last executing test programs: 30.519237243s ago: executing program 4 (id=4970): syz_usb_connect(0x6, 0xfffffffffffffd1f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x91, 0x7f, 0x14, 0x10, 0xe41, 0x5050, 0x9bf5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x0, 0x0, 0x88, 0xb, 0xf0, 0x0, [@generic={0x0, 0x3, "9668da4c8f3e56da43b49c39c194dc411cb01586756dfc478650e2a1f41c7a56a6e751bb5ec8401525dc37603fa85d1ae04b049a56473e4ab85b9dcdf3e2ae1c8c01e69de9f804b5a2971ab8f9715b336e6e3da29e5a16dac21714cae559b51fefebdc4bac50ceeec2cbd2ea09276dc06a0757aeff9838806af18aad45c7bc987b6a3aa540193f49895a629f277ebdbb28481d20997f7e49c70532a3a92855e29341068dc807bd"}, @cdc_ecm={{}, {0x0, 0x24, 0x0, 0x8}, {0x0, 0x24, 0xf, 0x1, 0x9, 0x3, 0x6, 0x5}, [@country_functional={0x0, 0x24, 0x7, 0x22, 0xfff9}, @country_functional={0x0, 0x24, 0x7, 0xe, 0xf, [0x7, 0x7f62, 0x4, 0x5, 0x200, 0x4]}, @acm={0x0, 0x24, 0x2, 0x8}, @mdlm_detail={0x0, 0x24, 0x13, 0x1e, "95c5f9b3d3b5d3b014518a1ba4964a6a2dce56d1a2930e864984ebf8b55d75c7fb4c2f9f5e31ffe0700db9"}]}]}}]}}]}}, 0x0) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) 19.207988317s ago: executing program 0 (id=5010): syz_io_uring_complete(0x0) socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/148}, 0x20) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="6c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000cffd03000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001"], 0x344}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xe, 0x6, 0xb01, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000003c0)=@add_del={0x2, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x30, 0x49cc2}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 18.109152815s ago: executing program 0 (id=5012): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x3}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 17.86958208s ago: executing program 0 (id=5013): syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f0000491000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) close(0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) 16.642427193s ago: executing program 0 (id=5019): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x6, 0x7fffffff, 0x2, 0x5, 0xce44, 0x6, 0x181, 0x7, 0x0, 0x1, 0x7f, 0x3, 0x5, 0x5, 0xfffffffffffffffc, 0xc], 0x6000, 0x40000}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000300)={@host, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x10021) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x9, 0xfffff010}, {0x30, 0x0, 0x4}, {0x6}]}, 0x10) r6 = fcntl$dupfd(r4, 0x0, r5) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8901, 0x0, 0x1}}, 0x50) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000940)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x1, 0x2, 0x0, 0x7, 0x9, 0xa}, {0x0, 0xf95, 0x401, 0x9, 0x9, 0x168e1899}], ['\x00', '\x00', '\x00']}) syz_fuse_handle_req(r2, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f000000e400)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x43, 0x4}, 0xe) recvmmsg(r1, &(0x7f00000007c0), 0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008884) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) 15.229700846s ago: executing program 1 (id=5024): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) syz_io_uring_setup(0x5e9f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14.414242584s ago: executing program 4 (id=4971): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001400010000000000000000000a000000", @ANYBLOB], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x0) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)={0x54, r6, 0x80d, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x10}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000004d40)={&(0x7f0000004c40), 0xc, &(0x7f0000004d00)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000004b40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x5b8, 0x2, 0xbcb, 0x100000001, 0xfffffffffffffffa, 0x2, 0x9, 0x4, 0xeef, 0x8]}, {0x2, 0x1, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000280)=""/1, 0x1}, {0x0}], 0x0}, {0x3, 0x1, 0x0, &(0x7f0000004600)=[{&(0x7f0000002640)=""/121, 0x79}, {&(0x7f00000026c0)=""/145, 0x91}, {&(0x7f00000045c0)}], 0x0}, {0x0, 0x1, 0x0, 0x0, 0x0}, {0x4, 0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000003100)=""/238, 0xee}, {0x0}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/140, 0x8c}], 0x0}], 0x5) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)="bc6a5118b7b3042e11c61df4cd72d35d463530aecb16d7ac941045b9f63e7cb07bf33c692f257c840b8f52a8f9602d28d068eac3279d151bd00e79f16eaaf51a10c8c365ec10078dc78b4a8732c53d7b6c5ae5ba930dccb499b8c91abd5ae7f868b5232841c59f1bc254f1abcb071ed707d1a645effb3161705ce0749baf041cbf50c4a46809cbd7700b898f71c6cdecf4d415c7c775ff1a00575c9616db53ba", 0xa0, r7}, 0x68) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x1c) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r9, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r8, &(0x7f0000000080)="03320500", 0x4}]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 13.815725679s ago: executing program 1 (id=5027): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) (async) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x200000007f, &(0x7f0000000300)=0xa) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="3b0000000000efff02010040"]) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe15}, @NL80211_ATTR_PMK={0x14, 0xfe, "57252df4462a991cc912169c8bae5c3f"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x20000840) 13.530103831s ago: executing program 1 (id=5029): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) (async) getpid() (async) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_emit_ethernet(0x239, &(0x7f00000020c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x203, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x2, 0x1, "00000000000000000800ee00"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f2bde9fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61e"}, {0x0, 0x8, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0xf, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c69"}, {0x0, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65e81ed"}]}}}}}}, 0x0) (async) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_FLAGS(r2, 0xff01, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="000000000000000024001280110001006272696467655f736c61767b000000000c0005800500190001000000"], 0x44}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'macsec0\x00', &(0x7f0000000240)=@ethtool_dump={0x3f, 0x4, 0xffff, 0x6f, "881ba7c8f16b2dd2230e64feeaa4423485924051d0f3f440d64bf23a1821f891285e864fd01bf27c4446e719ee0011370e06a10cc4b57b2677635bb08802a5afae98c7cf0ffb3ba5d0f0231b07dcf2ec7fe06ec164eb24125bb4fb8d2f7524ed3da48683464d829b12b4d9efee0f66"}}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x10) r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x26141, 0x0) ioctl$SNDCTL_DSP_SPEED(r9, 0xc0045002, &(0x7f0000000040)=0xbb80) 13.212292064s ago: executing program 0 (id=5030): r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0xdc05, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) 13.212087606s ago: executing program 1 (id=5031): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405668, &(0x7f0000000080)={0x0, 0x0, 0x1, "bce22b0003040000df00", 0x3631564e}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500030000000b178c177a902bf405f5979be673017b6bd2a2fab50922ed518c234438c7b850acb87b7106e9412a7460daed1fa1bcbf728cbd65d6ee1b5cd43848430264da43c28b90859135b92d5e3692b273670af689cf7f629e3a01c61e5ade961f8350e315211d117a2d0eb78f679b89b19328f75ee76ec8f5af055504fea1a34bd7425015aa2ea0c2990935574add35ffbdd053991ed3bb9ca73acb520af1d0d4601807de31c3662d133721aa6e53cfa71169fcf44775a34eeb50cdd7d86856eed18a6cfe13aa1d1346b051564bc2f7b96e9d16cb02563adcbaa3d5b80fd3e8b7a2f9"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r1, @ANYBLOB="0508000300", @ANYRES32=r4, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000006400000004060000000000000602000025030000002d1a0000000000000000000000000000000000000000000000000000000000080026006c09000008000c006400000008000d000000000035010f008325400000ffffffffffff000000000802110000010000000000000000080211000001000000008408041000fffffffffffffcffffff19000008021100000000000000000000080211000001ee00000006004008021100000000000000ffffffffffff00000008021100000006000000000000080211000000000000440000000802110000010000000000004008021100000000000000080211000000000040ffffffffffff0000000008021100000100000008021100000000000000170040080211000001001000000802110000000a00000802110000000300000000000008021100000000000000190000080211000000050000002500000802110000000500000000000008021100000100000000170000"], 0x1c4}}, 0x0) 12.810352787s ago: executing program 0 (id=5032): syz_io_uring_complete(0x0) socket$inet_udp(0x2, 0x2, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/148}, 0x20) r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f00000003c0)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="44030000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000200000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=0x0, @ANYBLOB="6c01028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000cffd03000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="380001"], 0x344}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xe, 0x6, 0xb01, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x40000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000003c0)=@add_del={0x2, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x30, 0x49cc2}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 12.794248208s ago: executing program 4 (id=5033): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r2, 0x0, 0x1, 0x0, 0x9, 0x276664, 0x4b92b}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x58, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x3c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xbd06}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x99}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x33}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x6}]}}, @CTA_NAT_DST={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c4}, 0x4000000) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) unshare(0x8040480) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x213d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f000001d600)=""/102381, 0xec29, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0x80044100, &(0x7f0000000280)={0x0, [[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x4}, {0x0, 0x5}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x0, 0xfffffffe}, {0x0, 0x80}]}) finit_module(r8, &(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x1) 12.65606496s ago: executing program 1 (id=5034): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) syz_io_uring_setup(0x5e9f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.645030018s ago: executing program 4 (id=5036): openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r1, &(0x7f0000000e80)={0x50}, 0x1001) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES64]) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r5, @ANYBLOB="05", @ANYRES16=r5], 0x0) 11.491111939s ago: executing program 1 (id=5037): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000001000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000200)={0x2}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r7, &(0x7f0000004640)=[{&(0x7f0000002000)=""/223, 0xdf}, {0x0}], 0x2, 0xffffff8f, 0xefb) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004e4aa92082051600578e01020301090236000200000000090400f50003ed0200090503000000000000090400"], 0x0) 9.516175707s ago: executing program 4 (id=5040): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x3, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x1}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) (fail_nth: 8) 9.303500437s ago: executing program 4 (id=5041): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) pselect6(0x40, &(0x7f0000000500)={0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000072000107000000000000000007000034", @ANYRES32=0x0, @ANYBLOB="060001"], 0x20}}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0) pwritev2(r3, &(0x7f0000004bc0)=[{&(0x7f0000003780)="7455bb6b5aa35aa5a0b89f086ba62312aa074cba2e9a38dbc258db70d14df08d1463ee2ff2042d704e6cb96063ec5a7bdddd2143271fbd407ca27919ef35", 0x3e}, {&(0x7f00000037c0)="a0e61528d3062275aac27ecc2ba49f3839eb2aacc96b7bff462ae8c02b3038b31f02cc77a9227d225cb97d445ff733ecfb792ab0a8be330f43546d91f1632313a0dea02f66ba7ed51a905459ed0c6fa31cc34ac27935b4b63a920cdf2daea234f4737b64604be40263f2b7e48dbcd59a8183d984a2a547150a1a523bd6e24d16443a1ab722e16e61ffa863a5a690a3c315c256736ab22e10fa4197e92c8e8e8ba1e4a4f3cc68df9ded4a6e7442cfe3dd51a12b8df293faf697ec5024d98b8209fe81924abc00daeb173dd9d11b0e191992c63e4fd2b7e6a6ae8b561f3f5c407906746f237632365648549111759955ea24314cee64e19660b0", 0xf9}, {&(0x7f00000038c0)="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", 0xeca}], 0x3, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) 6.991287198s ago: executing program 3 (id=5047): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_io_uring_setup(0x6905, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x5753, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000010001fff000000f00000000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000480012800b0001006272696467650000380002800800050001000000080004000100000005001800000000000c001f000000000000000000060006000700000008001d000100000008000a0001"], 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3fffe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055010100000000009500000000000000bf98000000000000c6080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x58}, 