd4faf6f5ae5543325aba7684a0a8b5394954936bcfa3ec1c40a"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4}}]}) 2.334640258s ago: executing program 1 (id=291): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5}, @IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x44}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x300}, 0x0, 0x0) 790.835544ms ago: executing program 4 (id=293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)={r1, 0x0, 0x20}, &(0x7f0000000080)=0x18) 740.17841ms ago: executing program 3 (id=294): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) unshare(0x22020400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r4, 0x62c29957b2bff3f}, 0x14}}, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000ff0200000008000007"]) r8 = socket$inet(0x2, 0x2, 0x0) clock_gettime(0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x20c, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x178, 0x194, 0x194, 0x178, 0x194, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x9c, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x2c}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'lo\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x268) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) splice(r1, &(0x7f0000000040), r0, 0x0, 0x800000000ff, 0x0) 151.220599ms ago: executing program 4 (id=295): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x31, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="d4c9bade9bd1ff20"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x8, 0x40, {0x0}, {0xffffffffffffffff}, 0x8, 0x800}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)=0x0) r8 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffff8) keyctl$read(0xb, r8, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) syz_io_uring_submit(0x0, r7, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000000080)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) socket(0x21, 0xa, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5d80000, '\x00', 0x0, r4, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 0 (id=296): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000280000001862b60a25b1b775ac584f3a3424e1974c6d6bd44498745389"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00Z'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d000000000001ffffffffffffffff030000078073797a32000000000800094000"/63], 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) sync() kernel console output (not intermixed with test programs): : Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.539400][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.554519][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.607998][ T5239] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.642850][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.651028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.713339][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.721561][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.783870][ T54] Bluetooth: hci0: command tx timeout [ 75.793347][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.813788][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.863223][ T54] Bluetooth: hci3: command tx timeout [ 75.864867][ T5231] Bluetooth: hci1: command tx timeout [ 75.928955][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.938528][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.952578][ T5231] Bluetooth: hci2: command tx timeout [ 75.961426][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.004650][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.018219][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.032452][ T5231] Bluetooth: hci4: command tx timeout [ 76.144154][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.152047][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.923061][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.097208][ T5305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.102415][ T5275] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.112339][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 77.143332][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 77.155127][ T29] audit: type=1326 audit(1727998291.422:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 77.192719][ T29] audit: type=1326 audit(1727998291.442:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 77.194935][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 77.270176][ T29] audit: type=1326 audit(1727998291.442:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 77.309001][ T29] audit: type=1326 audit(1727998291.442:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 77.331372][ T5275] usb 5-1: device descriptor read/64, error -71 [ 77.399699][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.436634][ T9] usb 1-1: Product: syz [ 77.440895][ T9] usb 1-1: Manufacturer: syz [ 77.462619][ T9] usb 1-1: SerialNumber: syz [ 77.495471][ T9] usb 1-1: config 0 descriptor?? [ 77.502864][ T5301] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 77.602451][ T5275] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.638968][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 77.671394][ T5317] sctp: [Deprecated]: syz.3.8 (pid 5317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.671394][ T5317] Use struct sctp_sack_info instead [ 77.766087][ T5275] usb 5-1: device descriptor read/64, error -71 [ 77.883153][ T5275] usb usb5-port1: attempt power cycle [ 77.894062][ T5231] Bluetooth: hci0: command tx timeout [ 77.911553][ T29] audit: type=1326 audit(1727998292.162:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 77.942750][ T5231] Bluetooth: hci1: command tx timeout [ 77.948228][ T5231] Bluetooth: hci3: command tx timeout [ 77.981282][ T29] audit: type=1326 audit(1727998292.162:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12579 code=0x7ffc0000 [ 78.016990][ T5278] usb 1-1: USB disconnect, device number 2 [ 78.023084][ T5231] Bluetooth: hci2: command tx timeout [ 78.033523][ T35] usb 1-1: Failed to submit usb control message: -71 [ 78.037977][ T29] audit: type=1326 audit(1727998292.272:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 78.083486][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 78.098447][ T35] usb 1-1: unable to get target info from device [ 78.103715][ T5231] Bluetooth: hci4: command tx timeout [ 78.149951][ T29] audit: type=1326 audit(1727998292.282:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 78.182505][ T35] usb 1-1: could not get target info (-71) [ 78.208714][ T35] usb 1-1: could not probe fw (-71) [ 78.222233][ T29] audit: type=1326 audit(1727998292.282:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 78.282867][ T29] audit: type=1326 audit(1727998292.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.3.9" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 78.316123][ T5275] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.353089][ T5275] usb 5-1: device descriptor read/8, error -71 [ 78.402080][ T5324] pimreg: entered allmulticast mode [ 78.428008][ T5324] pimreg: left allmulticast mode [ 78.619057][ T5275] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 78.667699][ T5275] usb 5-1: device descriptor read/8, error -71 [ 78.749736][ T5329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.792708][ T5275] usb usb5-port1: unable to enumerate USB device [ 79.604604][ T5347] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.882064][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.090783][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.172502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.225159][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.242446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.415847][ T5361] pimreg: entered allmulticast mode [ 80.427423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.455236][ T5362] pimreg: left allmulticast mode [ 80.513246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.565911][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.574923][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.584203][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.594470][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.604098][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.612236][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.639881][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.997180][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 81.147887][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 81.315452][ T5386] syz.2.32 uses obsolete (PF_INET,SOCK_PACKET) [ 81.397291][ T35] bridge_slave_1: left allmulticast mode [ 81.407705][ T35] bridge_slave_1: left promiscuous mode [ 81.418889][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.436992][ T35] bridge_slave_0: left allmulticast mode [ 81.443072][ T35] bridge_slave_0: left promiscuous mode [ 81.448881][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.752339][ T5275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.870835][ T8] cfg80211: failed to load regulatory.db [ 81.932252][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 81.946881][ T5275] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.00 [ 81.965878][ T5275] usb 1-1: New USB device strings: Mfr=16, Product=1, SerialNumber=1 [ 81.974820][ T5275] usb 1-1: Product: syz [ 81.979030][ T5275] usb 1-1: Manufacturer: syz [ 81.983787][ T5275] usb 1-1: SerialNumber: syz [ 82.011285][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.029442][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.044451][ T35] bond0 (unregistering): Released all slaves [ 82.184949][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.192088][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.213502][ T5368] bridge_slave_0: entered allmulticast mode [ 82.307399][ T5368] bridge_slave_0: entered promiscuous mode [ 82.436666][ T5275] usb 1-1: config 0 descriptor?? [ 82.504788][ T5275] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 82.520821][ T5275] usb 1-1: Detected SIO [ 82.531668][ T5275] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 82.540455][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.552263][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.559520][ T5368] bridge_slave_1: entered allmulticast mode [ 82.590131][ T5368] bridge_slave_1: entered promiscuous mode [ 82.662496][ T54] Bluetooth: hci4: command tx timeout [ 82.829481][ T5411] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.39'. [ 82.843092][ T5411] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.39'. [ 82.862605][ T5278] usb 1-1: USB disconnect, device number 3 [ 82.899369][ T5278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 82.927597][ T5278] ftdi_sio 1-1:0.0: device disconnected [ 83.004877][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.052682][ T5368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.314452][ T35] hsr_slave_0: left promiscuous mode [ 83.375695][ T35] hsr_slave_1: left promiscuous mode [ 83.400127][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.411036][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 83.424735][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.448026][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.464391][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.562867][ T35] veth1_macvtap: left promiscuous mode [ 83.589418][ T35] veth0_macvtap: left promiscuous mode [ 83.617248][ T35] veth1_vlan: left promiscuous mode [ 83.637344][ T35] veth0_vlan: left promiscuous mode [ 83.852459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.861476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.225715][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 84.225735][ T29] audit: type=1326 audit(1727998298.492:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 84.264375][ T29] audit: type=1326 audit(1727998298.522:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 84.287307][ T29] audit: type=1326 audit(1727998298.522:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 84.316980][ T29] audit: type=1326 audit(1727998298.522:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 84.340693][ T29] audit: type=1326 audit(1727998298.522:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5452 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 84.538306][ T35] team0 (unregistering): Port device team_slave_1 removed [ 84.580773][ T35] team0 (unregistering): Port device team_slave_0 removed [ 84.746727][ T54] Bluetooth: hci4: command tx timeout [ 84.956580][ T5368] team0: Port device team_slave_0 added [ 84.965982][ T5368] team0: Port device team_slave_1 added [ 85.211139][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.232231][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.292231][ T5368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.379253][ T5470] veth1_macvtap: left promiscuous mode [ 85.467860][ T5368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.482229][ T5368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.558811][ T5368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.852672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.891446][ T5368] hsr_slave_0: entered promiscuous mode [ 85.991883][ T5368] hsr_slave_1: entered promiscuous mode [ 86.032489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.264921][ T5368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.335627][ T5368] Cannot create hsr debugfs directory [ 86.376556][ T5490] raw_sendmsg: syz.0.55 forgot to set AF_INET. Fix it! [ 86.823420][ T54] Bluetooth: hci4: command tx timeout [ 86.970407][ T5508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 87.411437][ T5526] netlink: 84 bytes leftover after parsing attributes in process `syz.1.62'. [ 87.434887][ T5526] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 87.651638][ T5537] Cannot find del_set index 0 as target [ 87.676549][ T5281] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.852328][ T5278] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.892667][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 87.900050][ T5281] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 87.931140][ T5281] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.952746][ T5281] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.995367][ T5281] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 87.996781][ T5275] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.005178][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.026123][ T5281] usb 1-1: Product: syz [ 88.030350][ T5281] usb 1-1: Manufacturer: syz [ 88.033895][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 88.059583][ T5368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.062796][ T5278] usb 4-1: config 2 has an invalid interface number: 107 but max is 1 [ 88.067011][ T5281] usb 1-1: SerialNumber: syz [ 88.085068][ T5278] usb 4-1: config 2 has an invalid interface number: 123 but max is 1 [ 88.114082][ T5278] usb 4-1: config 2 has an invalid interface number: 248 but max is 1 [ 88.115376][ T5368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.140223][ T5278] usb 4-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 88.144371][ T5368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.176826][ T5278] usb 4-1: config 2 has no interface number 0 [ 88.185788][ T5278] usb 4-1: config 2 has no interface number 1 [ 88.188267][ T5368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.200984][ T5278] usb 4-1: config 2 has no interface number 2 [ 88.222306][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 88.232842][ T5278] usb 4-1: config 2 interface 107 altsetting 5 bulk endpoint 0x7 has invalid maxpacket 64 [ 88.271292][ T5275] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 88.291087][ T5278] usb 4-1: config 2 interface 107 altsetting 5 endpoint 0x1 has an invalid bInterval 247, changing to 7 [ 88.304100][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.324157][ T5275] usb 2-1: Product: syz [ 88.328398][ T5275] usb 2-1: Manufacturer: syz [ 88.342636][ T5278] usb 4-1: config 2 interface 107 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 88.361909][ T5275] usb 2-1: SerialNumber: syz [ 88.373266][ T5275] usb 2-1: config 0 descriptor?? [ 88.378290][ T5278] usb 4-1: config 2 interface 107 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 88.404672][ T5275] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 88.420898][ T5278] usb 4-1: config 2 interface 107 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 88.433584][ T5275] usb 2-1: Detected FT232H [ 88.451413][ T5278] usb 4-1: config 2 interface 107 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 88.468605][ T5278] usb 4-1: config 2 interface 107 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 88.498873][ T5368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.506185][ T5278] usb 4-1: config 2 interface 107 altsetting 5 endpoint 0x3 has an invalid bInterval 127, changing to 7 [ 88.528439][ T5278] usb 4-1: config 2 interface 107 altsetting 5 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 88.541245][ T5278] usb 4-1: config 2 interface 107 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 16 [ 88.550539][ T5368] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.558639][ T5278] usb 4-1: config 2 interface 123 altsetting 253 has a duplicate endpoint with address 0xF, skipping [ 88.570337][ T5278] usb 4-1: config 2 interface 123 altsetting 253 has a duplicate endpoint with address 0x8, skipping [ 88.579302][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.588614][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.597295][ T5278] usb 4-1: config 2 interface 123 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 12 [ 88.626152][ T5281] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 88.637865][ T5275] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 88.648431][ T5278] usb 4-1: too many endpoints for config 2 interface 248 altsetting 130: 228, using maximum allowed: 30 [ 88.664175][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.671403][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.672770][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x7, skipping [ 88.701997][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x3, skipping [ 88.723329][ T5281] usb 1-1: USB disconnect, device number 4 [ 88.795941][ T5554] udevd[5554]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.799662][ T5278] usb 4-1: config 2 interface 248 altsetting 130 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 88.830929][ T5368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.848173][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x4, skipping [ 88.865231][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 