0x48) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[@ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 5.314080289s ago: executing program 2 (id=5048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000]}}) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0xa, 0x300) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f000076b000/0x2000)=nil, 0x2000}}) write$UHID_CREATE2(r5, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$UFFDIO_COPY(r4, 0xc020aa07, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f000092a000/0x1000)=nil, 0x4000, 0x0, 0x6040000}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 4.88327673s ago: executing program 2 (id=5049): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x4d}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1]) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x32, 0xfd, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0xfc, 0x1f}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0xfd, 0x80e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r9, 0xc01064b3, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r10}) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000040)={0xed70, 0x5, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r12, 0xc01064b3, &(0x7f00000002c0)={r13}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r11, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r11, 0xc01064b3, &(0x7f00000002c0)={r14}) r15 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r15, 0xc02064b2, &(0x7f0000000040)={0x32, 0x4, 0x1f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r15, 0xc01064b3, &(0x7f0000000080)={r16}) 4.359762648s ago: executing program 2 (id=5050): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x3, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x1}, 0x8000}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) (fail_nth: 9) 3.805179235s ago: executing program 2 (id=5051): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5a3f020000000000500012800c0001006d6163766c616e00400002800a000400bbbbbbbbbbbb0000080001000200000008000300010000000a00040000"], 0x78}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) syz_clone3(&(0x7f0000000c40)={0x20000080, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200), {0x4}, &(0x7f0000000a40)=""/201, 0xc9, &(0x7f0000000b40)=""/175, &(0x7f0000000c00)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000cc0)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000001900)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = epoll_create(0xcd) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000040)={0x10000010}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000080)={0xa0, 0x0, r3, {{0x4, 0x2, 0x0, 0x2, 0x4292, 0xc, {0x1, 0xffffffffffffffff, 0x62, 0x4c, 0x9, 0xffffffffffff4372, 0x3, 0x6, 0x5, 0x6000, 0x41e, r4, r5, 0x1, 0x21a5}}, {0x0, 0xefd26ca1dd724ec9}}}, 0xa0) statx(0xffffffffffffff9c, &(0x7f0000003740)='./file0\x00', 0x400, 0x10, &(0x7f0000003780)) creat(&(0x7f0000000300)='./file0\x00', 0x17c) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000340)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x29632}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4080, 0x0) syz_fuse_handle_req(r7, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r9, &(0x7f0000012400)={0x2020}, 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000003a80)={0x2020}, 0x2020) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r10, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 3.762856683s ago: executing program 3 (id=5052): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)={0x0, 0x6, [@dev, @broadcast, @dev, @link_local, @random="68c1d3668c34", @empty]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380)={[0x20000000]}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xe}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8a}}]}]}, 0x38}}, 0x40010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4a003300800000000802110000010802110000005050d050505000000000000000000000ffff52e500082c1f000000"], 0x68}}, 0x0) 3.381305049s ago: executing program 3 (id=5053): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.340819388s ago: executing program 3 (id=5054): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xd8}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f00000017c0)=""/229, 0xe5}], 0x2, 0x341, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xfffff000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) lsm_list_modules(&(0x7f0000000000), &(0x7f0000000040), 0x0) 2.887895621s ago: executing program 3 (id=5055): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x0, 0x80008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf0000000f0a00000000000004000000400000000500000000000000ff03000000000000000000000000000000000000000000000000000000e60000070000000500000000000000000000003c1500"/159]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000000080101000000000000000000000001050003002f000000060002401600000014000480080001400000000008000240000000000900010073797a3000000000"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x0, r9}) r10 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000080)={0x1f67fffe, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x2, r9, 0xb}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r9, 0xb}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010059", @ANYRES32=r6, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x80000008) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0) 1.742973632s ago: executing program 3 (id=5056): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x408, 0x3, 0xab, 0x3}, {0x5, 0x2, 0x24, 0x8}, {0x1, 0xc, 0x5, 0xfff}, {0x1, 0x7, 0x6, 0x401}]}) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 369.307772ms ago: executing program 2 (id=5058): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x0) syz_io_uring_setup(0x5e9f, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000300), &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 2 (id=5059): socket(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="09495e2db9a79d751d44e31fe75c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="3e003300d0000000ffffffffffff08021100000050505050505000000f01000001002d1a00001a01000000000000000000000004000000000007000000000000"], 0x5c}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="03c8009e2c1179085288b0f0d63e565c769b69c646f586c2982aeb9a121caf631af76fb2e21a0e724dffffff7f000000002d775e727c52700ce02bac80463af120931aaf74c3709608f8e5311d64bd4baf916390eb0b71f505b124db60dbc96c307d26d456bc4ba0f757ee7c3ec47683756c8878710965d1db89c5de35d432367f8c1d0a4de2ad47fa23e7a09bcd57e2ebf5110dcc7d88a8aff5cae2a0d30999fdbc"], 0xa2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x0]}}, {{0x1c, 0x1, {0x2}}, {0x4}}]}]}, 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000e7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006ce11bc3008b071000900"/125], 0x310) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000100)={0x0, {0x0, 0x0, 0x0, 0x3}}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x3) r9 = dup(r8) write$uinput_user_dev(r9, &(0x7f0000000c80)={'syz0\x00', {0x10}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x5c], [0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0xfffffff9]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) io_setup(0xff, &(0x7f0000000380)) kernel console output (not intermixed with test programs): batadv0 [ 1529.540878][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1529.570028][T27412] veth0_vlan: entered promiscuous mode [ 1529.631686][T27412] veth1_vlan: entered promiscuous mode [ 1529.736200][T27412] veth0_macvtap: entered promiscuous mode [ 1529.751568][T27412] veth1_macvtap: entered promiscuous mode [ 1529.763094][ T9] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1529.792571][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.830993][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1529.834253][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.867307][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.875091][ T9] usb 5-1: config 0 has no interface number 0 [ 1529.883478][T15820] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1529.895035][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.916055][ T9] usb 5-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.917666][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1529.953936][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1529.968579][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.000929][ T9] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1530.010064][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.021034][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1530.054838][ T9] usb 5-1: config 0 descriptor?? [ 1530.076649][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1530.077982][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.094956][T15820] usb 4-1: Using ep0 maxpacket: 16 [ 1530.127626][T15820] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1530.149367][T15820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1530.169011][T27412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.200391][T15820] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1530.217068][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.239313][T15820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.248266][T15820] usb 4-1: Product: syz [ 1530.252941][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.270964][T15820] usb 4-1: Manufacturer: syz [ 1530.286042][T15820] usb 4-1: SerialNumber: syz [ 1530.290860][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.309483][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.321703][T15820] usb 4-1: config 0 descriptor?? [ 1530.356781][T15820] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1530.380254][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.397968][T15820] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1530.413928][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.429626][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.461314][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.496439][T27412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1530.530264][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1530.569243][T27412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.629346][ T9] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 1530.728342][T27412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.756212][T27412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.765233][T27412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.818645][T27412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.946847][T15820] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1530.968377][T15820] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1531.006517][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4783'. [ 1531.345288][T16803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.389442][T16803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.503515][T27412] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 1531.543361][T27412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1531.616135][ T2494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.632451][T15820] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1531.643886][ T2494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.668264][T15820] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1531.695977][T15820] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1532.141590][T27623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.195890][T27623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.333528][T15820] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1532.379443][T15820] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1532.433904][T15820] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1532.476537][T15820] usb 4-1: USB disconnect, device number 79 [ 1532.478306][ T5622] usb 5-1: USB disconnect, device number 94 [ 1532.531437][T27661] program syz.2.4785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1532.664619][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1532.664640][ T29] audit: type=1326 audit(1725672451.451:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.0.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1532.698098][T27667] team_slave_0: entered promiscuous mode [ 1532.703892][T27667] team_slave_1: entered promiscuous mode [ 1532.793155][ T29] audit: type=1326 audit(1725672451.451:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.0.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1532.858300][ T29] audit: type=1326 audit(1725672451.451:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.0.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1532.954323][ T29] audit: type=1326 audit(1725672451.451:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.0.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1533.019300][ T29] audit: type=1326 audit(1725672451.451:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27649 comm="syz.0.4738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1533.331069][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1533.372308][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1533.422541][T27687] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4790'. [ 1533.556194][ T9] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 1533.584052][ T9] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1533.704795][ T9] usb 5-1: config 0 has no interface number 0 [ 1533.730107][ T9] usb 5-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 1533.746010][ T9] usb 5-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 1533.807697][ T9] usb 5-1: config 0 interface 49 has no altsetting 0 [ 1533.847970][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1533.881068][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.927137][ T9] usb 5-1: config 0 descriptor?? [ 1537.763154][T24339] Bluetooth: hci0: command 0x0406 tx timeout [ 1537.769568][T27741] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1538.582282][ T9] usb 5-1: string descriptor 0 read error: -71 [ 1538.627064][ T9] ath6kl: Failed to submit usb control message: -71 [ 1538.635768][T27741] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1538.656148][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 1538.675674][T27741] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1538.682131][ T9] ath6kl: Unable to send get target info: -71 [ 1538.683219][T27741] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1538.706878][T27741] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1538.717813][ T9] ath6kl: Failed to init ath6kl core: -71 [ 1538.746284][ T9] ath6kl_usb 5-1:0.49: probe with driver ath6kl_usb failed with error -71 [ 1538.763188][T27741] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1538.771729][T27741] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1538.784645][ T9] usb 5-1: USB disconnect, device number 95 [ 1538.833706][T27741] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1538.863995][T27741] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1538.871431][T27741] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1538.884671][T27741] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1539.182653][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.223195][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.258784][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.274897][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.285394][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.295470][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.305498][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.336529][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.401545][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.531044][ T5244] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1539.556485][T27784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1539.731965][ T5244] usb 5-1: device descriptor read/64, error -71 [ 1539.840875][T24339] Bluetooth: hci0: command 0x0406 tx timeout [ 1540.030808][ T5244] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1540.250890][ T5244] usb 5-1: device descriptor read/64, error -71 [ 1540.387842][ T5244] usb usb5-port1: attempt power cycle [ 1540.450907][ T5622] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1540.680868][ T5622] usb 3-1: Using ep0 maxpacket: 16 [ 1540.692967][ T5622] usb 3-1: config index 0 descriptor too short (expected 42, got 18) [ 1540.702609][ T5622] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 219, using maximum allowed: 30 [ 1540.738334][T24339] Bluetooth: hci3: command 0x0c1a tx timeout [ 1540.741010][ T5622] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 219 [ 1540.800886][T24339] Bluetooth: hci2: command 0x0c1a tx timeout [ 1540.837954][ T5622] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1540.872620][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1540.882659][ T5244] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1540.882759][T24339] Bluetooth: hci1: command 0x0c1a tx timeout [ 1540.928444][ T5622] usb 3-1: Product: syz [ 1540.940176][ T5622] usb 3-1: SerialNumber: syz [ 1540.952294][ T5244] usb 5-1: device descriptor read/8, error -71 [ 1540.985566][ T5622] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1541.006982][ T5622] r8152-cfgselector 3-1: config 0 descriptor?? [ 1541.027652][ T5622] hub 3-1:0.0: bad descriptor, ignoring hub [ 1541.043781][ T5622] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1541.240908][ T5244] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1541.292421][ T5244] usb 5-1: device descriptor read/8, error -71 [ 1541.393671][ T5622] r8152-cfgselector 3-1: USB disconnect, device number 100 [ 1541.412312][ T5244] usb usb5-port1: unable to enumerate USB device [ 1541.481980][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1541.670847][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1541.677925][T27842] netlink: 'syz.0.4829': attribute type 10 has an invalid length. [ 1541.687803][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1541.697089][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.697143][T27842] macvlan0: entered promiscuous mode [ 1541.715807][T27842] macvlan0: entered allmulticast mode [ 1541.718172][ T9] usb 2-1: config 0 descriptor?? [ 1541.733313][T27842] veth1_vlan: entered allmulticast mode [ 1541.758754][T27842] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1541.825057][ T5236] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1542.030895][ T5236] usb 4-1: Using ep0 maxpacket: 32 [ 1542.038327][ T5236] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1542.048162][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.059087][ T5236] usb 4-1: config 0 descriptor?? [ 1542.068627][ T5236] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1542.271364][ T5622] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1542.271502][ T5236] gspca_vc032x: reg_r err -32 [ 1542.307849][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.317993][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.338264][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.350936][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.356322][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.374734][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1542.378649][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.402175][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.405239][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1542.411904][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.434924][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.440450][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.449746][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.465576][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.469227][ T9] usb 2-1: USB disconnect, device number 123 [ 1542.471740][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.483281][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.500942][ T5622] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1542.503365][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.515365][ T5622] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1542.515437][ T5622] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1542.515466][ T5622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1542.523741][ T5622] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1542.548886][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.560308][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.582682][ T5236] gspca_vc032x: I2c Bus Busy Wait 00 [ 1542.588222][ T5236] gspca_vc032x: Unknown sensor... [ 1542.594145][ T5236] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1542.615284][ T5236] usb 4-1: USB disconnect, device number 80 [ 1542.678532][T27861] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1542.694140][T27860] IPVS: stopping master sync thread 27861 ... [ 1542.801557][T24339] Bluetooth: hci3: command 0x0c1a tx timeout [ 1542.881570][ T9946] Bluetooth: hci2: command 0x0c1a tx timeout [ 1542.961332][ T9946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1543.008613][T27850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.052573][T27850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.125857][T27869] x_tables: duplicate underflow at hook 2 [ 1543.301465][ T5622] gspca_sn9c2028: read1 error -110 [ 1543.334914][ T5622] gspca_sn9c2028: read1 error -32 [ 1543.366131][ T5622] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -32 [ 1543.528480][T16803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.806081][T16803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.044534][T16803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.153909][T27887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.195240][T27887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.249525][T16803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.451077][T15820] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1544.509170][T24339] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1544.525698][T24339] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1544.535551][T24339] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1544.549154][T24339] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1544.558426][T24339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1544.567750][T24339] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1544.663183][T15820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.694426][T15820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.707368][T15820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1544.711608][T16803] bridge_slave_1: left allmulticast mode [ 1544.722781][T15820] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1544.736000][T15820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.747235][T16803] bridge_slave_1: left promiscuous mode [ 1544.755759][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.764932][T15820] usb 2-1: config 0 descriptor?? [ 1544.786340][T16803] bridge_slave_0: left allmulticast mode [ 1544.810347][T16803] bridge_slave_0: left promiscuous mode [ 1544.820958][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.961471][T24339] Bluetooth: hci2: command 0x0c1a tx timeout [ 1545.041757][T24339] Bluetooth: hci1: command 0x0c1a tx timeout [ 1545.221449][ T29] audit: type=1326 audit(1725672464.001:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.262740][T27889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1545.281406][ T29] audit: type=1326 audit(1725672464.001:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.303960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1545.314328][T27889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1545.340344][ T29] audit: type=1326 audit(1725672464.031:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.369609][ T29] audit: type=1326 audit(1725672464.031:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.421603][ T29] audit: type=1326 audit(1725672464.031:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.498732][ T29] audit: type=1326 audit(1725672464.031:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.544745][ T29] audit: type=1326 audit(1725672464.031:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.613054][ T29] audit: type=1326 audit(1725672464.041:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.655295][ T29] audit: type=1326 audit(1725672464.111:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1545.741498][ T29] audit: type=1326 audit(1725672464.111:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27899 comm="syz.0.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e9037cef9 code=0x7ffc0000 [ 1546.401760][T16803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1546.420198][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.434500][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.466526][T16803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1546.485034][T16803] bond0 (unregistering): Released all slaves [ 1546.611199][T15820] usbhid 2-1:0.0: can't add hid device: -71 [ 1546.624550][T15820] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1546.653309][T24339] Bluetooth: hci3: command tx timeout [ 1546.671868][T15820] usb 2-1: USB disconnect, device number 124 [ 1546.772444][T27920] loop9: detected capacity change from 0 to 7 [ 1546.791961][T27920] Dev loop9: unable to read RDB block 7 [ 1546.797618][T27920] loop9: unable to read partition table [ 1546.822473][T27920] loop9: partition table beyond EOD, truncated [ 1546.839609][T27920] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1547.091013][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1547.323037][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1547.361051][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1547.426841][T16803] hsr_slave_0: left promiscuous mode [ 1547.429871][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1547.453806][T16803] hsr_slave_1: left promiscuous mode [ 1547.469946][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1547.500498][ T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1547.510123][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1547.520138][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.528763][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1547.547124][ T9] usb 5-1: Product: syz [ 1547.560868][ T9] usb 5-1: Manufacturer: syz [ 1547.566748][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1547.574341][ T9] usb 5-1: SerialNumber: syz [ 1547.595255][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1547.598811][ T9] usb 5-1: config 0 descriptor?? [ 1547.642828][ T9] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1547.660810][ T9] kvaser_usb 5-1:0.0: Failed to initialize card, error -90 [ 1547.668099][ T9] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1547.684673][T16803] veth1_macvtap: left promiscuous mode [ 1547.710943][T16803] veth0_macvtap: left promiscuous mode [ 1547.716729][T16803] veth1_vlan: left promiscuous mode [ 1547.759431][T16803] veth0_vlan: left promiscuous mode [ 1547.877392][T15820] usb 5-1: USB