88.883168][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.919169][ T54] Bluetooth: hci4: command tx timeout [ 88.919881][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x6, skipping [ 88.956943][ T5368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.961585][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x9, skipping [ 88.988599][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has a duplicate endpoint with address 0x1, skipping [ 89.010030][ T5368] veth0_vlan: entered promiscuous mode [ 89.015916][ T5278] usb 4-1: config 2 interface 248 altsetting 130 has 9 endpoint descriptors, different from the interface descriptor's value: 228 [ 89.049407][ T5368] veth1_vlan: entered promiscuous mode [ 89.057078][ T5278] usb 4-1: config 2 interface 107 has no altsetting 0 [ 89.060148][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=40.bf [ 89.078332][ T5278] usb 4-1: config 2 interface 123 has no altsetting 0 [ 89.090508][ T5278] usb 4-1: config 2 interface 248 has no altsetting 0 [ 89.095123][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.122288][ T8] usb 3-1: Product: syz [ 89.126619][ T5278] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b9, bcdDevice=18.26 [ 89.128436][ T8] usb 3-1: Manufacturer: syz [ 89.143724][ T5368] veth0_macvtap: entered promiscuous mode [ 89.160388][ T8] usb 3-1: SerialNumber: syz [ 89.162736][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.173116][ T5368] veth1_macvtap: entered promiscuous mode [ 89.181102][ T5278] usb 4-1: Manufacturer: Љ [ 89.190050][ T8] usb 3-1: config 0 descriptor?? [ 89.192483][ T5278] usb 4-1: SerialNumber: ࡃ [ 89.229915][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 89.243659][ T5535] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.246332][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.279161][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.289559][ T5535] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 89.297918][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.317803][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.332002][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.351368][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.361924][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.411701][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.424348][ T4670] bcm5974 3-1:0.0: could not read from device [ 89.452925][ T8] usb 3-1: USB disconnect, device number 2 [ 89.459354][ T4670] bcm5974 3-1:0.0: could not read from device [ 89.520508][ T4670] bcm5974 3-1:0.0: could not read from device [ 89.538836][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.589616][ T5278] option 4-1:2.107: GSM modem (1-port) converter detected [ 89.687045][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.714221][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.723413][ T5278] option 4-1:2.123: GSM modem (1-port) converter detected [ 89.729070][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.748326][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.767915][ T5278] usb 4-1: USB disconnect, device number 2 [ 89.771340][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.813540][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.814808][ T5278] option 4-1:2.107: device disconnected [ 89.835049][ T5278] option 4-1:2.123: device disconnected [ 89.840461][ T5368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.859090][ T5368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.894268][ T5368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.956140][ T5368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.002290][ T5368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.011071][ T5368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.048185][ T5368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.318117][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.352336][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.409049][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.418777][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.516766][ T5281] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.682409][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 90.702048][ T5275] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 90.712499][ T5281] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.712977][ T5275] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 90.749013][ T5281] usb 3-1: config 0 has no interface number 0 [ 90.783846][ T5281] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 90.796470][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.811428][ T5281] usb 3-1: Product: syz [ 90.819967][ T5275] usb 2-1: USB disconnect, device number 2 [ 90.832019][ T5281] usb 3-1: Manufacturer: syz [ 90.848663][ T5281] usb 3-1: SerialNumber: syz [ 90.881094][ T5275] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 90.903020][ T5281] usb 3-1: config 0 descriptor?? [ 90.915091][ T5275] ftdi_sio 2-1:0.0: device disconnected [ 90.927809][ T5599] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 90.957527][ T5281] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 91.652358][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.689844][ T5627] dccp_invalid_packet: P.CsCov 15 exceeds packet length 256 [ 91.745621][ T5627] fuse: Bad value for 'group_id' [ 91.750641][ T5627] fuse: Bad value for 'group_id' [ 91.834486][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 91.852814][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.872471][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.901930][ T9] usb 2-1: config 1 has no interface number 0 [ 91.909479][ T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 91.955954][ T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 92.005944][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.024551][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.055822][ T9] usb 2-1: Product: syz [ 92.060471][ T9] usb 2-1: Manufacturer: syz [ 92.080762][ T9] usb 2-1: SerialNumber: syz [ 92.101223][ T5638] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 92.130506][ T5281] gspca_spca1528: reg_w err -71 [ 92.138213][ T5281] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 92.149006][ T5638] team0: Failed to send options change via netlink (err -105) [ 92.173019][ T5281] usb 3-1: USB disconnect, device number 3 [ 92.175798][ T5638] team0: Port device netdevsim0 added [ 92.620247][ T5281] usb 2-1: USB disconnect, device number 3 [ 92.957946][ T5662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 93.008649][ T5662] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.043438][ T5665] Zero length message leads to an empty skb [ 93.374331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.412934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.728973][ T5275] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 93.867793][ T5680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.88'. [ 93.885814][ T5680] (unnamed net_device) (uninitialized): down delay (1986356271) is not a multiple of miimon (129), value rounded to 1986356190 ms [ 93.941333][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 93.952920][ T5680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.88'. [ 94.022779][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 94.073297][ T5275] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.108604][ T5275] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 94.133506][ T5275] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.143259][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 94.172878][ T5275] usb 1-1: SerialNumber: syz [ 94.191109][ T81] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.293351][ T81] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.348394][ T5690] netlink: 'syz.3.89': attribute type 16 has an invalid length. [ 94.370607][ T5690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.89'. [ 94.382963][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.406300][ T5281] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.473392][ T5275] usb 1-1: USB disconnect, device number 5 [ 94.473980][ T5694] FAULT_INJECTION: forcing a failure. [ 94.473980][ T5694] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.495536][ T5694] CPU: 0 UID: 0 PID: 5694 Comm: syz.4.94 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 94.506145][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.516255][ T5694] Call Trace: [ 94.516747][ T81] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.519545][ T5694] [ 94.532747][ T5694] dump_stack_lvl+0x241/0x360 [ 94.537484][ T5694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.542718][ T5694] ? __pfx__printk+0x10/0x10 [ 94.547359][ T5694] ? __pfx_lock_release+0x10/0x10 [ 94.552433][ T5694] ? aa_sock_msg_perm+0x91/0x160 [ 94.557417][ T5694] should_fail_ex+0x3b0/0x4e0 [ 94.562120][ T5694] _copy_from_user+0x2f/0xe0 [ 94.566740][ T5694] get_compat_msghdr+0xae/0x730 [ 94.571606][ T5694] ? __pfx_get_compat_msghdr+0x10/0x10 [ 94.577101][ T5694] ? __sys_sendmmsg+0x4cb/0x730 [ 94.581965][ T5694] ? kfree+0x4e/0x440 [ 94.585970][ T5694] __sys_sendmmsg+0x467/0x730 [ 94.590677][ T5694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 94.595908][ T5694] ? __pfx_lock_acquire+0x10/0x10 [ 94.600955][ T5694] ? get_pid_task+0x23/0x1f0 [ 94.605557][ T5694] ? __pfx_lock_release+0x10/0x10 [ 94.610601][ T5694] ? kstrtouint_from_user+0x128/0x190 [ 94.616004][ T5694] ? ksys_write+0x229/0x2b0 [ 94.620535][ T5694] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 94.626535][ T5694] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.632540][ T5694] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.638897][ T5694] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 94.644454][ T5694] __do_fast_syscall_32+0xb4/0x110 [ 94.649582][ T5694] ? exc_page_fault+0x590/0x8c0 [ 94.654451][ T5694] do_fast_syscall_32+0x34/0x80 [ 94.659315][ T5694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 94.665685][ T5694] RIP: 0023:0xf740d579 [ 94.669771][ T5694] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 94.689390][ T5694] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 94.697821][ T5694] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200038c0 [ 94.705805][ T5694] RDX: 00000000ffffff06 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.713795][ T5694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 94.721775][ T5694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 94.729754][ T5694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 94.737747][ T5694] [ 94.873980][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 94.890145][ T5281] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 94.902543][ T5281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 94.929824][ T5281] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 94.951825][ T5281] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 94.984924][ T81] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.997335][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.009096][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.017876][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.029688][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.038627][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.040497][ T5281] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.052733][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.134887][ T5281] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 95.158480][ T5281] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 95.214731][ T5281] usb 3-1: Product: syz [ 95.218944][ T5281] usb 3-1: Manufacturer: syz [ 95.229153][ T5704] netlink: 556 bytes leftover after parsing attributes in process `syz.3.98'. [ 95.264037][ T5281] usb 3-1: SerialNumber: syz [ 95.285567][ T5281] usb 3-1: config 0 descriptor?? [ 95.316118][ T5281] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 95.376582][ T5281] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 95.458034][ T81] bridge_slave_1: left allmulticast mode [ 95.470899][ T81] bridge_slave_1: left promiscuous mode [ 95.485312][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.510115][ T81] bridge_slave_0: left allmulticast mode [ 95.522605][ T81] bridge_slave_0: left promiscuous mode [ 95.528825][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.562678][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 95.696324][ T5275] usb 3-1: USB disconnect, device number 4 [ 95.702693][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 95.704990][ T5689] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 95.712902][ T3213] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 95.745080][ T8] usb 5-1: unable to get BOS descriptor or descriptor too short [ 95.759386][ T5711] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 95.771885][ T8] usb 5-1: config 127 has an invalid interface number: 98 but max is 0 [ 95.783447][ T5231] Bluetooth: hci4: command tx timeout [ 95.788843][ T8] usb 5-1: config 127 has no interface number 0 [ 95.788889][ T8] usb 5-1: config 127 interface 98 altsetting 1 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 95.788921][ T8] usb 5-1: config 127 interface 98 has no altsetting 0 [ 95.815070][ T8] usb 5-1: string descriptor 0 read error: -22 [ 95.829379][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=4b.9b [ 95.840697][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.853900][ T5275] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 95.894328][ T8] iowarrior 5-1:127.98: no interrupt-out endpoint found [ 95.897794][ T3213] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.912456][ T3213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.925079][ T3213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.938236][ T3213] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.954543][ T3213] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.964044][ T3213] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.972094][ T3213] usb 1-1: Product: syz [ 95.982486][ T3213] usb 1-1: Manufacturer: syz [ 96.011723][ T3213] cdc_wdm 1-1:1.0: skipping garbage [ 96.021730][ T3213] cdc_wdm 1-1:1.0: skipping garbage [ 96.033715][ T3213] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 96.053093][ T3213] cdc_wdm 1-1:1.0: Unknown control protocol [ 96.076689][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 96.111739][ T3213] usb 5-1: USB disconnect, device number 6 [ 96.297672][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 96.299168][ T3213] usb 1-1: USB disconnect, device number 6 [ 96.304586][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 96.316383][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.505969][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.524122][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.555831][ T81] bond0 (unregistering): Released all slaves [ 97.142655][ T5231] Bluetooth: hci0: command tx timeout [ 97.522404][ T5274] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.675204][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.692706][ T5274] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 97.728961][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.768958][ T5787] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 97.793082][ T5274] usb 4-1: config 0 descriptor?? [ 97.843088][ T5274] pwc: Askey VC010 type 2 USB webcam detected. [ 97.860582][ T5700] chnl_net:caif_netlink_parms(): no params data found [ 98.007486][ T5274] pwc: send_video_command error -71 [ 98.022479][ T5274] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 98.049790][ T5274] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 98.092056][ T5274] usb 4-1: USB disconnect, device number 3 [ 98.179802][ T81] hsr_slave_0: left promiscuous mode [ 98.190933][ T81] hsr_slave_1: left promiscuous mode [ 98.198629][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.213273][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.221808][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.230995][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.271919][ T81] veth1_macvtap: left promiscuous mode [ 98.281345][ T81] veth0_macvtap: left promiscuous mode [ 98.283064][ T3213] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.299705][ T81] veth1_vlan: left promiscuous mode [ 98.309394][ T81] veth0_vlan: left promiscuous mode [ 98.334510][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 98.442278][ T3213] usb 5-1: Using ep0 maxpacket: 8 [ 98.449374][ T3213] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.462290][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.484394][ T9] usb 1-1: device descriptor read/64, error -71 [ 98.492976][ T3213] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.514344][ T5274] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.522054][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.546624][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.573415][ T3213] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.581065][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.593003][ T3213] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.605210][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.616534][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.630628][ T3213] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 98.638663][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 98.650158][ T3213] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.662322][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 98.673585][ T3213] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 98.694937][ T3213] usb 5-1: string descriptor 0 read error: -22 [ 98.701439][ T3213] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 98.711094][ T3213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.730019][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.746043][ T5274] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 98.762485][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 98.764209][ T3213] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 98.790854][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.824804][ T5274] usb 4-1: config 0 descriptor?? [ 98.854493][ T5274] pwc: Askey VC010 type 2 USB webcam detected. [ 98.912329][ T9] usb 1-1: device descriptor read/64, error -71 [ 99.028842][ T9] usb usb1-port1: attempt power cycle [ 99.109990][ T5797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.215149][ T5279] usb 5-1: USB disconnect, device number 7 [ 99.222584][ T5231] Bluetooth: hci0: command tx timeout [ 99.252324][ T5274] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.298629][ T5274] pwc: recv_control_msg error -32 req 02 val 2700 [ 99.340925][ T5274] pwc: recv_control_msg error -32 req 02 val 2c00 [ 99.350654][ T5274] pwc: recv_control_msg error -32 req 04 val 1000 [ 99.366536][ T5274] pwc: recv_control_msg error -32 req 04 val 1300 [ 99.388571][ T5274] pwc: recv_control_msg error -32 req 04 val 1400 [ 99.395676][ T5274] pwc: recv_control_msg error -32 req 02 val 2000 [ 99.408774][ T5274] pwc: recv_control_msg error -32 req 02 val 2100 [ 99.420037][ T5274] pwc: recv_control_msg error -32 req 04 val 1500 [ 99.437163][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 99.437612][ T5274] pwc: recv_control_msg error -32 req 02 val 2500 [ 99.478039][ T9] usb 1-1: device descriptor read/8, error -71 [ 99.541525][ T81] team0 (unregistering): Port device team_slave_1 removed [ 99.559889][ T5274] pwc: recv_control_msg error -71 req 02 val 2400 [ 99.583204][ T5274] pwc: recv_control_msg error -71 req 02 val 2600 [ 99.621209][ T5274] pwc: recv_control_msg error -71 req 02 val 2900 [ 99.647668][ T5274] pwc: recv_control_msg error -71 req 02 val 2800 [ 99.672276][ T5274] pwc: recv_control_msg error -71 req 04 val 1100 [ 99.679129][ T5274] pwc: recv_control_msg error -71 req 04 val 1200 [ 99.697540][ T81] team0 (unregistering): Port device team_slave_0 removed [ 99.705090][ T5274] pwc: Registered as video71. [ 99.710087][ T5274] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 99.722416][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 99.759763][ T5274] usb 4-1: USB disconnect, device number 4 [ 99.783521][ T9] usb 1-1: device descriptor read/8, error -71 [ 99.943756][ T9] usb usb1-port1: unable to enumerate USB device [ 101.302669][ T5231] Bluetooth: hci0: command tx timeout [ 101.573029][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.580206][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.650318][ T5700] bridge_slave_0: entered allmulticast mode [ 101.685157][ T5700] bridge_slave_0: entered promiscuous mode [ 101.710659][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.752372][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.772473][ T5700] bridge_slave_1: entered allmulticast mode [ 101.785853][ T5700] bridge_slave_1: entered promiscuous mode [ 101.807715][ T5830] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 101.854388][ T5830] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.115'. [ 101.938961][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.001904][ T5837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 102.019908][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.264226][ T5700] team0: Port device team_slave_0 added [ 102.298771][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.3.120'. [ 102.332353][ T5843] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 102.379805][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 102.423569][ T5700] team0: Port device team_slave_1 added [ 102.675543][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.710265][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.761249][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.791459][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.842309][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.889545][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.936001][ T5863] dccp_v6_rcv: dropped packet with invalid checksum [ 103.081696][ T5700] hsr_slave_0: entered promiscuous mode [ 103.113137][ T5700] hsr_slave_1: entered promiscuous mode [ 103.142690][ T5277] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 103.152237][ T5700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.194607][ T5700] Cannot create hsr debugfs directory [ 103.302837][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.306213][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.323789][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.332752][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.340878][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.348889][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 103.354365][ T5277] usb 4-1: config 0 has no interfaces? [ 103.361626][ T5277] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 103.361687][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.386167][ T5231] Bluetooth: hci0: command tx timeout [ 103.432232][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.459575][ T5277] usb 4-1: config 0 descriptor?? [ 103.520404][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.563018][ T5279] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.630338][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.642338][ T5278] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 103.688934][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 103.698435][ T5865] FAULT_INJECTION: forcing a failure. [ 103.698435][ T5865] name failslab, interval 1, probability 0, space 0, times 1 [ 103.724768][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.737845][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.753034][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: syz.3.125 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 103.763670][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.773750][ T5865] Call Trace: [ 103.777039][ T5865] [ 103.779976][ T5865] dump_stack_lvl+0x241/0x360 [ 103.784679][ T5865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.789892][ T5865] ? __pfx__printk+0x10/0x10 [ 103.794508][ T5865] ? __kmalloc_node_noprof+0xb7/0x440 [ 103.799898][ T5865] ? __pfx___might_resched+0x10/0x10 [ 103.805204][ T5865] should_fail_ex+0x3b0/0x4e0 [ 103.809905][ T5865] should_failslab+0xac/0x100 [ 103.814609][ T5865] __kmalloc_node_noprof+0xdf/0x440 [ 103.819824][ T5865] ? __kvmalloc_node_noprof+0x72/0x190 [ 103.825296][ T5865] __kvmalloc_node_noprof+0x72/0x190 [ 103.830593][ T5865] alloc_netdev_mqs+0x8ac/0x1000 [ 103.835550][ T5865] rtnl_create_link+0x2f9/0xc20 [ 103.840413][ T5865] rtnl_newlink+0x1423/0x20a0 [ 103.845101][ T5865] ? rtnl_newlink+0xa91/0x20a0 [ 103.849887][ T5865] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.854933][ T5865] ? do_raw_spin_unlock+0x13c/0x8b0 [ 103.860154][ T5865] ? __mutex_lock+0x9ab/0xd70 [ 103.864848][ T5865] ? __mutex_lock+0x52a/0xd70 [ 103.869549][ T5865] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.874585][ T5865] rtnetlink_rcv_msg+0x73f/0xcf0 [ 103.879536][ T5865] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 103.884683][ T5865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.890170][ T5865] ? ref_tracker_free+0x643/0x7e0 [ 103.895209][ T5865] netlink_rcv_skb+0x1e3/0x430 [ 103.900003][ T5865] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.905482][ T5865] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.910891][ T5865] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.916121][ T5865] netlink_unicast+0x7f6/0x990 [ 103.920915][ T5865] ? __pfx_netlink_unicast+0x10/0x10 [ 103.926224][ T5865] ? __virt_addr_valid+0x183/0x530 [ 103.931349][ T5865] ? __check_object_size+0x48e/0x900 [ 103.936655][ T5865] netlink_sendmsg+0x8e4/0xcb0 [ 103.941441][ T5865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.946760][ T5865] ? __pfx_lock_release+0x10/0x10 [ 103.951804][ T5865] ? aa_sock_msg_perm+0x91/0x160 [ 103.956768][ T5865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.962157][ T5865] __sock_sendmsg+0x221/0x270 [ 103.966877][ T5865] ____sys_sendmsg+0x52a/0x7e0 [ 103.971686][ T5865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.977280][ T5865] __sys_sendmsg+0x292/0x380 [ 103.981907][ T5865] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.987071][ T5865] ? __pfx_vfs_write+0x10/0x10 [ 103.991880][ T5865] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 103.998490][ T5865] ? lockdep_hardirqs_on+0x99/0x150 [ 104.003733][ T5865] __do_fast_syscall_32+0xb4/0x110 [ 104.009071][ T5865] ? exc_page_fault+0x590/0x8c0 [ 104.013969][ T5865] do_fast_syscall_32+0x34/0x80 [ 104.018842][ T5865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.025358][ T5865] RIP: 0023:0xf73ad579 [ 104.029439][ T5865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 104.049084][ T5865] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 104.057548][ T5865] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000140 [ 104.065562][ T5865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.073545][ T5865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.081524][ T5865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.089503][ T5865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.097623][ T5865] [ 104.101778][ T5279] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 104.111528][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.116051][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 104.135611][ T5279] usb 5-1: config 0 descriptor?? [ 104.144940][ T5274] usb 4-1: USB disconnect, device number 5 [ 104.169035][ T5278] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 104.186313][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 104.200096][ T5278] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 104.216834][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.229341][ T5278] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 104.239306][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.252395][ T5278] usb 1-1: Product: syz [ 104.256626][ T5278] usb 1-1: Manufacturer: syz [ 104.261351][ T5278] usb 1-1: SerialNumber: syz [ 104.281159][ T5278] usb 1-1: config 0 descriptor?? [ 104.292583][ T5278] kvaser_usb 1-1:0.0: error -EMSGSIZE: Cannot get software info [ 104.307933][ T5278] kvaser_usb 1-1:0.0: probe with driver kvaser_usb failed with error -90 [ 104.505397][ T5278] usb 1-1: USB disconnect, device number 11 [ 104.564489][ T5279] usbhid 5-1:0.0: can't add hid device: -71 [ 104.570583][ T5279] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 104.589925][ T5279] usb 5-1: USB disconnect, device number 8 [ 104.752748][ T81] bridge_slave_1: left allmulticast mode [ 104.769259][ T81] bridge_slave_1: left promiscuous mode [ 104.782765][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.800579][ T81] bridge_slave_0: left allmulticast mode [ 104.808548][ T81] bridge_slave_0: left promiscuous mode [ 104.814605][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.294414][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.331057][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.367360][ T81] bond0 (unregistering): Released all slaves [ 105.464624][ T5231] Bluetooth: hci3: command tx timeout [ 105.582260][ T5274] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 105.609829][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 105.745614][ T5274] usb 5-1: config 0 has no interfaces? [ 105.763650][ T5274] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 105.789201][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.865814][ T5274] usb 5-1: config 0 descriptor?? [ 106.179366][ T5903] program syz.4.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.205389][ T81] hsr_slave_0: left promiscuous mode [ 106.215817][ T81] hsr_slave_1: left promiscuous mode [ 106.304604][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.320528][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.350330][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.367292][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.409693][ T81] veth1_macvtap: left promiscuous mode [ 106.443530][ T81] veth0_macvtap: left promiscuous mode [ 106.449869][ T81] veth1_vlan: left promiscuous mode [ 106.457767][ T81] veth0_vlan: left promiscuous mode [ 107.129982][ T81] team0 (unregistering): Port device team_slave_1 removed [ 107.171383][ T81] team0 (unregistering): Port device team_slave_0 removed [ 107.552545][ T5231] Bluetooth: hci3: command tx timeout [ 107.588192][ T5275] usb 5-1: USB disconnect, device number 9 [ 107.730187][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.737639][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.745162][ T5879] bridge_slave_0: entered allmulticast mode [ 107.752920][ T5879] bridge_slave_0: entered promiscuous mode [ 107.764708][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.771910][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.780749][ T5879] bridge_slave_1: entered allmulticast mode [ 107.788325][ T5879] bridge_slave_1: entered promiscuous mode [ 107.887809][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.914315][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.977514][ T5700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.002482][ T3213] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 108.020332][ T5700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.058614][ T5700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.092022][ T5879] team0: Port device team_slave_0 added [ 108.095973][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.104460][ T5879] team0: Port device team_slave_1 added [ 108.135247][ T5700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.167292][ T3213] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 108.182041][ T3213] usb 1-1: config 0 has no interface number 0 [ 108.197935][ T3213] usb 1-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 108.243178][ T3213] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 108.275271][ T3213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.290476][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.301419][ T3213] usb 1-1: config 0 descriptor?? [ 108.307357][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.341870][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.387049][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.401113][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.433846][ T5952] netlink: 'syz.3.141': attribute type 2 has an invalid length. [ 108.444560][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.452098][ T5952] netlink: 'syz.3.141': attribute type 7 has an invalid length. [ 108.465619][ T3213] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 108.479475][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 108.542047][ T5879] hsr_slave_0: entered promiscuous mode [ 108.558158][ T5879] hsr_slave_1: entered promiscuous mode [ 108.568339][ T5879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.581710][ T5879] Cannot create hsr debugfs directory [ 108.727229][ T5936] netlink: 36 bytes leftover after parsing attributes in process `syz.0.137'. [ 109.143224][ T3213] usb 1-1: device descriptor read/64, error -71 [ 109.219397][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.392433][ T3213] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 109.495610][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.533337][ T3213] usb 1-1: device descriptor read/64, error -71 [ 109.585376][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.592623][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.622292][ T5231] Bluetooth: hci3: command tx timeout [ 109.637796][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.644970][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.782965][ T3213] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 109.799956][ T5700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.813309][ T5972] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 109.823828][ T5700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.863862][ T3213] usb 1-1: device descriptor read/8, error -71 [ 109.897701][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.020622][ T5700] veth0_vlan: entered promiscuous mode [ 110.103381][ T3213] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 110.129934][ T5700] veth1_vlan: entered promiscuous mode [ 110.152336][ T3213] usb 1-1: device descriptor read/8, error -71 [ 110.164043][ T5879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.186214][ T5879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.208787][ T5879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.228213][ T5879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.283607][ T3213] usb 1-1: USB disconnect, device number 12 [ 110.425576][ T5700] veth0_macvtap: entered promiscuous mode [ 110.431505][ T3213] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 110.464376][ T5700] veth1_macvtap: entered promiscuous mode [ 110.502590][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.555574][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.571091][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.584414][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.584593][ T3213] usb 1-1: device descriptor read/64, error -71 [ 110.606341][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.621640][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.634480][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.649148][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.665067][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.693159][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 110.702561][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 110.712614][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.729944][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.757221][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.767262][ T9] usb 4-1: Product: syz [ 110.777933][ T9] usb 4-1: Manufacturer: syz [ 110.793584][ T9] usb 4-1: SerialNumber: syz [ 110.798846][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.818634][ T9] usb 4-1: config 0 descriptor?? [ 110.829306][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.851316][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.871012][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.900037][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.955560][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.990992][ T5554] udevd[5554]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.022726][ T5700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.041036][ T5700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.063269][ T5700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.087779][ T5700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.136049][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.143251][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.152468][ T5277] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 111.154612][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.167248][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.208392][ T5979] bond0: entered promiscuous mode [ 111.214481][ T5979] bond_slave_0: entered promiscuous mode [ 111.221078][ T5979] bond_slave_1: entered promiscuous mode [ 111.231544][ T5979] team0: entered promiscuous mode [ 111.240524][ T5979] team_slave_0: entered promiscuous mode [ 111.250736][ T5979] team_slave_1: entered promiscuous mode [ 111.333449][ T5277] usb 5-1: config 0 has no interfaces? [ 111.348209][ T5277] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 111.359214][ T9] usb 4-1: USB disconnect, device number 6 [ 111.367471][ T5879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.399023][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.421943][ T5879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.441065][ T5277] usb 5-1: config 0 descriptor?? [ 111.545544][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.694538][ T5995] program syz.4.