disconnect, device number 100 [ 1548.721038][T24339] Bluetooth: hci3: command tx timeout [ 1548.961031][T15820] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1549.166501][T15820] usb 5-1: Using ep0 maxpacket: 16 [ 1549.190160][T15820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1549.222509][T15820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1549.240259][T15820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1549.312129][T15820] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1549.322733][T15820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.346982][T15820] usb 5-1: config 0 descriptor?? [ 1549.764624][T16803] team0 (unregistering): Port device team_slave_1 removed [ 1549.826792][T15820] HID 045e:07da: Invalid code 65791 type 1 [ 1549.895073][T15820] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0033/input/input97 [ 1549.945630][T15820] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1549.988377][T16803] team0 (unregistering): Port device team_slave_0 removed [ 1550.801033][T24339] Bluetooth: hci3: command tx timeout [ 1551.190934][ T9] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 1552.339359][T27895] chnl_net:caif_netlink_parms(): no params data found [ 1552.881147][T24339] Bluetooth: hci3: command tx timeout [ 1553.144382][T27895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.232071][T27895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.239489][T27895] bridge_slave_0: entered allmulticast mode [ 1553.353619][T27895] bridge_slave_0: entered promiscuous mode [ 1553.416939][T27895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.476570][T27895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.499426][T27895] bridge_slave_1: entered allmulticast mode [ 1553.537700][T27895] bridge_slave_1: entered promiscuous mode [ 1553.789704][T27895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.866000][T27895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.930576][T27992] loop9: detected capacity change from 0 to 7 [ 1553.964565][T27992] Dev loop9: unable to read RDB block 7 [ 1553.984518][T27895] team0: Port device team_slave_0 added [ 1553.998069][T27992] loop9: unable to read partition table [ 1554.021950][T27992] loop9: partition table beyond EOD, truncated [ 1554.045696][ T5290] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1554.066202][T27992] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1554.161934][T27895] team0: Port device team_slave_1 added [ 1554.291292][ T5290] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1554.308064][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.335633][ T5290] usb 2-1: config 0 descriptor?? [ 1554.352691][ T5290] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1554.384534][T27895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1554.401392][T27895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.433097][T27895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1554.471281][ T9] usb 5-1: device descriptor read/64, error -71 [ 1554.488480][T27895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1554.496446][T27895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1554.525067][T27895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.661612][ T5290] gspca_cpia1: usb_control_msg 03, error -71 [ 1554.682922][ T5290] gspca_cpia1: usb_control_msg 01, error -71 [ 1554.688986][ T5290] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1554.707400][T27895] hsr_slave_0: entered promiscuous mode [ 1554.735479][ T5290] usb 2-1: USB disconnect, device number 125 [ 1554.751218][T27895] hsr_slave_1: entered promiscuous mode [ 1554.771518][ T9] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 1554.787675][T27895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1554.800998][ T9] usb 5-1: device reset changed ep0 maxpacket size! [ 1554.807911][T27895] Cannot create hsr debugfs directory [ 1554.835168][ T5622] usb 5-1: USB disconnect, device number 101 [ 1554.976681][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1554.976703][ T29] audit: type=1326 audit(1725672473.761:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.083268][ T5622] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1555.103743][ T29] audit: type=1326 audit(1725672473.761:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.154854][ T29] audit: type=1326 audit(1725672473.791:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.177741][ T29] audit: type=1326 audit(1725672473.791:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.215627][ T29] audit: type=1326 audit(1725672473.791:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.301440][ T5622] usb 5-1: Using ep0 maxpacket: 8 [ 1555.308829][ T29] audit: type=1326 audit(1725672473.851:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.347424][ T5622] usb 5-1: config 0 has no interfaces? [ 1555.364446][ T5622] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1555.398358][ T5622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.424675][ T29] audit: type=1326 audit(1725672473.851:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.444814][ T5622] usb 5-1: config 0 descriptor?? [ 1555.491122][ T29] audit: type=1326 audit(1725672473.861:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.550922][ T5290] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1555.558057][ T29] audit: type=1326 audit(1725672473.861:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.647933][ T29] audit: type=1326 audit(1725672473.861:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28006 comm="syz.1.4866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3bf7cef9 code=0x7ffc0000 [ 1555.740918][ T5290] usb 2-1: device descriptor read/64, error -71 [ 1555.818966][T26002] usb 5-1: USB disconnect, device number 102 [ 1556.020982][ T5290] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1556.233916][ T5290] usb 2-1: device descriptor read/64, error -71 [ 1556.384868][ T5290] usb usb2-port1: attempt power cycle [ 1556.562990][ T9946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1556.577600][ T9946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1556.589547][ T9946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1556.601248][ T9946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1556.612806][ T9946] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1556.620353][ T9946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1556.820856][ T5290] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1556.870293][ T5290] usb 2-1: device descriptor read/8, error -71 [ 1557.172347][ T5290] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1557.177438][ T9] usb 3-1: USB disconnect, device number 101 [ 1557.212289][ T5290] usb 2-1: device descriptor read/8, error -71 [ 1557.351387][ T5290] usb usb2-port1: unable to enumerate USB device [ 1557.566793][T16803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.047613][T16803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.327305][T16803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.496327][T16803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.533321][T27895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1558.549919][T27895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1558.589962][T27895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1558.641532][T27895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1558.721133][T24339] Bluetooth: hci4: command tx timeout [ 1559.117737][T16803] bridge_slave_1: left allmulticast mode [ 1559.131438][T16803] bridge_slave_1: left promiscuous mode [ 1559.137385][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.163451][T16803] bridge_slave_0: left allmulticast mode [ 1559.169135][T16803] bridge_slave_0: left promiscuous mode [ 1559.185368][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.209240][T16803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1560.241523][T16803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1560.263390][T16803] bond0 (unregistering): Released all slaves [ 1560.287009][T28026] chnl_net:caif_netlink_parms(): no params data found [ 1560.337011][T28068] __nla_validate_parse: 25 callbacks suppressed [ 1560.337032][T28068] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4882'. [ 1560.567639][T16803] batman_adv: batadv0: Interface deactivated: wlan1 [ 1560.624465][T16803] batman_adv: batadv0: Removing interface: wlan1 [ 1560.810903][T24339] Bluetooth: hci4: command tx timeout [ 1561.026687][T28026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.041704][T28026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.049128][T28026] bridge_slave_0: entered allmulticast mode [ 1561.081021][T28026] bridge_slave_0: entered promiscuous mode [ 1561.330517][T28026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.356792][T28026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.383424][T28026] bridge_slave_1: entered allmulticast mode [ 1561.404343][T28026] bridge_slave_1: entered promiscuous mode [ 1561.519560][T28100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4888'. [ 1561.544163][T28108] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4889'. [ 1561.548048][T28100] vlan2: entered promiscuous mode [ 1561.581791][T28100] macvtap0: entered promiscuous mode [ 1561.590958][T28100] vlan2: entered allmulticast mode [ 1561.600107][T28100] macvtap0: entered allmulticast mode [ 1561.609011][T28100] veth0_macvtap: entered allmulticast mode [ 1561.663447][T27895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1561.782293][T28026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.798605][T28026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.831006][ T5236] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1561.849336][T16803] hsr_slave_0: left promiscuous mode [ 1561.859277][T16803] hsr_slave_1: left promiscuous mode [ 1561.880523][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.891050][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.908313][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1561.923682][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.987278][T16803] veth1_macvtap: left promiscuous mode [ 1561.998361][T16803] veth0_macvtap: left promiscuous mode [ 1562.012815][T16803] veth1_vlan: left promiscuous mode [ 1562.029539][ T5236] usb 2-1: no configurations [ 1562.034483][T16803] ªªªªª5ÿÿ: left promiscuous mode [ 1562.039755][ T5236] usb 2-1: can't read configurations, error -22 [ 1562.211372][ T5236] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1562.456025][ T5236] usb 2-1: no configurations [ 1562.471110][ T5236] usb 2-1: can't read configurations, error -22 [ 1562.512405][ T5236] usb usb2-port1: attempt power cycle [ 1562.886216][T24339] Bluetooth: hci4: command tx timeout [ 1562.954681][ T5236] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1563.028733][ T5236] usb 2-1: no configurations [ 1563.036880][ T5236] usb 2-1: can't read configurations, error -22 [ 1563.217409][ T5236] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1563.274851][ T5236] usb 2-1: no configurations [ 1563.279827][ T5236] usb 2-1: can't read configurations, error -22 [ 1563.298855][ T5236] usb usb2-port1: unable to enumerate USB device [ 1563.713290][T16803] team0 (unregistering): Port device team_slave_1 removed [ 1563.848901][T16803] team0 (unregistering): Port device team_slave_0 removed [ 1564.972423][T24339] Bluetooth: hci4: command tx timeout [ 1565.169731][T28119] netlink: 844 bytes leftover after parsing attributes in process `syz.0.4894'. [ 1565.180208][T28119] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1565.372963][T28026] team0: Port device team_slave_0 added [ 1565.408056][T28026] team0: Port device team_slave_1 added [ 1565.428774][T27895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.677186][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.684513][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.692272][T26002] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1565.771692][T28026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.806216][T28026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1565.885619][T28026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.922618][T28026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.936652][T28026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.014443][T28026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.074318][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.081613][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.365660][T28026] hsr_slave_0: entered promiscuous mode [ 1566.379955][T28026] hsr_slave_1: entered promiscuous mode [ 1566.408194][T28026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1566.443112][T28026] Cannot create hsr debugfs directory [ 1566.635673][T16803] IPVS: stop unused estimator thread 0... [ 1566.709891][T27895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1567.366954][T27895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.272588][T28204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.321765][T28204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.447481][T27895] veth0_vlan: entered promiscuous mode [ 1568.510995][T26002] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1568.707055][T27895] veth1_vlan: entered promiscuous mode [ 1568.721266][T26002] usb 5-1: Using ep0 maxpacket: 32 [ 1568.791476][T26002] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 1568.820979][T26002] usb 5-1: config 0 has no interface number 0 [ 1568.861859][T26002] usb 5-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=a0.fe [ 1568.896042][T26002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.939719][T26002] usb 5-1: Product: syz [ 