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.705724][ T5231] Bluetooth: hci3: command tx timeout [ 111.713307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.724237][ T8] usb 5-1: USB disconnect, device number 10 [ 111.734766][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.798992][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.805969][ T5879] veth0_vlan: entered promiscuous mode [ 111.815905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.856386][ T5879] veth1_vlan: entered promiscuous mode [ 111.991570][ T5879] veth0_macvtap: entered promiscuous mode [ 112.049066][ T5879] veth1_macvtap: entered promiscuous mode [ 112.120261][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.145381][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.171473][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.217090][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.244105][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.260927][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.292836][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.310385][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.334615][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.380597][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.432275][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.467132][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.479951][ T29] audit: type=1326 audit(1727998326.722:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.528990][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.562833][ T5276] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.572345][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.597457][ T29] audit: type=1326 audit(1727998326.722:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.620449][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.656229][ T5879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.661390][ T29] audit: type=1326 audit(1727998326.732:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.677568][ T5879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.742952][ T5277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 112.753266][ T29] audit: type=1326 audit(1727998326.732:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.760851][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.775116][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.788938][ T5276] usb 4-1: Using ep0 maxpacket: 16 [ 112.818985][ T5276] usb 4-1: config 0 has no interfaces? [ 112.824797][ T5276] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 112.834820][ T29] audit: type=1326 audit(1727998326.732:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.862655][ T5276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.879043][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.895571][ T5276] usb 4-1: config 0 descriptor?? [ 112.913495][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.928757][ T29] audit: type=1326 audit(1727998326.732:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 112.942329][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.960698][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.980090][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.983364][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.008318][ T29] audit: type=1326 audit(1727998326.732:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 113.031573][ T5277] usb 2-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 113.074505][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.091378][ T29] audit: type=1326 audit(1727998326.732:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6038 comm="syz.4.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x7ffc0000 [ 113.108631][ T6033] Invalid logical block size (38911) [ 113.115189][ T5277] usb 2-1: config 0 descriptor?? [ 113.181487][ T5276] usb 4-1: string descriptor 0 read error: -71 [ 113.221367][ T5276] usb 4-1: USB disconnect, device number 7 [ 113.384993][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.397712][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.517991][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 113.552274][ T5277] usbhid 2-1:0.0: can't add hid device: -71 [ 113.558401][ T5277] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 113.604468][ T5277] usb 2-1: USB disconnect, device number 4 [ 113.735144][ T6073] xt_CT: No such helper "netbios-ns" [ 113.924433][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.937941][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.202507][ T29] audit: type=1326 audit(1727998328.452:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 114.280086][ T29] audit: type=1326 audit(1727998328.502:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6091 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 114.352348][ T3213] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 114.550525][ T3213] usb 4-1: config 0 has no interfaces? [ 114.569777][ T3213] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 114.605508][ T3213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.642085][ T3213] usb 4-1: config 0 descriptor?? [ 114.749314][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.828913][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.174'. [ 114.862090][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 114.903120][ T6086] program syz.3.166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.935025][ T3213] usb 4-1: USB disconnect, device number 8 [ 115.122275][ T5278] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.294213][ T5278] usb 2-1: config 0 has no interfaces? [ 115.304164][ T5278] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.342219][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.375863][ T5278] usb 2-1: config 0 descriptor?? [ 115.662473][ T6116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.714372][ T6116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.723940][ T6145] FAULT_INJECTION: forcing a failure. [ 115.723940][ T6145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.783779][ T5279] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 115.806642][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.3.179 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 115.818145][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.829907][ T6145] Call Trace: [ 115.833223][ T6145] [ 115.837336][ T6145] dump_stack_lvl+0x241/0x360 [ 115.842589][ T6145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.848613][ T6145] ? __pfx__printk+0x10/0x10 [ 115.853262][ T6145] ? __pfx_lock_release+0x10/0x10 [ 115.858785][ T6145] should_fail_ex+0x3b0/0x4e0 [ 115.863525][ T6145] _copy_from_user+0x2f/0xe0 [ 115.868878][ T6145] get_compat_msghdr+0xae/0x730 [ 115.873864][ T6145] ? __fget_files+0x29/0x470 [ 115.878772][ T6145] ? __pfx_get_compat_msghdr+0x10/0x10 [ 115.884307][ T6145] ? __fget_files+0x3f3/0x470 [ 115.889045][ T6145] __sys_sendmsg+0x25d/0x380 [ 115.893682][ T6145] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.898938][ T6145] ? __pfx_vfs_write+0x10/0x10 [ 115.903774][ T6145] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 115.910418][ T6145] ? lockdep_hardirqs_on+0x99/0x150 [ 115.915664][ T6145] __do_fast_syscall_32+0xb4/0x110 [ 115.920819][ T6145] ? exc_page_fault+0x590/0x8c0 [ 115.925810][ T6145] do_fast_syscall_32+0x34/0x80 [ 115.930702][ T6145] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 115.937160][ T6145] RIP: 0023:0xf73ad579 [ 115.941525][ T6145] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 115.961431][ T6145] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 115.969917][ T6145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 115.977963][ T6145] RDX: 0000000000040084 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.986059][ T6145] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 115.994102][ T6145] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.002115][ T6145] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.010131][ T6145] [ 116.050959][ T5278] usb 2-1: USB disconnect, device number 5 [ 116.459780][ T2985] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.679699][ T2985] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.934422][ T2985] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.940807][ T6172] FAULT_INJECTION: forcing a failure. [ 116.940807][ T6172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.959105][ T6172] CPU: 1 UID: 0 PID: 6172 Comm: syz.0.186 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 116.969843][ T6172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.980185][ T6172] Call Trace: [ 116.983663][ T6172] [ 116.986619][ T6172] dump_stack_lvl+0x241/0x360 [ 116.991490][ T6172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.996707][ T6172] ? __pfx__printk+0x10/0x10 [ 117.001775][ T6172] ? snprintf+0xda/0x120 [ 117.006076][ T6172] should_fail_ex+0x3b0/0x4e0 [ 117.010786][ T6172] _copy_to_user+0x2f/0xb0 [ 117.015241][ T6172] simple_read_from_buffer+0xca/0x150 [ 117.020653][ T6172] proc_fail_nth_read+0x1e9/0x250 [ 117.025737][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.031409][ T6172] ? rw_verify_area+0x55e/0x6f0 [ 117.036383][ T6172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.041956][ T6172] vfs_read+0x201/0xbc0 [ 117.046140][ T6172] ? __pfx_lock_release+0x10/0x10 [ 117.051198][ T6172] ? __pfx_vfs_read+0x10/0x10 [ 117.055928][ T6172] ? __fget_files+0x3f3/0x470 [ 117.060628][ T6172] ? fdget_pos+0x24e/0x320 [ 117.065082][ T6172] ksys_read+0x183/0x2b0 [ 117.069345][ T6172] ? __pfx_ksys_read+0x10/0x10 [ 117.074137][ T6172] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 117.080753][ T6172] ? lockdep_hardirqs_on+0x99/0x150 [ 117.085977][ T6172] __do_fast_syscall_32+0xb4/0x110 [ 117.091199][ T6172] ? exc_page_fault+0x590/0x8c0 [ 117.096264][ T6172] do_fast_syscall_32+0x34/0x80 [ 117.101129][ T6172] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 117.107471][ T6172] RIP: 0023:0xf7f95579 [ 117.111549][ T6172] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 117.131373][ T6172] RSP: 002b:00000000f57165a0 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 117.140728][ T6172] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5716620 [ 117.148934][ T6172] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 117.157932][ T6172] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 117.166387][ T6172] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 117.174902][ T6172] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 117.182906][ T6172] [ 117.445531][ T2985] team0: Port device netdevsim0 removed [ 117.467923][ T2985] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.706074][ T3213] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 117.724409][ T2985] bridge_slave_1: left allmulticast mode [ 117.732013][ T2985] bridge_slave_1: left promiscuous mode [ 117.751012][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.793211][ T2985] bridge_slave_0: left allmulticast mode [ 117.807568][ T2985] bridge_slave_0: left promiscuous mode [ 117.812922][ T5278] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 117.833227][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.837343][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.851222][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.861144][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.871592][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.891443][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.900203][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.912724][ T3213] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.923298][ T3213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.956488][ T3213] usb 1-1: config 0 descriptor?? [ 117.971456][ T3213] cp210x 1-1:0.0: cp210x converter detected [ 117.979994][ T5278] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.992440][ T5278] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 118.004742][ T5278] usb 3-1: config 1 interface 0 has no altsetting 0 [ 118.015163][ T5278] usb 3-1: string descriptor 0 read error: -22 [ 118.022041][ T5278] usb 3-1: New USB device found, idVendor=05ac, idProduct=027e, bcdDevice= 0.40 [ 118.033069][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.052291][ T6184] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.122272][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.275824][ T5278] usbhid 3-1:1.0: can't add hid device: -71 [ 118.282004][ T5278] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 118.312506][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 118.323696][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.349769][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.361693][ T5278] usb 3-1: USB disconnect, device number 5 [ 118.387615][ T8] usb 4-1: Product: syz [ 118.391892][ T8] usb 4-1: Manufacturer: syz [ 118.410883][ T3213] usb 1-1: cp210x converter now attached to ttyUSB0 [ 118.434333][ T8] usb 4-1: SerialNumber: syz [ 118.452273][ T8] usb 4-1: config 0 descriptor?? [ 118.679199][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.799185][ T2985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.812718][ T2985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.826358][ T2985] bond0 (unregistering): Released all slaves [ 118.877550][ T2985] bond1 (unregistering): Released all slaves [ 119.589772][ T6225] netlink: 48 bytes leftover after parsing attributes in process `syz.2.202'. [ 119.603615][ T5278] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 119.680206][ T2985] hsr_slave_0: left promiscuous mode [ 119.690139][ T2985] hsr_slave_1: left promiscuous mode [ 119.697905][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.706569][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.723180][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.731044][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.766271][ T2985] veth1_macvtap: left promiscuous mode [ 119.766533][ T5278] usb 2-1: config 0 has an invalid interface number: 79 but max is 0 [ 119.773171][ T2985] veth0_macvtap: left promiscuous mode [ 119.787035][ T2985] veth1_vlan: left promiscuous mode [ 119.793218][ T2985] veth0_vlan: left promiscuous mode [ 119.793416][ T5278] usb 2-1: config 0 has no interface number 0 [ 119.811540][ T5278] usb 2-1: config 0 interface 79 has no altsetting 0 [ 119.821463][ T5278] usb 2-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=fc.92 [ 119.842249][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.850413][ T5278] usb 2-1: Product: syz [ 119.873710][ T5278] usb 2-1: Manufacturer: syz [ 119.878395][ T5278] usb 2-1: SerialNumber: syz [ 119.913909][ T5278] usb 2-1: config 0 descriptor?? [ 119.936517][ T5278] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 119.958569][ T5278] dvb-usb: bulk message failed: -22 (2/0) [ 119.972816][ T5278] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 120.008919][ T5278] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 120.009003][ T5278] usb 2-1: media controller created [ 120.011700][ T5278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.022620][ T54] Bluetooth: hci4: command tx timeout [ 120.062531][ T5278] usb 2-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 120.102968][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 120.103048][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 120.103077][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.103097][ T54] Workqueue: hci1 hci_rx_work [ 120.103141][ T54] Call Trace: [ 120.103151][ T54] [ 120.103163][ T54] dump_stack_lvl+0x241/0x360 [ 120.103194][ T54] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.103219][ T54] ? __pfx__printk+0x10/0x10 [ 120.103257][ T54] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 120.103291][ T54] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 120.103331][ T54] sysfs_create_dir_ns+0x2ce/0x3a0 [ 120.103367][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 120.103409][ T54] kobject_add_internal+0x435/0x8d0 [ 120.103444][ T54] kobject_add+0x152/0x220 [ 120.103467][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.103500][ T54] ? device_add+0x3e7/0xbf0 [ 120.103536][ T54] ? __pfx_kobject_add+0x10/0x10 [ 120.103562][ T54] ? _raw_spin_unlock+0x28/0x50 [ 120.103601][ T54] ? get_device_parent+0x165/0x410 [ 120.103641][ T54] device_add+0x4e5/0xbf0 [ 120.103683][ T54] hci_conn_add_sysfs+0xe8/0x200 [ 120.103713][ T54] le_conn_complete_evt+0xc9f/0x12e0 [ 120.103755][ T54] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.103794][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 120.103835][ T54] ? irqentry_exit+0x63/0x90 [ 120.103868][ T54] ? lockdep_hardirqs_on+0x99/0x150 [ 120.103912][ T54] hci_le_enh_conn_complete_evt+0x185/0x420 [ 120.103954][ T54] hci_event_packet+0xa55/0x1540 [ 120.103987][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 120.104026][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 120.104059][ T54] ? do_raw_spin_unlock+0x13c/0x8b0 [ 120.104097][ T54] ? hci_send_to_monitor+0xd8/0x7f0 [ 120.104132][ T54] ? kcov_remote_start+0x97/0x7d0 [ 120.104167][ T54] hci_rx_work+0x3e8/0xca0 [ 120.104204][ T54] ? process_scheduled_works+0x976/0x1850 [ 120.104238][ T54] process_scheduled_works+0xa63/0x1850 [ 120.104301][ T54] ? __pfx_process_scheduled_works+0x10/0x10 [ 120.104344][ T54] ? assign_work+0x364/0x3d0 [ 120.104382][ T54] worker_thread+0x870/0xd30 [ 120.104432][ T54] ? __kthread_parkme+0x169/0x1d0 [ 120.104471][ T54] ? __pfx_worker_thread+0x10/0x10 [ 120.104505][ T54] kthread+0x2f0/0x390 [ 120.104528][ T54] ? __pfx_worker_thread+0x10/0x10 [ 120.104561][ T54] ? __pfx_kthread+0x10/0x10 [ 120.104586][ T54] ret_from_fork+0x4b/0x80 [ 120.104620][ T54] ? __pfx_kthread+0x10/0x10 [ 120.104644][ T54] ret_from_fork_asm+0x1a/0x30 [ 120.104694][ T54] [ 120.104784][ T54] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 120.104823][ T54] Bluetooth: hci1: failed to register connection device [ 120.117045][ T5278] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 120.251771][ T5278] rc_core: IR keymap rc-dtt200u not found [ 120.509109][ T5279] usb 1-1: USB disconnect, device number 15 [ 120.513060][ T5278] Registered IR keymap rc-empty [ 120.616529][ T5278] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 120.619127][ T5279] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 120.675669][ T5278] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 120.694737][ T5278] dvb-usb: schedule remote query interval to 300 msecs. [ 120.717737][ T5278] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 120.723982][ T5279] cp210x 1-1:0.0: device disconnected [ 120.800230][ T5278] usb 2-1: USB disconnect, device number 6 [ 120.879312][ T5278] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 121.005196][ T8] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 121.269080][ T2985] team0 (unregistering): Port device team_slave_1 removed [ 121.311809][ T2985] team0 (unregistering): Port device team_slave_0 removed [ 121.775918][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.192'. [ 121.820826][ T6246] netlink: 'syz.1.206': attribute type 14 has an invalid length. [ 121.838513][ T6246] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (204) [ 121.885287][ T5279] usb 4-1: USB disconnect, device number 9 [ 121.913222][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.922589][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.979171][ T6190] chnl_net:caif_netlink_parms(): no params data found [ 122.102478][ T5231] Bluetooth: hci4: command tx timeout [ 122.195876][ T5231] Bluetooth: hci1: command tx timeout [ 122.254197][ T6264] netlink: 'syz.1.212': attribute type 7 has an invalid length. [ 122.381049][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 122.402304][ T3213] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 122.546450][ T6266] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 122.568754][ T6266] bond1: (slave ipip0): Error -95 calling set_mac_address [ 122.614023][ T3213] usb 1-1: config 0 has no interfaces? [ 122.619844][ T3213] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.636079][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.644934][ T3213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.658512][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.678105][ T3213] usb 1-1: config 0 descriptor?? [ 122.693970][ T6190] bridge_slave_0: entered allmulticast mode [ 122.700849][ T6190] bridge_slave_0: entered promiscuous mode [ 122.722839][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.757526][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.826512][ T6190] bridge_slave_1: entered allmulticast mode [ 122.880444][ T6190] bridge_slave_1: entered promiscuous mode [ 122.890216][ T6261] program syz.0.