1568.961406][T26002] usb 5-1: Manufacturer: syz [ 1568.966089][T26002] usb 5-1: SerialNumber: syz [ 1569.013879][T26002] usb 5-1: config 0 descriptor?? [ 1569.060235][T26002] gspca_main: tv8532-2.14.0 probing 0923:010f [ 1569.096512][T28026] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1569.128496][T28026] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1569.167013][T28026] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1569.204001][T27895] veth0_macvtap: entered promiscuous mode [ 1569.226748][T28026] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1569.292576][T27895] veth1_macvtap: entered promiscuous mode [ 1569.358153][T26002] usb 5-1: USB disconnect, device number 104 [ 1569.398718][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.418268][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.429443][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.440401][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.479694][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1569.529656][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.585601][T27895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1569.665902][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.677829][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.689269][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.703337][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.716073][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.766911][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.795293][T27895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1569.808765][T27895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1569.842849][T27895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1569.877498][T27895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.904027][T27895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.913121][T27895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1569.922987][T27895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.149639][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1570.297767][T28239] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4910'. [ 1570.334854][T28234] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4909'. [ 1570.421926][ T1064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.456372][ T1064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.465289][T28026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.561692][T28026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.612043][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.619415][T16802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.638389][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1570.656107][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1570.668849][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.676055][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.880108][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1570.911823][T28250] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4842'. [ 1570.957716][T28026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1571.161940][T28026] veth0_vlan: entered promiscuous mode [ 1571.202550][T28026] veth1_vlan: entered promiscuous mode [ 1571.211031][T10853] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1571.290976][T26002] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1571.317557][T28026] veth0_macvtap: entered promiscuous mode [ 1571.336070][T28026] veth1_macvtap: entered promiscuous mode [ 1571.368839][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1571.380591][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.393882][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1571.406084][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.427286][T10853] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1571.440050][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1571.450610][T10853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1571.450653][T10853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1571.483110][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.493193][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1571.508208][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.542734][T26002] usb 2-1: Using ep0 maxpacket: 16 [ 1571.545051][T28026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1571.560507][T26002] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8 [ 1571.580670][T10853] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1571.599208][T26002] usb 2-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1571.623584][T10853] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1571.633300][T26002] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1571.634358][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.656757][T10853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.656831][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.671316][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.687361][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.699286][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.701274][T26002] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1571.730123][T26002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.756935][T10853] usb 4-1: config 0 descriptor?? [ 1571.764030][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.767162][T28252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1571.791024][T26002] usb 2-1: Product: à¡¡ [ 1571.798884][T26002] usb 2-1: Manufacturer: ꒭ㄇ젲颖봑æ³ä“Œìª«æ•”ቄä³í íŒ”斬밳䰴鋹⊻냳㪵èºå’²ì …飳熼웿梨âšçš¸î©¹ä­ç¹šá™“輽㣅輛뛹䣮ᦕ쾥ç§ä£‰ã‡ç´€å¿©ç„ºæ¶¤ã„¥ä½¼ï¦œïስ繫Þâ¿à¸å¢œì€¸ì¤ [ 1571.806610][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1571.847195][T26002] usb 2-1: SerialNumber: ᒼ眕á¥á©›çŸèœŒã»˜é¬ä‘™ä£¸éš»é—蛢ꋇ罚╂藢g蛃뾳溩圥å˜éˆ¬ï§‘硄๩è½àºªî“¡ì‘«áº‡ê¼œá¢’诼㙰Ṯ渽 [ 1571.860668][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1571.916635][T28256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1571.929481][T28256] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1571.950761][T28026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1572.011284][T28026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1572.048948][T28026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.125243][T28026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.175090][T26002] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1572.184376][T28026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.207501][T28026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.228271][T26002] usb 2-1: USB disconnect, device number 8 [ 1572.234502][T28026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.310368][T28250] tipc: Started in network mode [ 1572.321427][T28250] tipc: Node identity ., cluster identity 4711 [ 1572.327680][T28250] tipc: Enabling of bearer rejected, failed to enable media [ 1572.364447][T28250] fuse: Unknown parameter '0x0000000000000009' [ 1572.614810][T10853] usbhid 4-1:0.0: can't add hid device: -71 [ 1572.621000][T10853] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1572.640258][T10853] usb 4-1: USB disconnect, device number 81 [ 1572.732952][T16802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.761274][T16802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1572.848467][T16802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1572.874214][T16802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.231350][T28311] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4919'. [ 1574.469227][T28314] netpci0: renamed from lo (while UP) [ 1574.631487][T28320] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4921'. [ 1574.751728][T28324] veth1_macvtap: left promiscuous mode [ 1574.758398][T28324] macsec0: entered promiscuous mode [ 1574.765105][T28324] macsec0: entered allmulticast mode [ 1574.806827][T28329] veth1_macvtap: entered promiscuous mode [ 1574.831234][T28329] veth1_macvtap: entered allmulticast mode [ 1574.839860][T28329] macsec0: left promiscuous mode [ 1575.166971][T28337] loop9: detected capacity change from 0 to 7 [ 1575.175814][T28337] Dev loop9: unable to read RDB block 7 [ 1575.186070][T28337] loop9: unable to read partition table [ 1575.192467][T28337] loop9: partition table beyond EOD, truncated [ 1575.198879][T28337] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1575.301094][ T5622] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1575.311134][ T5236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1575.492695][ T5236] usb 2-1: device descriptor read/64, error -71 [ 1575.516474][ T5622] usb 4-1: Using ep0 maxpacket: 32 [ 1575.529794][ T5622] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1575.572896][ T5622] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1575.587547][ T5622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.599020][ T5622] usb 4-1: Product: С [ 1575.604390][ T5622] usb 4-1: SerialNumber: ä°Š [ 1575.616083][ T5622] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 1575.624600][ T5622] cdc_ncm 4-1:1.0: bind() failure [ 1575.644506][ T5622] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1575.654320][ T5622] cdc_ncm 4-1:1.1: bind() failure [ 1575.780850][ T5236] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1575.817309][ T5622] usb 4-1: USB disconnect, device number 82 [ 1575.951774][ T5236] usb 2-1: device descriptor read/64, error -71 [ 1576.072631][ T5236] usb usb2-port1: attempt power cycle [ 1576.497518][ T5236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1576.551488][ T5236] usb 2-1: device descriptor read/8, error -71 [ 1576.792128][T28358] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4934'. [ 1576.830830][ T5236] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1576.871886][ T5236] usb 2-1: device descriptor read/8, error -71 [ 1577.005103][ T5236] usb usb2-port1: unable to enumerate USB device [ 1577.103240][T28362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1577.371214][T28366] loop9: detected capacity change from 0 to 7 [ 1577.379991][T28366] Dev loop9: unable to read RDB block 7 [ 1577.385865][T28366] loop9: unable to read partition table [ 1577.393861][T28366] loop9: partition table beyond EOD, truncated [ 1577.400179][T28366] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1577.551053][ T5236] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1577.753730][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1577.772592][ T5236] usb 4-1: config 0 has no interfaces? [ 1577.783645][ T5236] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1577.810979][ T5236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.827805][ T5236] usb 4-1: config 0 descriptor?? [ 1578.084131][T28364] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1578.110138][T28364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.133552][T28364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.160653][T26002] usb 4-1: USB disconnect, device number 83 [ 1579.148891][T28385] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1579.155479][T28385] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1579.228716][T28385] vhci_hcd vhci_hcd.0: Device attached [ 1579.250904][T28389] vhci_hcd: connection closed [ 1579.259648][ T2494] vhci_hcd: stop threads [ 1579.277741][ T2494] vhci_hcd: release socket [ 1579.298053][ T2494] vhci_hcd: disconnect device [ 1579.463593][ T9946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1579.473347][ T9946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1579.491579][ T9946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1579.502483][ T9946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1579.512095][T26002] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1579.521768][ T9946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1579.529573][ T9946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1579.720838][T26002] usb 3-1: Using ep0 maxpacket: 8 [ 1579.757003][T26002] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1579.783149][T26002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.810930][T26002] usb 3-1: Product: syz [ 1579.824300][T26002] usb 3-1: Manufacturer: syz [ 1579.834524][T26002] usb 3-1: SerialNumber: syz [ 1579.849527][T26002] usb 3-1: config 0 descriptor?? [ 1579.860953][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1580.024120][T28397] chnl_net:caif_netlink_parms(): no params data found [ 1580.073957][T28402] fuse: Bad value for 'fd' [ 1580.079640][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1580.091386][T26002] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1580.104577][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1580.157602][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.212706][ T9] usb 2-1: Product: syz [ 1580.216935][ T9] usb 2-1: Manufacturer: syz [ 1580.237535][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 1580.237555][ T29] audit: type=1326 audit(1725672499.021:3831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28384 comm="syz.2.4944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd03e57cef9 code=0x0 [ 1580.277624][ T9] usb 2-1: SerialNumber: syz [ 1580.293028][T28397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.324615][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1580.324871][T28397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.347914][ T9] r8152-cfgselector 2-1: config 0 descriptor?? [ 1580.367167][T26002] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1580.379967][T28397] bridge_slave_0: entered allmulticast mode [ 1580.385998][ T5622] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1580.404317][T26002] usb 3-1: USB disconnect, device number 102 [ 1580.414466][T28397] bridge_slave_0: entered promiscuous