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.976657][ T3213] usb 1-1: USB disconnect, device number 16 [ 123.228746][ T6190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.329506][ T6190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.424303][ T5278] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.598856][ T6190] team0: Port device team_slave_0 added [ 123.612520][ T5278] usb 4-1: Using ep0 maxpacket: 16 [ 123.642334][ T5278] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.669535][ T6190] team0: Port device team_slave_1 added [ 123.691139][ T5278] usb 4-1: config 0 has no interface number 0 [ 123.735256][ T5278] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 123.847388][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.923137][ T5278] usb 4-1: Product: syz [ 123.945429][ T5278] usb 4-1: Manufacturer: syz [ 124.002888][ T5278] usb 4-1: SerialNumber: syz [ 124.035216][ T5278] usb 4-1: config 0 descriptor?? [ 124.069495][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.079599][ T5278] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 124.102947][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.180894][ T6190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.193081][ T5231] Bluetooth: hci4: command tx timeout [ 124.256892][ T6190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.270276][ T6190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.270344][ T6190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.443227][ T6190] hsr_slave_0: entered promiscuous mode [ 124.445784][ T6190] hsr_slave_1: entered promiscuous mode [ 124.446634][ T6190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.446723][ T6190] Cannot create hsr debugfs directory [ 124.512664][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.633617][ T5278] gspca_spca1528: reg_w err -110 [ 124.652535][ T5278] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 125.043785][ T3213] usb 4-1: USB disconnect, device number 10 [ 125.469305][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 125.527699][ T6326] trusted_key: syz.0.226 sent an empty control message without MSG_MORE. [ 126.262618][ T5231] Bluetooth: hci4: command tx timeout [ 126.301361][ T6190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.360989][ T6190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.523523][ T6190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.779113][ T6190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.132339][ T5278] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.288495][ T6190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.315818][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 127.337385][ T5278] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.357781][ T6190] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.370937][ T5278] usb 2-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 127.384957][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.400211][ T6362] hsr0: entered promiscuous mode [ 127.406987][ T5278] usb 2-1: Product: syz [ 127.418960][ T5278] usb 2-1: Manufacturer: syz [ 127.424143][ T5278] usb 2-1: SerialNumber: syz [ 127.442036][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.449241][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.454485][ T5278] usb 2-1: config 0 descriptor?? [ 127.464316][ T5278] usb 2-1: bad CDC descriptors [ 127.476368][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.483616][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.608942][ T6190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.675511][ T5278] usb 2-1: USB disconnect, device number 7 [ 127.749139][ T6190] veth0_vlan: entered promiscuous mode [ 127.778648][ T6190] veth1_vlan: entered promiscuous mode [ 127.906524][ T6190] veth0_macvtap: entered promiscuous mode [ 127.948939][ T6190] veth1_macvtap: entered promiscuous mode [ 128.006481][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.051593][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.084877][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.119790][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.140211][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.161505][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.176660][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.188826][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.200330][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.217425][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.229405][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.265740][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.289372][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.318686][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.342743][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.362637][ T6190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.392216][ T6190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.413577][ T6190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.431128][ T6190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.452225][ T6190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.460996][ T6190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.483043][ T6190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.585255][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.619272][ T6394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.240'. [ 128.772292][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 128.805201][ T8] usb 2-1: config 0 has no interfaces? [ 128.829899][ T8] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 128.840865][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.868212][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.880925][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.912323][ T8] usb 2-1: Product: syz [ 128.916560][ T8] usb 2-1: Manufacturer: syz [ 128.921193][ T8] usb 2-1: SerialNumber: syz [ 128.964092][ T8] usb 2-1: config 0 descriptor?? [ 128.976004][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.007684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.247722][ T6421] netlink: 292 bytes leftover after parsing attributes in process `syz.3.247'. [ 129.362379][ T5274] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.543652][ T5274] usb 3-1: Using ep0 maxpacket: 16 [ 129.556091][ T5274] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 129.595911][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.614604][ T5274] usb 3-1: Product: syz [ 129.627614][ T5274] usb 3-1: Manufacturer: syz [ 129.640255][ T5274] r8152-cfgselector 3-1: Unknown version 0x0000 [ 129.646784][ T5274] r8152-cfgselector 3-1: config 0 descriptor?? [ 130.080701][ T6448] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 130.183248][ T5276] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 130.269133][ T6441] kernel read not supported for file /#! [ 130.269133][ T6441] Í2gŠvô-dÞþtø"ÌzR¸Éð™F(›‘ƒävtîØ”ø•1”RŸWHzíãÎÐÍ ‹³aãàï=Ú¼ (pid: 6441 comm: syz.2.246) [ 130.294562][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 130.294581][ T29] audit: type=1800 audit(1727998344.562:87): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.246" name=2321200ACD3208678A76F42D64DEFE74F822CC7A52B8C9F09946289B029183E47674EE900E01D80F94F8953194529F57487A90EDE3CED0CD208BB361E3E0EF3DDABC dev="mqueue" ino=14037 res=0 errno=0 [ 130.382438][ T5276] usb 5-1: Using ep0 maxpacket: 32 [ 130.432238][ T5276] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 130.443726][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.459170][ T5276] usb 5-1: Product: syz [ 130.465624][ T5276] usb 5-1: Manufacturer: syz [ 130.470583][ T5276] usb 5-1: SerialNumber: syz [ 130.491546][ T5276] usb 5-1: config 0 descriptor?? [ 130.600677][ T5276] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 131.163584][ T5276] gspca_stk1135: reg_w 0x2 err -110 [ 131.182707][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.202737][ T5276] gspca_stk1135: Sensor write failed [ 131.221832][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.238340][ T5276] gspca_stk1135: Sensor write failed [ 131.260328][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.289004][ T5276] gspca_stk1135: Sensor read failed [ 131.300379][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.314243][ T5276] gspca_stk1135: Sensor read failed [ 131.327690][ T5276] gspca_stk1135: Detected sensor type unknown (0x0) [ 131.346048][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.366489][ T5276] gspca_stk1135: Sensor read failed [ 131.373230][ T5279] usb 2-1: USB disconnect, device number 8 [ 131.380884][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.402246][ T5276] gspca_stk1135: Sensor read failed [ 131.419582][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.431930][ T5276] gspca_stk1135: Sensor write failed [ 131.439023][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 131.458447][ T5276] gspca_stk1135: Sensor write failed [ 131.471652][ T5276] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 131.542343][ T5277] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.703692][ T5277] usb 4-1: device descriptor read/64, error -71 [ 131.933093][ T5279] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 131.962282][ T5277] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.104444][ T5279] usb 2-1: config 0 has no interfaces? [ 132.110164][ T5279] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 132.119522][ T5277] usb 4-1: device descriptor read/64, error -71 [ 132.125957][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.130048][ T5276] r8152-cfgselector 3-1: USB disconnect, device number 6 [ 132.136291][ T5279] usb 2-1: config 0 descriptor?? [ 132.242778][ T5277] usb usb4-port1: attempt power cycle [ 132.374449][ T6483] program syz.1.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.397403][ T5279] usb 2-1: USB disconnect, device number 9 [ 132.585105][ T5277] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.615410][ T5277] usb 4-1: device descriptor read/8, error -71 [ 132.662524][ T5276] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 132.812447][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 132.872242][ T5277] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.887824][ T5276] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 132.910300][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.928170][ T5276] usb 3-1: Product: syz [ 132.941771][ T5276] usb 3-1: Manufacturer: syz [ 132.959307][ T5276] usb 3-1: SerialNumber: syz [ 132.972346][ T5277] usb 4-1: device descriptor read/8, error -71 [ 132.975790][ T5276] usb 3-1: config 0 descriptor?? [ 132.996990][ T5276] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 133.065167][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071627][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.090525][ T5279] usb 5-1: USB disconnect, device number 12 [ 133.129619][ T5277] usb usb4-port1: unable to enumerate USB device [ 133.258378][ T6498] FAULT_INJECTION: forcing a failure. [ 133.258378][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 133.303940][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.2.260 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 133.314616][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.324724][ T6498] Call Trace: [ 133.328055][ T6498] [ 133.331033][ T6498] dump_stack_lvl+0x241/0x360 [ 133.335793][ T6498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.341036][ T6498] ? __pfx__printk+0x10/0x10 [ 133.345688][ T6498] ? fs_reclaim_acquire+0x93/0x140 [ 133.350848][ T6498] ? __pfx___might_resched+0x10/0x10 [ 133.356195][ T6498] should_fail_ex+0x3b0/0x4e0 [ 133.360937][ T6498] ? tomoyo_encode+0x26f/0x540 [ 133.365755][ T6498] should_failslab+0xac/0x100 [ 133.371425][ T6498] ? tomoyo_encode+0x26f/0x540 [ 133.376241][ T6498] __kmalloc_noprof+0xd8/0x400 [ 133.381049][ T6498] tomoyo_encode+0x26f/0x540 [ 133.385682][ T6498] tomoyo_realpath_from_path+0x59e/0x5e0 [ 133.391368][ T6498] tomoyo_path_number_perm+0x23a/0x880 [ 133.396860][ T6498] ? tomoyo_path_number_perm+0x208/0x880 [ 133.402529][ T6498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 133.408552][ T6498] ? __pfx_lock_acquire+0x10/0x10 [ 133.413621][ T6498] ? __fget_files+0x29/0x470 [ 133.418240][ T6498] ? __fget_files+0x3f3/0x470 [ 133.422945][ T6498] security_file_ioctl_compat+0xc6/0x2a0 [ 133.428608][ T6498] __se_compat_sys_ioctl+0xd6/0xc90 [ 133.433824][ T6498] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 133.439655][ T6498] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.445672][ T6498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.452034][ T6498] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 133.458644][ T6498] ? lockdep_hardirqs_on+0x99/0x150 [ 133.463878][ T6498] __do_fast_syscall_32+0xb4/0x110 [ 133.469002][ T6498] ? exc_page_fault+0x590/0x8c0 [ 133.473887][ T6498] do_fast_syscall_32+0x34/0x80 [ 133.478754][ T6498] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.485098][ T6498] RIP: 0023:0xf7f62579 [ 133.489188][ T6498] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.508824][ T6498] RSP: 002b:00000000f56c556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 133.517263][ T6498] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000541b [ 133.525253][ T6498] RDX: 0000000020000ec0 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.533244][ T6498] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.541228][ T6498] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.549210][ T6498] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.557207][ T6498] [ 133.641738][ T5276] gspca_stk1135: reg_w 0x2 err -110 [ 133.653952][ T6498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 133.663069][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.669463][ T5276] gspca_stk1135: Sensor write failed [ 133.683096][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.689680][ T5276] gspca_stk1135: Sensor write failed [ 133.699858][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.706363][ T5276] gspca_stk1135: Sensor read failed [ 133.722385][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.731502][ T5276] gspca_stk1135: Sensor read failed [ 133.740993][ T5276] gspca_stk1135: Detected sensor type unknown (0x0) [ 133.750191][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.764926][ T5276] gspca_stk1135: Sensor read failed [ 133.771619][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.825570][ T5276] gspca_stk1135: Sensor read failed [ 133.864341][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.889307][ T5276] gspca_stk1135: Sensor write failed [ 133.925760][ T5276] gspca_stk1135: serial bus timeout: status=0x00 [ 133.982319][ T5276] gspca_stk1135: Sensor write failed [ 133.988182][ T5276] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 134.785681][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.828783][ T6511] bridge_slave_1: left promiscuous mode [ 134.867649][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.508701][ T3213] usb 3-1: USB disconnect, device number 7 [ 135.675406][ T6516] can: request_module (can-proto-0) failed. [ 140.272272][ T3213] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.012519][ T6543] netlink: 52 bytes leftover after parsing attributes in process `syz.3.276'. [ 141.717582][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 141.832744][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 142.002395][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 142.017297][ T5275] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 142.054236][ T5275] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 142.069868][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.097954][ T5275] usb 5-1: Product: syz [ 142.119621][ T5275] usb 5-1: Manufacturer: syz [ 142.136279][ T5275] usb 5-1: SerialNumber: syz [ 142.153584][ T5275] usb 5-1: config 0 descriptor?? [ 142.182472][ T5275] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 142.610787][ T6577] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.287'. [ 142.709507][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.838842][ T6585] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 142.852582][ T3213] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.862704][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.904189][ T5275] gspca_zc3xx: reg_w_i err -110 [ 142.960748][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.042345][ T3213] usb 3-1: device descriptor read/64, error -71 [ 143.160941][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.192586][ T5278] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 143.209610][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.241027][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.285480][ T3213] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 143.322726][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.402358][ T5278] usb 1-1: Using ep0 maxpacket: 16 [ 143.419944][ T5278] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 143.449455][ T5278] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 143.498505][ T5278] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.510013][ T3213] usb 3-1: device descriptor read/64, error -71 [ 143.522452][ T5275] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 143.551577][ T5275] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 143.574224][ T5278] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.612646][ T5275] usb 5-1: USB disconnect, device number 13 [ 143.627402][ T5278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.642755][ T3213] usb usb3-port1: attempt power cycle [ 143.687812][ T5278] usb 1-1: Product: syz [ 143.712289][ T5278] usb 1-1: SerialNumber: syz [ 143.963757][ T5278] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 144.024550][ T3213] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 144.042393][ T5278] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 144.088263][ T5278] usb 1-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 144.102536][ T3213] usb 3-1: device descriptor read/8, error -71 [ 144.177024][ T5278] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 144.272223][ T5278] usb 1-1: failed to enable PITCH for EP 0x82 [ 144.372426][ T3213] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 144.462955][ T3213] usb 3-1: device descriptor read/8, error -71 [ 144.552813][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.564839][ T6593] xt_TCPMSS: Only works on TCP SYN packets [ 144.578573][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.588042][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.596232][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.620081][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.627801][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.642516][ T3213] usb usb3-port1: unable to enumerate USB device [ 144.676415][ T5278] usb 1-1: USB disconnect, device number 17 [ 146.742512][ T54] Bluetooth: hci0: command tx timeout [ 148.822298][ T54] Bluetooth: hci0: command tx timeout [ 150.902243][ T54] Bluetooth: hci0: command tx timeout [ 153.781158][ T54] Bluetooth: hci0: command tx timeout [ 153.788001][ T0] sched: DL replenish lagged too much [ 157.570067][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 157.588959][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 157.597431][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 157.605924][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 157.621424][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 157.652302][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.733194][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.744750][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.754516][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.768249][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.792562][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.800416][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.157332][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.167639][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.176691][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.190195][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.200421][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.208472][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.272030][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 158.282436][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 158.293822][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 158.303028][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 158.315069][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 158.322817][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.947031][ T54] Bluetooth: hci2: command tx timeout [ 160.022391][ T54] Bluetooth: hci3: command tx timeout [ 160.262438][ T54] Bluetooth: hci5: command tx timeout [ 160.422602][ T54] Bluetooth: hci1: command tx timeout [ 161.661492][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.022302][ T54] Bluetooth: hci2: command tx timeout [ 162.102373][ T54] Bluetooth: hci3: command tx timeout [ 162.342292][ T54] Bluetooth: hci5: command tx timeout [ 162.502648][ T54] Bluetooth: hci1: command tx timeout [ 164.102381][ T54] Bluetooth: hci2: command tx timeout [ 164.182332][ T54] Bluetooth: hci3: command tx timeout [ 164.422527][ T54] Bluetooth: hci5: command tx timeout [ 164.584656][ T54] Bluetooth: hci1: command tx timeout [ 164.617112][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.804821][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.402005][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 166.086921][ T12] bridge_slave_1: left allmulticast mode [ 166.095185][ T12] bridge_slave_1: left promiscuous mode [ 166.100967][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.127297][ T12] bridge_slave_0: left allmulticast mode [ 166.150689][ T12] bridge_slave_0: left promiscuous mode [ 166.182554][ T54] Bluetooth: hci2: command tx timeout [ 166.263327][ T54] Bluetooth: hci3: command tx timeout [ 166.285785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.512329][ T54] Bluetooth: hci5: command tx timeout [ 166.672267][ T54] Bluetooth: hci1: command tx timeout [ 194.525263][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531623][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.787818][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.806290][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.827706][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.908001][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.958264][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.978159][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.144609][ T5231] Bluetooth: hci4: command tx timeout [ 211.222372][ T5231] Bluetooth: hci4: command tx timeout [ 213.309276][ T5231] Bluetooth: hci4: command tx timeout [ 215.382252][ T5231] Bluetooth: hci4: command tx timeout [ 216.920550][ T4622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 216.932273][ T4622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.949488][ T4622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 216.957742][ T4622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.967128][ T4622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 216.976001][ T4622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.985756][ T4622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 216.993592][ T4622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 217.001896][ T4622] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.009885][ T4622] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 217.018512][ T5229] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.026235][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.271682][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 217.281443][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 217.290351][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 217.298890][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 217.312999][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 217.320951][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 217.740988][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 217.760115][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 217.770767][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 217.784991][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 217.805496][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 217.813007][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 219.062496][ T5231] Bluetooth: hci6: command tx timeout [ 219.142245][ T5231] Bluetooth: hci7: command tx timeout [ 219.382366][ T5231] Bluetooth: hci8: command tx timeout [ 219.862346][ T5231] Bluetooth: hci9: command tx timeout [ 221.149518][ T5231] Bluetooth: hci6: command tx timeout [ 221.222300][ T5231] Bluetooth: hci7: command tx timeout [ 221.462392][ T5231] Bluetooth: hci8: command tx timeout [ 221.942301][ T5231] Bluetooth: hci9: command tx timeout [ 223.222328][ T5231] Bluetooth: hci6: command tx timeout [ 223.305553][ T5231] Bluetooth: hci7: command tx timeout [ 223.542318][ T5231] Bluetooth: hci8: command tx timeout [ 224.022316][ T5231] Bluetooth: hci9: command tx timeout [ 225.302404][ T5231] Bluetooth: hci6: command tx timeout [ 225.382357][ T5231] Bluetooth: hci7: command tx timeout [ 225.622345][ T5231] Bluetooth: hci8: command tx timeout [ 226.102508][ T5231] Bluetooth: hci9: command tx timeout [ 255.947728][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.961764][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.900906][ T5229] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 266.948115][ T5229] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 267.004353][ T5229] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 267.084939][ T5229] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 267.117899][ T5229] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 267.148403][ T5229] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 268.302137][ T5229] Bluetooth: hci0: command 0x0406 tx timeout [ 269.302345][ T54] Bluetooth: hci10: command tx timeout [ 271.382232][ T54] Bluetooth: hci10: command tx timeout [ 273.462193][ T54] Bluetooth: hci10: command tx timeout [ 275.549247][ T54] Bluetooth: hci10: command tx timeout [ 277.952921][ T5229] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 277.964109][ T5229] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 277.972727][ T5229] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 277.980851][ T5229] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 277.990987][ T5229] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 278.002341][ T5229] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 278.128275][ T4622] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 278.138821][ T4622] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 278.149828][ T4622] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 278.159552][ T4622] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 278.167885][ T4622] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 278.175625][ T4622] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 278.185302][ T4622] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 278.193010][ T4622] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 278.205491][ T4622] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 278.214113][ T4622] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 278.224775][ T4622] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 278.253764][ T4622] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 278.749281][ T5229] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 278.762821][ T5229] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 278.773102][ T5229] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 278.788715][ T5229] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 278.798199][ T5229] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 278.806441][ T5229] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 280.102526][ T5229] Bluetooth: hci11: command tx timeout [ 280.342607][ T4622] Bluetooth: hci13: command tx timeout [ 280.351786][ T5229] Bluetooth: hci12: command tx timeout [ 280.822532][ T5229] Bluetooth: hci14: command tx timeout [ 282.183015][ T6688] Bluetooth: hci11: command tx timeout [ 282.422500][ T6688] Bluetooth: hci12: command tx timeout [ 282.428081][ T6688] Bluetooth: hci13: command tx timeout [ 282.902412][ T6689] Bluetooth: hci14: command tx timeout [ 283.632271][ T6689] Bluetooth: hci3: command 0x0406 tx timeout [ 283.638357][ T6689] Bluetooth: hci5: command 0x0406 tx timeout [ 283.648570][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 283.703598][ T6690] Bluetooth: hci2: command 0x0406 tx timeout [ 284.262211][ T4622] Bluetooth: hci11: command tx timeout [ 284.502657][ T5229] Bluetooth: hci12: command tx timeout [ 284.509531][ T4622] Bluetooth: hci13: command tx timeout [ 284.982426][ T4622] Bluetooth: hci14: command tx timeout [ 286.342329][ T4622] Bluetooth: hci11: command tx timeout [ 286.582618][ T4622] Bluetooth: hci13: command tx timeout [ 286.588181][ T4622] Bluetooth: hci12: command tx timeout [ 287.062765][ T4622] Bluetooth: hci14: command tx timeout [ 310.982570][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 310.990399][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 311.022205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.030945][ T30] task:kworker/u8:1 state:D stack:19696 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 311.098376][ T30] Workqueue: netns cleanup_net [ 311.180105][ T30] Call Trace: [ 311.212114][ T30] [ 311.215124][ T30] __schedule+0x1895/0x4b30 [ 311.219712][ T30] ? __pfx___schedule+0x10/0x10 [ 311.284728][ T30] ? __pfx_lock_release+0x10/0x10 [ 311.289857][ T30] ? kthread_data+0x52/0xd0 [ 311.342231][ T30] ? wq_worker_sleeping+0x66/0x240 [ 311.347441][ T30] ? schedule+0x90/0x320 [ 311.351802][ T30] schedule+0x14b/0x320 [ 311.412264][ T30] schedule_timeout+0xb0/0x310 [ 311.417125][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 311.462427][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.468514][ T30] ? wait_for_completion+0x2fe/0x620 [ 311.524270][ T30] ? wait_for_completion+0x2fe/0x620 [ 311.529695][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.572393][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 311.597565][ T30] ? wait_for_completion+0x2fe/0x620 [ 311.616791][ T30] wait_for_completion+0x355/0x620 [ 311.622007][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 311.657808][ T30] ? __flush_work+0xe7/0xc50 [ 311.699897][ T30] __flush_work+0xa37/0xc50 [ 311.712088][ T30] ? __flush_work+0xe7/0xc50 [ 311.716761][ T30] ? __pfx___flush_work+0x10/0x10 [ 311.721830][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 311.801030][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.822342][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 311.827550][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.867037][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 311.891201][ T30] ? net_generic+0x1f/0x240 [ 311.909629][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 311.926747][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 311.947214][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 311.965540][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 311.971630][ T30] cleanup_net+0x75d/0xcc0 [ 311.996591][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 312.013804][ T30] ? process_scheduled_works+0x976/0x1850 [ 312.019635][ T30] process_scheduled_works+0xa63/0x1850 [ 312.044362][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.050451][ T30] ? assign_work+0x364/0x3d0 [ 312.074140][ T30] worker_thread+0x870/0xd30 [ 312.078849][ T30] ? __kthread_parkme+0x169/0x1d0 [ 312.102967][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.122091][ T30] kthread+0x2f0/0x390 [ 312.126236][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.131401][ T30] ? __pfx_kthread+0x10/0x10 [ 312.162236][ T30] ret_from_fork+0x4b/0x80 [ 312.166755][ T30] ? __pfx_kthread+0x10/0x10 [ 312.171393][ T30] ret_from_fork_asm+0x1a/0x30 [ 312.200851][ T30] [ 312.212207][ T30] INFO: task kworker/u8:3:52 blocked for more than 144 seconds. [ 312.219905][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 312.250055][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.275484][ T30] task:kworker/u8:3 state:D stack:23856 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 312.322216][ T30] Workqueue: events_unbound linkwatch_event [ 312.328212][ T30] Call Trace: [ 312.331523][ T30] [ 312.350157][ T30] __schedule+0x1895/0x4b30 [ 312.366397][ T30] ? __pfx___schedule+0x10/0x10 [ 312.371329][ T30] ? __pfx_lock_release+0x10/0x10 [ 312.395547][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 312.401097][ T30] ? kthread_data+0x52/0xd0 [ 312.439336][ T30] ? schedule+0x90/0x320 [ 312.447513][ T30] ? wq_worker_sleeping+0x66/0x240 [ 312.467060][ T30] ? schedule+0x90/0x320 [ 312.471376][ T30] schedule+0x14b/0x320 [ 312.486451][ T30] schedule_preempt_disabled+0x13/0x30 [ 312.491989][ T30] __mutex_lock+0x6a7/0xd70 [ 312.518113][ T30] ? __mutex_lock+0x52a/0xd70 [ 312.532600][ T30] ? linkwatch_event+0xe/0x60 [ 312.537386][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 312.559917][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 312.575689][ T30] ? process_scheduled_works+0x976/0x1850 [ 312.581499][ T30] linkwatch_event+0xe/0x60 [ 312.611580][ T30] process_scheduled_works+0xa63/0x1850 [ 312.630014][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.652192][ T30] ? assign_work+0x364/0x3d0 [ 312.656883][ T30] worker_thread+0x870/0xd30 [ 312.661538][ T30] ? __kthread_parkme+0x169/0x1d0 [ 312.697362][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.709107][ T30] kthread+0x2f0/0x390 [ 312.722086][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.727268][ T30] ? __pfx_kthread+0x10/0x10 [ 312.731894][ T30] ret_from_fork+0x4b/0x80 [ 312.779571][ T30] ? __pfx_kthread+0x10/0x10 [ 312.799102][ T30] ret_from_fork_asm+0x1a/0x30 [ 312.819721][ T30] [ 312.823867][ T30] INFO: task dhcpcd:4899 blocked for more than 145 seconds. [ 312.842134][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 312.849815][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.889807][ T30] task:dhcpcd state:D stack:19608 pid:4899 tgid:4899 ppid:4898 flags:0x00000002 [ 312.920019][ T30] Call Trace: [ 312.927570][ T30] [ 312.930575][ T30] __schedule+0x1895/0x4b30 [ 312.949230][ T30] ? __pfx___schedule+0x10/0x10 [ 312.964880][ T30] ? __pfx_lock_release+0x10/0x10 [ 312.969997][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 312.994945][ T30] ? schedule+0x90/0x320 [ 312.999282][ T30] schedule+0x14b/0x320 [ 313.020599][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.036714][ T30] __mutex_lock+0x6a7/0xd70 [ 313.041301][ T30] ? __mutex_lock+0x52a/0xd70 [ 313.061943][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 313.079280][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.091659][ T30] ? apparmor_capable+0x13b/0x1b0 [ 313.108376][ T30] ? bpf_lsm_capable+0x9/0x10 [ 313.121129][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 313.136791][ T30] ? get_user_ifreq+0x1bb/0x200 [ 313.141736][ T30] inet_ioctl+0x3d7/0x4f0 [ 313.162286][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 313.167308][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 313.186744][ T30] sock_do_ioctl+0x158/0x460 [ 313.191447][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 313.215119][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.220253][ T30] sock_ioctl+0x626/0x8e0 [ 313.241723][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 313.258378][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.279040][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.292263][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 313.297201][ T30] __se_sys_ioctl+0xf9/0x170 [ 313.301866][ T30] do_syscall_64+0xf3/0x230 [ 313.337197][ T30] ? clear_bhb_loop+0x35/0x90 [ 313.341973][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.366581][ T30] RIP: 0033:0x7f2977c1ed49 [ 313.371074][ T30] RSP: 002b:00007ffe58814c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.400205][ T30] RAX: ffffffffffffffda RBX: 00007f2977b506c0 RCX: 00007f2977c1ed49 [ 313.419956][ T30] RDX: 00007ffe58824e68 RSI: 0000000000008914 RDI: 0000000000000018 [ 313.446454][ T30] RBP: 00007ffe58835028 R08: 00007ffe58824e28 R09: 00007ffe58824dd8 [ 313.472146][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.480204][ T30] R13: 00007ffe58824e68 R14: 0000000000000028 R15: 0000000000008914 [ 313.510590][ T30] [ 313.522579][ T30] INFO: task kworker/1:4:5275 blocked for more than 145 seconds. [ 313.530361][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 313.568631][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.594834][ T30] task:kworker/1:4 state:D stack:20880 pid:5275 tgid:5275 ppid:2 flags:0x00004000 [ 313.618856][ T30] Workqueue: events switchdev_deferred_process_work [ 313.643992][ T30] Call Trace: [ 313.647350][ T30] [ 313.650320][ T30] __schedule+0x1895/0x4b30 [ 313.667106][ T30] ? try_to_wake_up+0x971/0x1480 [ 313.687153][ T30] ? schedule+0x90/0x320 [ 313.691586][ T30] ? __pfx___schedule+0x10/0x10 [ 313.709519][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.724643][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.762280][ T30] ? kick_pool+0x45c/0x620 [ 313.766800][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.792156][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 313.797462][ T30] ? schedule+0x90/0x320 [ 313.801855][ T30] schedule+0x14b/0x320 [ 313.831082][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.852202][ T30] __mutex_lock+0x6a7/0xd70 [ 313.856807][ T30] ? __mutex_lock+0x52a/0xd70 [ 313.861531][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 313.892116][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.897239][ T30] ? process_scheduled_works+0x976/0x1850 [ 313.922616][ T30] switchdev_deferred_process_work+0xe/0x20 [ 313.928598][ T30] process_scheduled_works+0xa63/0x1850 [ 313.956118][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.977995][ T30] ? assign_work+0x364/0x3d0 [ 313.992100][ T30] worker_thread+0x870/0xd30 [ 313.996795][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 314.021410][ T30] ? __kthread_parkme+0x169/0x1d0 [ 314.032097][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.052134][ T30] kthread+0x2f0/0x390 [ 314.056283][ T30] ? __pfx_worker_thread+0x10/0x10 [ 314.061446][ T30] ? __pfx_kthread+0x10/0x10 [ 314.087427][ T30] ret_from_fork+0x4b/0x80 [ 314.091938][ T30] ? __pfx_kthread+0x10/0x10 [ 314.120481][ T30] ret_from_fork_asm+0x1a/0x30 [ 314.125590][ T30] [ 314.136499][ T30] INFO: task syz-executor:6594 blocked for more than 146 seconds. [ 314.160212][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 314.180133][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.209079][ T30] task:syz-executor state:D stack:21440 pid:6594 tgid:6594 ppid:1 flags:0x20004004 [ 314.238817][ T30] Call Trace: [ 314.249613][ T30] [ 314.257431][ T30] __schedule+0x1895/0x4b30 [ 314.265453][ T30] ? __pfx___schedule+0x10/0x10 [ 314.270383][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.295078][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 314.300635][ T30] ? schedule+0x90/0x320 [ 314.314675][ T30] schedule+0x14b/0x320 [ 314.318910][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.330887][ T30] __mutex_lock+0x6a7/0xd70 [ 314.338271][ T30] ? __mutex_lock+0x52a/0xd70 [ 314.350291][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 314.357564][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.368834][ T30] ? __asan_memset+0x23/0x50 [ 314.375037][ T30] ? nla_strscpy+0x113/0x180 [ 314.379691][ T30] rtnl_newlink+0xab7/0x20a0 [ 314.392104][ T30] ? rtnl_newlink+0x491/0x20a0 [ 314.396939][ T30] ? rtnl_newlink+0x491/0x20a0 [ 314.401762][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.413617][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 314.418904][ T30] ? __mutex_lock+0x52a/0xd70 [ 314.431297][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.437927][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 314.450268][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 314.457039][ T30] ? __lock_acquire+0x1384/0x2050 [ 314.470432][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.477562][ T30] netlink_rcv_skb+0x1e3/0x430 [ 314.488543][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.496098][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.501483][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.512144][ T30] netlink_unicast+0x7f6/0x990 [ 314.516993][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 314.529498][ T30] ? __virt_addr_valid+0x183/0x530 [ 314.535053][ T30] ? __check_object_size+0x48e/0x900 [ 314.540403][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 314.552344][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.557710][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 314.570382][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.576024][ T30] __sock_sendmsg+0x221/0x270 [ 314.580767][ T30] __sys_sendto+0x39b/0x4f0 [ 314.593844][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 314.598948][ T30] ? __might_fault+0xaa/0x120 [ 314.610760][ T30] ? __might_fault+0xc6/0x120 [ 314.615848][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 314.621718][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 314.636701][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 314.647297][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 314.657599][ T30] __do_fast_syscall_32+0xb4/0x110 [ 314.669377][ T30] ? exc_page_fault+0x590/0x8c0 [ 314.679681][ T30] do_fast_syscall_32+0x34/0x80 [ 314.686664][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.699286][ T30] RIP: 0023:0xf7f94579 [ 314.704958][ T30] RSP: 002b:00000000f757f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 314.719844][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f757f864 [ 314.730781][ T30] RDX: 0000000000000000 RSI: 00000000f7f84568 RDI: 00000000f741bff4 [ 314.745444][ T30] RBP: 00000000f7f84568 R08: 0000000000000000 R09: 0000000000000000 [ 314.762195][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.779148][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.788792][ T30] [ 314.791926][ T30] INFO: task syz-executor:6605 blocked for more than 147 seconds. [ 314.807438][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 314.816724][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.835506][ T30] task:syz-executor state:D stack:21440 pid:6605 tgid:6605 ppid:1 flags:0x20000004 [ 314.850894][ T30] Call Trace: [ 314.859069][ T30] [ 314.865886][ T30] __schedule+0x1895/0x4b30 [ 314.871391][ T30] ? __pfx___schedule+0x10/0x10 [ 314.880448][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.890823][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 314.901454][ T30] ? schedule+0x90/0x320 [ 314.909866][ T30] schedule+0x14b/0x320 [ 314.918035][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.927528][ T30] __mutex_lock+0x6a7/0xd70 [ 314.937760][ T30] ? __mutex_lock+0x52a/0xd70 [ 314.946443][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 314.951651][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.961910][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 314.977010][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 314.986847][ T30] ? __lock_acquire+0x1384/0x2050 [ 314.991981][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.002224][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.007148][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.021248][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.027294][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.040244][ T30] netlink_unicast+0x7f6/0x990 [ 315.045594][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.050968][ T30] ? __virt_addr_valid+0x183/0x530 [ 315.067261][ T30] ? __check_object_size+0x48e/0x900 [ 315.077351][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.086291][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.091672][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.102007][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.107522][ T30] __sock_sendmsg+0x221/0x270 [ 315.119958][ T30] __sys_sendto+0x39b/0x4f0 [ 315.124962][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 315.130058][ T30] ? __might_fault+0xaa/0x120 [ 315.142108][ T30] ? __might_fault+0xc6/0x120 [ 315.146865][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 315.162839][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 315.169195][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 315.183965][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 315.189257][ T30] __do_fast_syscall_32+0xb4/0x110 [ 315.202015][ T30] ? exc_page_fault+0x590/0x8c0 [ 315.207236][ T30] do_fast_syscall_32+0x34/0x80 [ 315.219486][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.227379][ T30] RIP: 0023:0xf73ed579 [ 315.231505][ T30] RSP: 002b:00000000f753f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 315.247550][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f753f864 [ 315.257137][ T30] RDX: 0000000000000000 RSI: 00000000f7f44568 RDI: 00000000f73dbff4 [ 315.272565][ T30] RBP: 00000000f7f44568 R08: 0000000000000000 R09: 0000000000000000 [ 315.284303][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.297497][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.309471][ T30] [ 315.317708][ T30] INFO: task syz-executor:6606 blocked for more than 147 seconds. [ 315.328351][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 315.341025][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.353767][ T30] task:syz-executor state:D stack:21440 pid:6606 tgid:6606 ppid:1 flags:0x20004004 [ 315.370242][ T30] Call Trace: [ 315.376295][ T30] [ 315.379283][ T30] __schedule+0x1895/0x4b30 [ 315.390145][ T30] ? __pfx___schedule+0x10/0x10 [ 315.399069][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.409348][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 315.417776][ T30] ? schedule+0x90/0x320 [ 315.427148][ T30] schedule+0x14b/0x320 [ 315.431385][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.441796][ T30] __mutex_lock+0x6a7/0xd70 [ 315.451136][ T30] ? __mutex_lock+0x52a/0xd70 [ 315.462573][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 315.472428][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.477544][ T30] ? __asan_memset+0x23/0x50 [ 315.490642][ T30] ? nla_strscpy+0x113/0x180 [ 315.496115][ T30] rtnl_newlink+0xab7/0x20a0 [ 315.500771][ T30] ? rtnl_newlink+0x491/0x20a0 [ 315.512474][ T30] ? rtnl_newlink+0x491/0x20a0 [ 315.517333][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.530596][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 315.536881][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.541989][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.547495][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 315.561050][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 315.572635][ T30] ? __lock_acquire+0x1384/0x2050 [ 315.577745][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.591562][ T30] netlink_rcv_skb+0x1e3/0x430 [ 315.596762][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.611331][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.617075][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 315.631468][ T30] netlink_unicast+0x7f6/0x990 [ 315.636730][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.650586][ T30] ? __virt_addr_valid+0x183/0x530 [ 315.656171][ T30] ? __check_object_size+0x48e/0x900 [ 315.661533][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.672360][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.677722][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 315.692530][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.697892][ T30] __sock_sendmsg+0x221/0x270 [ 315.712562][ T30] __sys_sendto+0x39b/0x4f0 [ 315.717150][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 315.730683][ T30] ? __might_fault+0xaa/0x120 [ 315.737285][ T30] ? __might_fault+0xc6/0x120 [ 315.742026][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 315.755466][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 315.761794][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 315.772280][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 315.784838][ T30] __do_fast_syscall_32+0xb4/0x110 [ 315.790030][ T30] ? exc_page_fault+0x590/0x8c0 [ 315.806833][ T30] do_fast_syscall_32+0x34/0x80 [ 315.811769][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.822365][ T30] RIP: 0023:0xf7fe3579 [ 315.826490][ T30] RSP: 002b:00000000f75cf850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 315.842022][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f75cf864 [ 315.850140][ T30] RDX: 0000000000000000 RSI: 00000000f7fd4568 RDI: 00000000f746bff4 [ 315.867017][ T30] RBP: 00000000f7fd4568 R08: 0000000000000000 R09: 0000000000000000 [ 315.879993][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 315.895074][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.909468][ T30] [ 315.915402][ T30] INFO: task syz-executor:6609 blocked for more than 148 seconds. [ 315.928262][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 315.940170][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.957248][ T30] task:syz-executor state:D stack:21440 pid:6609 tgid:6609 ppid:1 flags:0x20004004 [ 315.970225][ T30] Call Trace: [ 315.978545][ T30] [ 315.986793][ T30] __schedule+0x1895/0x4b30 [ 315.991417][ T30] ? __pfx___schedule+0x10/0x10 [ 316.002409][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.007523][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 316.020637][ T30] ? schedule+0x90/0x320 [ 316.026485][ T30] schedule+0x14b/0x320 [ 316.030713][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.042145][ T30] __mutex_lock+0x6a7/0xd70 [ 316.046733][ T30] ? __mutex_lock+0x52a/0xd70 [ 316.051459][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 316.065120][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.070237][ T30] ? __asan_memset+0x23/0x50 [ 316.080226][ T30] ? nla_strscpy+0x113/0x180 [ 316.088730][ T30] rtnl_newlink+0xab7/0x20a0 [ 316.098430][ T30] ? rtnl_newlink+0x491/0x20a0 [ 316.109014][ T30] ? rtnl_newlink+0x491/0x20a0 [ 316.118944][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.126762][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.132399][ T30] ? __mutex_lock+0x52a/0xd70 [ 316.137159][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.151044][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 316.156439][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 316.161615][ T30] ? __lock_acquire+0x1384/0x2050 [ 316.172101][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.177662][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.191938][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.197987][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.211548][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.217136][ T30] netlink_unicast+0x7f6/0x990 [ 316.221975][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.236326][ T30] ? __virt_addr_valid+0x183/0x530 [ 316.241512][ T30] ? __check_object_size+0x48e/0x900 [ 316.251324][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.260052][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.269296][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.279866][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.290131][ T30] __sock_sendmsg+0x221/0x270 [ 316.298681][ T30] __sys_sendto+0x39b/0x4f0 [ 316.307907][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 316.317912][ T30] ? __might_fault+0xaa/0x120 [ 316.326435][ T30] ? __might_fault+0xc6/0x120 [ 316.331176][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 316.340950][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 316.352117][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 316.359128][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 316.382144][ T30] __do_fast_syscall_32+0xb4/0x110 [ 316.387337][ T30] ? exc_page_fault+0x590/0x8c0 [ 316.400429][ T30] do_fast_syscall_32+0x34/0x80 [ 316.407888][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.421685][ T30] RIP: 0023:0xf73dd579 [ 316.426208][ T30] RSP: 002b:00000000f752f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 316.442201][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f752f864 [ 316.450231][ T30] RDX: 0000000000000000 RSI: 00000000f7f34568 RDI: 00000000f73cbff4 [ 316.462078][ T30] RBP: 00000000f7f34568 R08: 0000000000000000 R09: 0000000000000000 [ 316.470108][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.484836][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.498949][ T30] [ 316.502332][ T30] INFO: task syz-executor:6610 blocked for more than 148 seconds. [ 316.511469][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 316.527292][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 316.538792][ T30] task:syz-executor state:D stack:21440 pid:6610 tgid:6610 ppid:1 flags:0x20004004 [ 316.552100][ T30] Call Trace: [ 316.555427][ T30] [ 316.558397][ T30] __schedule+0x1895/0x4b30 [ 316.571487][ T30] ? __pfx___schedule+0x10/0x10 [ 316.576722][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.581810][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 316.592095][ T30] ? schedule+0x90/0x320 [ 316.601392][ T30] schedule+0x14b/0x320 [ 316.608502][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.621213][ T30] __mutex_lock+0x6a7/0xd70 [ 316.628991][ T30] ? __mutex_lock+0x52a/0xd70 [ 316.638694][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 316.646221][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.651310][ T30] ? __asan_memset+0x23/0x50 [ 316.663806][ T30] ? nla_strscpy+0x113/0x180 [ 316.668467][ T30] rtnl_newlink+0xab7/0x20a0 [ 316.679421][ T30] ? rtnl_newlink+0x491/0x20a0 [ 316.686967][ T30] ? rtnl_newlink+0x491/0x20a0 [ 316.691806][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.704487][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 316.710600][ T30] ? __mutex_lock+0x52a/0xd70 [ 316.719386][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 316.728386][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 316.739366][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 316.752579][ T30] ? __lock_acquire+0x1384/0x2050 [ 316.757697][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.770294][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.775431][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.780957][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.792112][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.797398][ T30] netlink_unicast+0x7f6/0x990 [ 316.810448][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.816973][ T30] ? __virt_addr_valid+0x183/0x530 [ 316.832125][ T30] ? __check_object_size+0x48e/0x900 [ 316.837485][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.849253][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.854940][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 316.859936][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.872080][ T30] __sock_sendmsg+0x221/0x270 [ 316.876827][ T30] __sys_sendto+0x39b/0x4f0 [ 316.881375][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 316.893713][ T30] ? __might_fault+0xaa/0x120 [ 316.898458][ T30] ? __might_fault+0xc6/0x120 [ 316.915610][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 316.921502][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 316.934471][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 316.941142][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 316.952713][ T30] __do_fast_syscall_32+0xb4/0x110 [ 316.957881][ T30] ? exc_page_fault+0x590/0x8c0 [ 316.970865][ T30] do_fast_syscall_32+0x34/0x80 [ 316.975847][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.990944][ T30] RIP: 0023:0xf7f70579 [ 316.995380][ T30] RSP: 002b:00000000f755f850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 317.012109][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f755f864 [ 317.021261][ T30] RDX: 0000000000000000 RSI: 00000000f7f64568 RDI: 00000000f73fbff4 [ 317.036884][ T30] RBP: 00000000f7f64568 R08: 0000000000000000 R09: 0000000000000000 [ 317.048814][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.060697][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.078305][ T30] [ 317.081462][ T30] [ 317.081462][ T30] Showing all locks held in the system: [ 317.090946][ T30] 5 locks held by kworker/u8:1/12: [ 317.102388][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 317.123610][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 317.141081][ T30] #2: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 317.159279][ T30] #3: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 317.168809][ T30] #4: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 317.187759][ T30] 1 lock held by khungtaskd/30: [ 317.194313][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 317.213011][ T30] 3 locks held by kworker/u8:3/52: [ 317.218185][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 317.238848][ T30] #1: ffffc90000bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 317.251595][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 317.268118][ T30] 3 locks held by kworker/u8:6/1050: [ 317.274325][ T30] #0: ffff88802e1f8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 317.292080][ T30] #1: ffffc90003ec7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 317.313568][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 317.330891][ T30] 1 lock held by dhcpcd/4899: [ 317.338296][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 317.352105][ T30] 2 locks held by getty/4986: [ 317.357660][ T30] #0: ffff88802e9970a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 317.373585][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 317.392695][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399030][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.416161][ T30] 3 locks held by kworker/1:4/5275: [ 317.421427][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 317.441161][ T30] #1: ffffc90003f07d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 317.460928][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 317.471921][ T30] 3 locks held by kworker/1:6/5278: [ 317.484595][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 317.505705][ T30] #1: ffffc90003f37d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 317.520650][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 317.541234][ T30] 5 locks held by kworker/0:5/5279: [ 317.546967][ T30] 1 lock held by syz-executor/6594: [ 317.560361][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 317.571144][ T30] 1 lock held by syz-executor/6605: [ 317.583921][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 317.598462][ T30] 1 lock held by syz-executor/6606: [ 317.606441][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 317.622097][ T30] 1 lock held by syz-executor/6609: [ 317.627344][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 317.645558][ T30] 1 lock held by syz-executor/6610: [ 317.650809][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 317.665411][ T30] 2 locks held by syz-executor/6647: [ 317.670742][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.686012][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.701211][ T30] 2 locks held by syz-executor/6658: [ 317.711652][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.726253][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.746263][ T30] 2 locks held by syz-executor/6660: [ 317.751593][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.765216][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.780357][ T30] 2 locks held by syz-executor/6663: [ 317.792665][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.809838][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.821605][ T30] 2 locks held by syz-executor/6665: [ 317.832128][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.849625][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.861330][ T30] 2 locks held by syz-executor/6671: [ 317.872081][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.881598][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.899223][ T30] 2 locks held by syz-executor/6677: [ 317.906636][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.922406][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.941071][ T30] 2 locks held by syz-executor/6683: [ 317.950546][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 317.966441][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 317.980559][ T30] 2 locks held by syz-executor/6684: [ 317.990978][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 318.003280][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 318.018985][ T30] 2 locks held by syz-executor/6687: [ 318.029103][ T30] #0: ffffffff8fcc4bd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 318.046761][ T30] #1: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 318.059717][ T30] [ 318.067207][ T30] ============================================= [ 318.067207][ T30] [ 318.079757][ T30] NMI backtrace for cpu 1 [ 318.084125][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 318.094668][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.104760][ T30] Call Trace: [ 318.108066][ T30] [ 318.111026][ T30] dump_stack_lvl+0x241/0x360 [ 318.115746][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.120984][ T30] ? __pfx__printk+0x10/0x10 [ 318.125634][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 318.130617][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.136113][ T30] ? _printk+0xd5/0x120 [ 318.140317][ T30] ? __pfx__printk+0x10/0x10 [ 318.144953][ T30] ? __wake_up_klogd+0xcc/0x110 [ 318.149854][ T30] ? __pfx__printk+0x10/0x10 [ 318.154501][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 318.159570][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 318.165695][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 318.171735][ T30] watchdog+0xff4/0x1040 [ 318.176024][ T30] ? watchdog+0x1ea/0x1040 [ 318.180510][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.185240][ T30] kthread+0x2f0/0x390 [ 318.189345][ T30] ? __pfx_watchdog+0x10/0x10 [ 318.194067][ T30] ? __pfx_kthread+0x10/0x10 [ 318.198692][ T30] ret_from_fork+0x4b/0x80 [ 318.203171][ T30] ? __pfx_kthread+0x10/0x10 [ 318.207823][ T30] ret_from_fork_asm+0x1a/0x30 [ 318.212645][ T30] [ 318.216454][ T30] Sending NMI from CPU 1 to CPUs 0: [ 318.221719][ C0] NMI backtrace for cpu 0 [ 318.221735][ C0] CPU: 0 UID: 0 PID: 5279 Comm: kworker/0:5 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 318.221757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.221770][ C0] Workqueue: events nsim_dev_trap_report_work [ 318.221795][ C0] RIP: 0010:unwind_next_frame+0x178d/0x22d0 [ 318.221817][ C0] Code: 0f b6 04 28 84 c0 0f 85 81 0a 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 93 0a 00 00 48 0f bf 03 48 8b 34 24 48 01 c6 <49> 8d 55 40 4c 89 ef e8 37 0e 00 00 84 c0 0f 84 66 01 00 00 49 bc [ 318.221833][ C0] RSP: 0018:ffffc90000006a30 EFLAGS: 00000287 [ 318.221848][ C0] RAX: fffffffffffffff0 RBX: ffffffff91289326 RCX: 0000000000000000 [ 318.221863][ C0] RDX: ffffffff91289327 RSI: ffffc900000075f0 RDI: ffffc90000006b60 [ 318.221877][ C0] RBP: dffffc0000000000 R08: ffffc90000006b5f R09: 0000000000000000 [ 318.221891][ C0] R10: ffffc90000006b50 R11: fffff52000000d6c R12: ffffc90000008000 [ 318.221905][ C0] R13: ffffc90000006b00 R14: ffffffff89efdc58 R15: ffffc90000006b50 [ 318.221920][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 318.221935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.221949][ C0] CR2: 0000000020023000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 318.221965][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.221976][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.221988][ C0] Call Trace: [ 318.221994][ C0] [ 318.222002][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 318.222024][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.222062][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 318.222084][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.222113][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 318.222140][ C0] ? nmi_handle+0x14f/0x5a0 [ 318.222161][ C0] ? nmi_handle+0x2a/0x5a0 [ 318.222182][ C0] ? unwind_next_frame+0x178d/0x22d0 [ 318.222201][ C0] ? default_do_nmi+0x63/0x160 [ 318.222228][ C0] ? exc_nmi+0x123/0x1f0 [ 318.222252][ C0] ? end_repeat_nmi+0xf/0x53 [ 318.222272][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 318.222316][ C0] ? unwind_next_frame+0x178d/0x22d0 [ 318.222338][ C0] ? unwind_next_frame+0x178d/0x22d0 [ 318.222360][ C0] ? unwind_next_frame+0x178d/0x22d0 [ 318.222380][ C0] [ 318.222387][ C0] [ 318.222397][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 318.222427][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.222450][ C0] arch_stack_walk+0x11c/0x150 [ 318.222473][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 318.222502][ C0] stack_trace_save+0x118/0x1d0 [ 318.222524][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.222545][ C0] ? stack_trace_save+0x118/0x1d0 [ 318.222568][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.222592][ C0] kasan_save_track+0x3f/0x80 [ 318.222610][ C0] ? kasan_save_track+0x3f/0x80 [ 318.222627][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 318.222646][ C0] ? __kmalloc_node_track_caller_noprof+0x225/0x440 [ 318.222672][ C0] ? kmalloc_reserve+0x111/0x2a0 [ 318.222689][ C0] ? __alloc_skb+0x1f3/0x440 [ 318.222704][ C0] ? synproxy_send_client_synack+0x1ba/0xf30 [ 318.222728][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 318.222754][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 318.222779][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 318.222827][ C0] __kasan_kmalloc+0x98/0xb0 [ 318.222848][ C0] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 318.222874][ C0] ? __alloc_skb+0x1f3/0x440 [ 318.222891][ C0] ? __alloc_skb+0x1f3/0x440 [ 318.222907][ C0] kmalloc_reserve+0x111/0x2a0 [ 318.222926][ C0] __alloc_skb+0x1f3/0x440 [ 318.222945][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 318.222966][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 318.222994][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 318.223012][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 318.223040][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 318.223067][ C0] ? synproxy_pernet+0x45/0x270 [ 318.223094][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 318.223123][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 318.223151][ C0] ? nf_ip_checksum+0x13a/0x500 [ 318.223181][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 318.223210][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 318.223235][ C0] ? validate_chain+0x11e/0x5920 [ 318.223258][ C0] ? __pfx_validate_chain+0x10/0x10 [ 318.223283][ C0] nft_do_chain+0x4ad/0x1da0 [ 318.223323][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 318.223349][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 318.223387][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 318.223408][ C0] nft_do_chain_inet+0x418/0x6b0 [ 318.223435][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 318.223460][ C0] ? ipt_do_table+0x312/0x1860 [ 318.223495][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 318.223520][ C0] nf_hook_slow+0xc3/0x220 [ 318.223544][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 318.223566][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 318.223587][ C0] NF_HOOK+0x29e/0x450 [ 318.223607][ C0] ? NF_HOOK+0x9a/0x450 [ 318.223626][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 318.223647][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 318.223671][ C0] ? ip_rcv_finish+0x406/0x560 [ 318.223692][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 318.223712][ C0] NF_HOOK+0x3a4/0x450 [ 318.223732][ C0] ? NF_HOOK+0x9a/0x450 [ 318.223751][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 318.223769][ C0] ? ip_rcv_core+0x801/0xd10 [ 318.223790][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 318.223814][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 318.223834][ C0] __netif_receive_skb+0x2bf/0x650 [ 318.223858][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 318.223889][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 318.223911][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.223938][ C0] ? __pfx_lock_release+0x10/0x10 [ 318.223966][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 318.223997][ C0] process_backlog+0x662/0x15b0 [ 318.224022][ C0] ? process_backlog+0x33b/0x15b0 [ 318.224050][ C0] ? __pfx_process_backlog+0x10/0x10 [ 318.224073][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 318.224101][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 318.224130][ C0] __napi_poll+0xcb/0x490 [ 318.224153][ C0] net_rx_action+0x89b/0x1240 [ 318.224187][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 318.224211][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 318.224254][ C0] handle_softirqs+0x2c5/0x980 [ 318.224281][ C0] ? do_softirq+0x11b/0x1e0 [ 318.224310][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 318.224339][ C0] do_softirq+0x11b/0x1e0 [ 318.224362][ C0] [ 318.224368][ C0] [ 318.224374][ C0] ? __pfx_do_softirq+0x10/0x10 [ 318.224398][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 318.224426][ C0] ? rcu_is_watching+0x15/0xb0 [ 318.224448][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 318.224472][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 318.224493][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 318.224518][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.224543][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 318.224566][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 318.224595][ C0] ? process_scheduled_works+0x976/0x1850 [ 318.224621][ C0] process_scheduled_works+0xa63/0x1850 [ 318.224659][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.224689][ C0] ? assign_work+0x364/0x3d0 [ 318.224715][ C0] worker_thread+0x870/0xd30 [ 318.224744][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.224772][ C0] ? __kthread_parkme+0x169/0x1d0 [ 318.224800][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.224825][ C0] kthread+0x2f0/0x390 [ 318.224842][ C0] ? __pfx_worker_thread+0x10/0x10 [ 318.224867][ C0] ? __pfx_kthread+0x10/0x10 [ 318.224885][ C0] ret_from_fork+0x4b/0x80 [ 318.224911][ C0] ? __pfx_kthread+0x10/0x10 [ 318.224928][ C0] ret_from_fork_asm+0x1a/0x30 [ 318.224961][ C0] [ 319.033128][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 319.040045][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 319.050601][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.060689][ T30] Call Trace: [ 319.063999][ T30] [ 319.066956][ T30] dump_stack_lvl+0x241/0x360 [ 319.071671][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.076929][ T30] ? __pfx__printk+0x10/0x10 [ 319.081566][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.087607][ T30] ? vscnprintf+0x5d/0x90 [ 319.091976][ T30] panic+0x349/0x880 [ 319.095911][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 319.102105][ T30] ? __pfx_panic+0x10/0x10 [ 319.106559][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 319.111970][ T30] ? __irq_work_queue_local+0x137/0x410 [ 319.117561][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 319.122980][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 319.129186][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 319.135398][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 319.141606][ T30] watchdog+0x1033/0x1040 [ 319.145987][ T30] ? watchdog+0x1ea/0x1040 [ 319.150456][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.155184][ T30] kthread+0x2f0/0x390 [ 319.159283][ T30] ? __pfx_watchdog+0x10/0x10 [ 319.164005][ T30] ? __pfx_kthread+0x10/0x10 [ 319.168639][ T30] ret_from_fork+0x4b/0x80 [ 319.173174][ T30] ? __pfx_kthread+0x10/0x10 [ 319.177801][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.182621][ T30] [ 319.185993][ T30] Kernel Offset: disabled [ 319.190366][ T30] Rebooting in 86400 seconds..