mode [ 1580.428788][T28408] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1580.443875][T28397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.473845][T28397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.506763][T28397] bridge_slave_1: entered allmulticast mode [ 1580.519327][T28397] bridge_slave_1: entered promiscuous mode [ 1580.561022][ T5622] usb 5-1: Using ep0 maxpacket: 16 [ 1580.575488][ T5622] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1580.606088][ T5622] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1580.653163][ T5622] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1580.668134][ T5622] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1580.703707][ T5622] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1580.716576][ T5622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.727570][ T5622] usb 5-1: Product: С [ 1580.735591][ T5622] usb 5-1: Manufacturer: 헥䠨ඌ섔⼲垷ⵛ茀鞖ᴡ炰籸駟喃윕皓跆á掜胹ç‘䯼눙㱩䲾錡䟫鎀鞞àªéª™æ¯°ä™á¾î¿«á½¹ì·€êƒµì±œâ³›å¤‹êƒ´é¶…íƒî´šï­ˆë…࿹憎๔é„ìŽâ‰µâ— ã®¹èŽ‰çœŠï²¢î¤—评ë¢ã‹ºê³¶íœžäš‘દ맸꠰ [ 1580.808797][ T5622] usb 5-1: SerialNumber: ì¶è§ƒâ­‹áº¸æ´Ÿê—ƒçµ»æ·´î˜¿é¡„㥦ᷓછ膉♤ [ 1580.823339][T28397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1580.848053][T28402] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1580.899676][T28397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1581.081079][T28402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.095022][T28402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.120047][T28397] team0: Port device team_slave_0 added [ 1581.200996][T28397] team0: Port device team_slave_1 added [ 1581.283061][T28402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.356494][T28402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1581.388006][ T5622] usb 5-1: 0:2 : does not exist [ 1581.398508][T28397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1581.442115][T28397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.483334][ T5622] usb 5-1: USB disconnect, device number 105 [ 1581.537113][T28397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1581.578384][T28397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.596145][T28397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.630341][T18678] udevd[18678]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1581.638402][T24339] Bluetooth: hci5: command tx timeout [ 1581.695568][T28397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1582.038911][T28397] hsr_slave_0: entered promiscuous mode [ 1582.091687][T28397] hsr_slave_1: entered promiscuous mode [ 1582.127424][T28397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1582.151754][T28397] Cannot create hsr debugfs directory [ 1582.716089][T28437] loop2: detected capacity change from 0 to 7 [ 1582.753538][T28437] Dev loop2: unable to read RDB block 7 [ 1582.759289][T28437] loop2: unable to read partition table [ 1582.786363][T28437] loop2: partition table beyond EOD, truncated [ 1582.793086][T10853] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1582.821033][T28437] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1583.030950][T10853] usb 3-1: Using ep0 maxpacket: 8 [ 1583.080202][T10853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1583.103277][T28439] FAULT_INJECTION: forcing a failure. [ 1583.103277][T28439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.127021][T10853] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1583.151114][T28439] CPU: 1 UID: 0 PID: 28439 Comm: syz.4.4958 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1583.162047][T28439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1583.172243][T28439] Call Trace: [ 1583.175570][T28439] [ 1583.178539][T28439] dump_stack_lvl+0x241/0x360 [ 1583.183331][T28439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1583.188581][T28439] ? __pfx__printk+0x10/0x10 [ 1583.193220][T28439] ? __pfx_lock_release+0x10/0x10 [ 1583.198288][T28439] should_fail_ex+0x3b0/0x4e0 [ 1583.203010][T28439] _copy_from_user+0x2f/0xe0 [ 1583.207636][T28439] copy_msghdr_from_user+0xae/0x680 [ 1583.212886][T28439] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1583.218751][T28439] __sys_sendmsg+0x23d/0x3a0 [ 1583.223373][T28439] ? __pfx___sys_sendmsg+0x10/0x10 [ 1583.228508][T28439] ? vfs_write+0x7c4/0xc90 [ 1583.232982][T28439] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1583.239332][T28439] ? do_syscall_64+0x100/0x230 [ 1583.244122][T28439] ? do_syscall_64+0xb6/0x230 [ 1583.248821][T28439] do_syscall_64+0xf3/0x230 [ 1583.253352][T28439] ? clear_bhb_loop+0x35/0x90 [ 1583.258052][T28439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.263973][T28439] RIP: 0033:0x7f975f17cef9 [ 1583.268410][T28439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1583.288054][T28439] RSP: 002b:00007f9760055038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1583.296493][T28439] RAX: ffffffffffffffda RBX: 00007f975f335f80 RCX: 00007f975f17cef9 [ 1583.304567][T28439] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1583.312565][T28439] RBP: 00007f9760055090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.320549][T28439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1583.328720][T28439] R13: 0000000000000000 R14: 00007f975f335f80 R15: 00007f975f45fa28 [ 1583.336728][T28439] [ 1583.342258][T10853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.351807][T28397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.397676][T10853] usb 3-1: config 0 descriptor?? [ 1583.664323][T10853] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1583.691389][ T9946] Bluetooth: hci5: command tx timeout [ 1583.726987][T28397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.068395][T28397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.148370][ T9] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1584.184190][ T9] r8152-cfgselector 2-1: bad CDC descriptors [ 1584.233826][ T9] r8152-cfgselector 2-1: USB disconnect, device number 13 [ 1584.460847][T28397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.907292][T28457] sit0: entered promiscuous mode [ 1584.942249][T28457] netlink: 'syz.3.4963': attribute type 1 has an invalid length. [ 1584.961797][ T29] audit: type=1400 audit(1725672503.751:3832): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A21 pid=28454 comm="syz.4.4962" [ 1584.971227][T28457] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4963'. [ 1585.164458][T28397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.187960][T28397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.212468][T28397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.266811][T28397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.382175][ T5294] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1585.455987][ T5622] usb 3-1: USB disconnect, device number 103 [ 1585.482333][ T5622] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 1585.618175][ T5294] usb 4-1: Using ep0 maxpacket: 16 [ 1585.639116][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.672249][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.696168][ T5294] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1585.727636][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.746179][T28397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.760941][ T9946] Bluetooth: hci5: command tx timeout [ 1585.782639][ T5294] usb 4-1: config 0 descriptor?? [ 1585.846994][T28397] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.878750][ T1063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.886097][ T1063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.938614][T24857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.945960][T24857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.993103][T28457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.021622][T28457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.120984][ T5622] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1586.195733][T28397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.268997][ T5294] elan 0003:04F3:0755.0034: failed to start in urb: -90 [ 1586.294020][ T5294] elan 0003:04F3:0755.0034: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 1586.350731][ T5622] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1586.359859][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.385493][T28470] netlink: get zone limit has 4 unknown bytes [ 1586.387456][T28397] veth0_vlan: entered promiscuous mode [ 1586.408748][ T5622] usb 3-1: Product: syz [ 1586.422064][ T5622] usb 3-1: Manufacturer: syz [ 1586.426750][ T5622] usb 3-1: SerialNumber: syz [ 1586.437886][T28397] veth1_vlan: entered promiscuous mode [ 1586.447150][ T5622] usb 3-1: config 0 descriptor?? [ 1586.462700][T26002] usb 4-1: USB disconnect, device number 84 [ 1586.574137][T28397] veth0_macvtap: entered promiscuous mode [ 1586.618312][T28397] veth1_macvtap: entered promiscuous mode [ 1586.679184][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.691121][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.715276][T28463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.737338][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.758467][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.776002][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.789349][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.806658][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.822335][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.839642][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1586.851077][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.875720][T28463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.892603][T28397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1586.912214][T28463] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4964'. [ 1586.932971][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.953250][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.966241][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1586.976964][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1586.998348][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.019701][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.039897][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.065866][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.089357][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.103504][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.115205][T28472] FAULT_INJECTION: forcing a failure. [ 1587.115205][T28472] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.128610][T28397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1587.139574][T28472] CPU: 0 UID: 0 PID: 28472 Comm: syz.3.4968 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1587.150396][T28472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1587.160501][T28472] Call Trace: [ 1587.163824][T28472] [ 1587.166811][T28472] dump_stack_lvl+0x241/0x360 [ 1587.171551][T28472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1587.176835][T28472] ? __pfx__printk+0x10/0x10 [ 1587.181468][T28472] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1587.187498][T28472] ? __pfx___might_resched+0x10/0x10 [ 1587.192852][T28472] should_fail_ex+0x3b0/0x4e0 [ 1587.197605][T28472] should_failslab+0xac/0x100 [ 1587.202344][T28472] ? __alloc_skb+0x1c3/0x440 [ 1587.206985][T28472] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1587.212858][T28472] __alloc_skb+0x1c3/0x440 [ 1587.217330][T28472] ? __pfx___alloc_skb+0x10/0x10 [ 1587.222313][T28472] ? netlink_autobind+0xd6/0x2f0 [ 1587.227283][T28472] ? netlink_autobind+0x2b0/0x2f0 [ 1587.232352][T28472] netlink_sendmsg+0x638/0xcb0 [ 1587.237166][T28472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1587.242557][T28472] ? __import_iovec+0x536/0x820 [ 1587.247435][T28472] ? aa_sock_msg_perm+0x91/0x160 [ 1587.252385][T28472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1587.257686][T28472] ? security_socket_sendmsg+0x87/0xb0 [ 1587.263165][T28472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1587.268461][T28472] __sock_sendmsg+0x221/0x270 [ 1587.273175][T28472] ____sys_sendmsg+0x525/0x7d0 [ 1587.277966][T28472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1587.283337][T28472] __sys_sendmsg+0x2b0/0x3a0 [ 1587.287949][T28472] ? __pfx___sys_sendmsg+0x10/0x10 [ 1587.293097][T28472] ? vfs_write+0x7c4/0xc90 [ 1587.297564][T28472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1587.303913][T28472] ? do_syscall_64+0x100/0x230 [ 1587.308698][T28472] ? do_syscall_64+0xb6/0x230 [ 1587.313398][T28472] do_syscall_64+0xf3/0x230 [ 1587.317918][T28472] ? clear_bhb_loop+0x35/0x90 [ 1587.322616][T28472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.328530][T28472] RIP: 0033:0x7f037697cef9 [ 1587.332959][T28472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.352583][T28472] RSP: 002b:00007f03776f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.361017][T28472] RAX: ffffffffffffffda RBX: 00007f0376b35f80 RCX: 00007f037697cef9 [ 1587.369015][T28472] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1587.377012][T28472] RBP: 00007f03776f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.385002][T28472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.392988][T28472] R13: 0000000000000000 R14: 00007f0376b35f80 R15: 00007f0376c5fa28 [ 1587.400989][T28472] [ 1587.406690][T28397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1587.420916][T28397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1587.445595][T28397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.463779][T15820] usb 3-1: USB disconnect, device number 104 [ 1587.466652][T28397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.501137][T28397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.509910][T28397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1587.801954][T16803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1587.820805][T16803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.847294][ T9946] Bluetooth: hci5: command tx timeout [ 1587.940852][T26002] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1588.147947][T16803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.158972][T26002] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1588.201438][T26002] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1588.260244][T16802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.270954][T26002] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1588.288000][T16802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.294640][T26002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.305393][T26002] usb 4-1: Product: syz [ 1588.329693][T26002] usb 4-1: Manufacturer: syz [ 1588.335463][T26002] usb 4-1: SerialNumber: syz [ 1588.349696][T28474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1588.384010][T28474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1588.423177][T26002] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1588.532279][T16803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.627242][T28474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1588.659349][T28474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1588.695426][ T5290] usb 4-1: USB disconnect, device number 85 [ 1588.809628][T16803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.981918][ T29] audit: type=1326 audit(1725672507.761:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03e57cef9 code=0x7ffc0000 [ 1589.026643][T24339] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1589.037202][ T29] audit: type=1326 audit(1725672507.791:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03e57cef9 code=0x7ffc0000 [ 1589.040052][T24339] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1589.060990][ T29] audit: type=1326 audit(1725672507.801:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd03e57b890 code=0x7ffc0000 [ 1589.146154][T24339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1589.207691][ T29] audit: type=1326 audit(1725672507.801:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.235757][T16803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.262806][T24339] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1589.272414][T24339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1589.279973][T24339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1589.312387][T15820] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1589.322074][ T5290] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1589.333603][ T29] audit: type=1326 audit(1725672507.801:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.432797][ T29] audit: type=1326 audit(1725672507.811:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.474523][ T29] audit: type=1326 audit(1725672507.811:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.510459][ T29] audit: type=1326 audit(1725672507.931:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.552590][T15820] usb 3-1: Using ep0 maxpacket: 8 [ 1589.557827][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 1589.585951][ T5290] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1589.594998][T15820] usb 3-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 1589.609912][ T5290] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1589.620012][T15820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.635449][ T29] audit: type=1326 audit(1725672508.041:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.669600][T15820] usb 3-1: Product: syz [ 1589.674008][ T5290] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1589.685261][T15820] usb 3-1: Manufacturer: syz [ 1589.689932][T15820] usb 3-1: SerialNumber: syz [ 1589.704925][ T5290] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.731895][T15820] usb 3-1: config 0 descriptor?? [ 1589.758733][ T29] audit: type=1326 audit(1725672508.141:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28487 comm="syz.2.4975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd03e57cafb code=0x7ffc0000 [ 1589.792104][ T5290] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.838074][ T5290] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1589.861961][T16803] bridge_slave_1: left allmulticast mode [ 1589.875467][T16803] bridge_slave_1: left promiscuous mode [ 1589.888094][ T5290] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.901028][T16803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.903787][ T5290] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1589.920638][T16803] bridge_slave_0: left allmulticast mode [ 1589.935142][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.943205][T16803] bridge_slave_0: left promiscuous mode [ 1589.964605][T28474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1589.969635][T16803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.980956][T28474] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1590.095620][T15820] usb 3-1: USB disconnect, device number 105 [ 1590.126070][T28503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.149307][T28503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.341795][ T5290] usb 4-1: usb_control_msg returned -71 [ 1590.361007][ T5290] usbtmc 4-1:16.0: can't read capabilities [ 1590.390891][ T5290] usbtmc 4-1:16.0: Failed to submit iin_urb [ 1590.399340][ T5290] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -90 [ 1590.449734][ T5290] usb 4-1: USB disconnect, device number 86 [ 1590.860932][ T5290] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1591.061993][ T5290] usb 4-1: device descriptor read/64, error -71 [ 1591.362343][T24339] Bluetooth: hci2: command tx timeout [ 1591.375371][ T5290] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1591.537683][T16803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.582677][T16803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1591.617090][T16803] bond0 (unregistering): Released all slaves [ 1591.673815][T28501] sch_tbf: burst 0 is lower than device lo mtu (1075109906) ! [ 1592.238788][T28490] chnl_net:caif_netlink_parms(): no params data found [ 1592.540862][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1592.752549][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1592.775634][T16803] hsr_slave_0: left promiscuous mode [ 1592.787052][ T9] usb 3-1: config 180 has an invalid interface number: 213 but max is 1 [ 1592.812489][T16803] hsr_slave_1: left promiscuous mode [ 1592.820981][ T9] usb 3-1: config 180 has an invalid interface number: 4 but max is 1 [ 1592.838250][ T9] usb 3-1: config 180 has no interface number 0 [ 1592.845268][ T9] usb 3-1: config 180 has no interface number 1 [ 1592.853559][ T9] usb 3-1: config 180 interface 213 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 1592.870563][ T9] usb 3-1: config 180 interface 4 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1592.884334][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.908066][T16803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.923373][ T9] usb 3-1: config 180 interface 213 has no altsetting 0 [ 1592.951975][ T9] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice=42.86 [ 1592.962122][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.975928][T16803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.984265][ T9] usb 3-1: Product: syz [ 1592.991984][ T9] usb 3-1: Manufacturer: syz [ 1593.001404][T16803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.016376][ T9] usb 3-1: SerialNumber: syz [ 1593.066801][T28543] FAULT_INJECTION: forcing a failure. [ 1593.066801][T28543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.109966][T16803] macvtap0: left allmulticast mode [ 1593.116638][T28543] CPU: 0 UID: 0 PID: 28543 Comm: syz.1.4989 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1593.127463][T28543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1593.137536][T28543] Call Trace: [ 1593.140827][T28543] [ 1593.143769][T28543] dump_stack_lvl+0x241/0x360 [ 1593.148475][T28543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1593.153693][T28543] ? __pfx__printk+0x10/0x10 [ 1593.158297][T28543] ? __pfx_lock_release+0x10/0x10 [ 1593.163351][T28543] should_fail_ex+0x3b0/0x4e0 [ 1593.168057][T28543] _copy_from_iter+0x1f6/0x1960 [ 1593.173012][T28543] ? __virt_addr_valid+0x183/0x530 [ 1593.178142][T28543] ? __pfx_lock_release+0x10/0x10 [ 1593.183193][T28543] ? __alloc_skb+0x28f/0x440 [ 1593.187810][T28543] ? __pfx__copy_from_iter+0x10/0x10 [ 1593.193116][T28543] ? __virt_addr_valid+0x183/0x530 [ 1593.198257][T28543] ? __virt_addr_valid+0x183/0x530 [ 1593.203373][T28543] ? __virt_addr_valid+0x45f/0x530 [ 1593.208503][T28543] ? __check_object_size+0x49c/0x900 [ 1593.213822][T28543] netlink_sendmsg+0x73d/0xcb0 [ 1593.218636][T28543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.223939][T28543] ? __import_iovec+0x536/0x820 [ 1593.228805][T28543] ? aa_sock_msg_perm+0x91/0x160 [ 1593.233790][T28543] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1593.239098][T28543] ? security_socket_sendmsg+0x87/0xb0 [ 1593.244585][T28543] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1593.249885][T28543] __sock_sendmsg+0x221/0x270 [ 1593.254594][T28543] ____sys_sendmsg+0x525/0x7d0 [ 1593.259383][T28543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1593.264699][T28543] __sys_sendmsg+0x2b0/0x3a0 [ 1593.269313][T28543] ? __pfx___sys_sendmsg+0x10/0x10 [ 1593.274446][T28543] ? vfs_write+0x7c4/0xc90 [ 1593.278910][T28543] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1593.285258][T28543] ? do_syscall_64+0x100/0x230 [ 1593.290083][T28543] ? do_syscall_64+0xb6/0x230 [ 1593.294776][T28543] do_syscall_64+0xf3/0x230 [ 1593.299293][T28543] ? clear_bhb_loop+0x35/0x90 [ 1593.303994][T28543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.309904][T28543] RIP: 0033:0x7f4a3bf7cef9 [ 1593.314337][T28543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1593.334051][T28543] RSP: 002b:00007f4a3ce30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.342488][T28543] RAX: ffffffffffffffda RBX: 00007f4a3c135f80 RCX: 00007f4a3bf7cef9 [ 1593.350477][T28543] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1593.358459][T28543] RBP: 00007f4a3ce30090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.366443][T28543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.374424][T28543] R13: 0000000000000000 R14: 00007f4a3c135f80 R15: 00007f4a3c25fa28 [ 1593.382599][T28543] [ 1593.389429][T16803] veth0_macvtap: left allmulticast mode [ 1593.396472][T16803] macvtap0: left promiscuous mode [ 1593.413853][T16803] veth0_macvtap: left promiscuous mode [ 1593.419631][T16803] veth1_vlan: left promiscuous mode [ 1593.453908][T16803] veth0_vlan: left promiscuous mode [ 1593.464985][T24339] Bluetooth: hci2: command tx timeout [ 1593.536102][ T9] usb 3-1: USB disconnect, device number 106 [ 1594.954825][T16803] team0 (unregistering): Port device team_slave_1 removed [ 1595.072338][T16803] team0 (unregistering): Port device team_slave_0 removed [ 1595.522112][T24339] Bluetooth: hci2: command tx timeout [ 1595.670929][ T5236] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1595.850822][ T5236] usb 3-1: Using ep0 maxpacket: 8 [ 1595.858827][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.879832][ T5236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.889929][ T5236] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1595.899406][ T5236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.918880][ T5236] usb 3-1: config 0 descriptor?? [ 1596.118415][T28550] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1596.362926][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.391238][T28490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.408841][T28490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.411430][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.451048][T28490] bridge_slave_0: entered allmulticast mode [ 1596.472838][T28490] bridge_slave_0: entered promiscuous mode [ 1596.522720][ T5236] logitech-djreceiver 0003:046D:C52F.0035: unknown main item tag 0x0 [ 1596.533233][T28490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.584947][T28490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.606918][T28490] bridge_slave_1: entered allmulticast mode [ 1596.620313][T28490] bridge_slave_1: entered promiscuous mode [ 1596.699856][ T5244] usb 3-1: USB disconnect, device number 107 [ 1596.857554][T28490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1596.892143][T28490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.061695][T28490] team0: Port device team_slave_0 added [ 1597.082036][T28490] team0: Port device team_slave_1 added [ 1597.205728][T28592] loop2: detected capacity change from 0 to 7 [ 1597.251777][T28592] Dev loop2: unable to read RDB block 7 [ 1597.275215][T28592] loop2: unable to read partition table [ 1597.300956][T28592] loop2: partition table beyond EOD, truncated [ 1597.313970][T28592] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1597.330430][T28490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.344798][T28490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.370735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.393158][ T4688] Dev loop2: unable to read RDB block 7 [ 1597.419496][T28490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.427533][ T4688] loop2: unable to read partition table [ 1597.456799][ T4688] loop2: partition table beyond EOD, truncated [ 1597.477359][T28490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.525540][T28490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.551537][ C1] vkms_vblank_simulate: vblank timer overrun [ 1597.607186][T24339] Bluetooth: hci2: command tx timeout [ 1597.639319][T28490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.900876][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1597.923477][T28490] hsr_slave_0: entered promiscuous mode [ 1597.957966][T28490] hsr_slave_1: entered promiscuous mode [ 1598.004709][T28490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1598.021856][T28490] Cannot create hsr debugfs directory [ 1598.039977][T28616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1598.047336][T28616] IPv6: NLM_F_CREATE should be set when creating new route [ 1598.076510][T28612] syz.1.5004: attempt to access beyond end of device [ 1598.076510][T28612] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1598.102693][T28619] fuse: Unknown parameter 'grou‚_id' [ 1598.152136][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1598.187364][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1598.213078][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.253466][ T9] usb 3-1: Product: syz [ 1598.265905][ T9] usb 3-1: Manufacturer: syz [ 1598.296231][ T9] usb 3-1: SerialNumber: syz [ 1598.322056][ T9] usb 3-1: config 0 descriptor?? [ 1598.551448][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1598.569811][T28624] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1598.881523][T28628] loop9: detected capacity change from 0 to 7 [ 1598.924477][T28628] Dev loop9: unable to read RDB block 7 [ 1598.933136][T28628] loop9: unable to read partition table [ 1598.955123][T28628] loop9: partition table beyond EOD, truncated [ 1598.970918][T28628] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1599.051395][T15820] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1599.290918][T15820] usb 4-1: Using ep0 maxpacket: 16 [ 1599.308095][T15820] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.347479][T15820] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1599.409873][T15820] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 1599.430632][T15820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.505008][T15820] usb 4-1: Product: syz [ 1599.515170][T15820] usb 4-1: Manufacturer: syz [ 1599.531041][T15820] usb 4-1: SerialNumber: syz [ 1599.546370][T15820] usb 4-1: config 0 descriptor?? [ 1600.052707][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1600.115476][T28490] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1600.129080][ T9] usb 3-1: USB disconnect, device number 108 [ 1600.179779][T28490] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1600.235759][T28490] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1600.306314][T28490] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1600.757493][T28490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.917536][T28490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.970320][T16803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.977507][T16803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.065074][T16803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.072292][T16803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.112160][T28666] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5015'. [ 1601.179256][ T5244] usb 4-1: USB disconnect, device number 89 [ 1601.582599][T28490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.962756][T28490] veth0_vlan: entered promiscuous mode [ 1602.009379][T28490] veth1_vlan: entered promiscuous mode [ 1602.257352][T28490] veth0_macvtap: entered promiscuous mode [ 1602.315283][T28490] veth1_macvtap: entered promiscuous mode [ 1602.364489][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.405628][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.441787][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.468636][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.487431][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.508001][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.539677][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.557298][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.578400][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1602.597867][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.618755][T28490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.682941][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.700064][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.718082][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.749714][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.780495][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.815892][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.830429][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.853627][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.870635][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.888573][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.909028][T28490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1602.933920][T28490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1602.968934][T28490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.022260][T28490] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.075962][T28490] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.123174][T28490] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.169285][T28490] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.540900][ T5236] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1603.608540][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.629993][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.738192][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.750990][ T5236] usb 4-1: Using ep0 maxpacket: 16 [ 1603.770799][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1603.799766][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 1603.799788][ T29] audit: type=1326 audit(1725672522.581:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1603.858492][ T29] audit: type=1326 audit(1725672522.621:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1603.887811][ T29] audit: type=1326 audit(1725672522.621:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1603.948912][ T29] audit: type=1326 audit(1725672522.621:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.014217][ T29] audit: type=1326 audit(1725672522.621:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.039109][ T29] audit: type=1326 audit(1725672522.621:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.066515][ T5236] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1604.075955][ T29] audit: type=1326 audit(1725672522.621:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.100903][ T5236] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1604.126686][ T5236] usb 4-1: can't read configurations, error -71 [ 1604.152448][ T29] audit: type=1326 audit(1725672522.621:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.250781][ T29] audit: type=1326 audit(1725672522.641:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.269621][T28730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4971'. [ 1604.439375][ T29] audit: type=1326 audit(1725672522.641:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.3.5023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037697cef9 code=0x7ffc0000 [ 1604.565138][T28730] netlink: 'syz.4.4971': attribute type 3 has an invalid length. [ 1605.500884][ T5236] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1605.764694][ T5236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1605.806356][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1605.863077][ T5236] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1605.908520][ T5236] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1605.917571][T24857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1605.959016][ T5236] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1605.977448][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.018395][ T5236] usb 4-1: Product: syz [ 1606.034203][ T5236] usb 4-1: Manufacturer: syz [ 1606.048434][ T5236] usb 4-1: SerialNumber: syz [ 1606.062605][ T5236] usb 4-1: config 0 descriptor?? [ 1606.096231][ T5236] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 1606.395100][T24857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.816476][T24857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.109683][T24857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.381837][ T5244] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1607.625019][ T5244] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.683272][ T5244] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1607.700826][ T5622] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1607.720555][ T5244] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1607.761098][T24857] bridge_slave_1: left allmulticast mode [ 1607.769843][ T5244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1607.799425][T24857] bridge_slave_1: left promiscuous mode [ 1607.813036][T24857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.830007][ T5244] usb 5-1: SerialNumber: syz [ 1607.844140][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.856626][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.867175][ T5294] usb 4-1: USB disconnect, device number 92 [ 1607.895575][T24857] bridge_slave_0: left allmulticast mode [ 1607.918719][ T9946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1607.942311][ T5622] usb 2-1: Using ep0 maxpacket: 32 [ 1607.942783][ T9946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1607.965195][ T9946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1607.973260][T24857] bridge_slave_0: left promiscuous mode [ 1607.980487][T24857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.990488][ T9946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1607.999750][ T9946] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1608.000876][ T5622] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.020145][ T9946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1608.137104][ T5244] usb 5-1: 0:2 : does not exist [ 1608.169322][ T5622] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1608.219464][ T5622] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1608.242341][ T5244] usb 5-1: USB disconnect, device number 106 [ 1608.270321][ T5622] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1608.304580][ T5622] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 1608.333343][ T5622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.354831][ T5622] usb 2-1: Product: syz [ 1608.364976][ T5622] usb 2-1: Manufacturer: syz [ 1608.367681][T18678] udevd[18678]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1608.369619][ T5622] usb 2-1: SerialNumber: syz [ 1608.407865][ T5622] usb 2-1: config 0 descriptor?? [ 1609.581245][T24857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.597387][T24857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.612845][T24857] bond0 (unregistering): Released all slaves [ 1609.655361][T28826] netlink: 'syz.4.5041': attribute type 1 has an invalid length. [ 1610.065975][T28823] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1610.083683][ T9946] Bluetooth: hci5: command tx timeout [ 1610.086327][T28823] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1610.193938][ T5622] usb 2-1: USB disconnect, device number 14 [ 1610.250060][T18678] udevd[18678]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.345719][T28823] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1610.361216][T28823] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1610.505987][T28823] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1610.521545][T28823] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1610.566348][T28823] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1610.574372][T28842] FAULT_INJECTION: forcing a failure. [ 1610.574372][T28842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1610.577325][T28823] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1610.607449][T28842] CPU: 0 UID: 0 PID: 28842 Comm: syz.3.5045 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1610.618299][T28842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1610.628371][T28842] Call Trace: [ 1610.631656][T28842] [ 1610.634675][T28842] dump_stack_lvl+0x241/0x360 [ 1610.639364][T28842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1610.644583][T28842] ? __pfx__printk+0x10/0x10 [ 1610.649199][T28842] ? __pfx_lock_release+0x10/0x10 [ 1610.654243][T28842] ? __local_bh_enable_ip+0x168/0x200 [ 1610.659632][T28842] ? copy_fpstate_to_sigframe+0x175/0xd90 [ 1610.665374][T28842] should_fail_ex+0x3b0/0x4e0 [ 1610.670078][T28842] copy_fpstate_to_sigframe+0xa87/0xd90 [ 1610.675666][T28842] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1610.681755][T28842] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1610.688110][T28842] ? __pfx_lock_acquire+0x10/0x10 [ 1610.693158][T28842] ? do_raw_spin_lock+0x14f/0x370 [ 1610.698199][T28842] ? fpu__alloc_mathframe+0xab/0x130 [ 1610.703504][T28842] get_sigframe+0x55d/0x700 [ 1610.708154][T28842] ? __pfx_get_sigframe+0x10/0x10 [ 1610.713197][T28842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1610.719199][T28842] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1610.725550][T28842] ? _raw_spin_lock_irq+0xdf/0x120 [ 1610.730694][T28842] x64_setup_rt_frame+0x180/0xcc0 [ 1610.735748][T28842] ? lockdep_hardirqs_on+0x99/0x150 [ 1610.740960][T28842] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1610.746190][T28842] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1610.751756][T28842] ? __fget_files+0x29/0x470 [ 1610.756363][T28842] arch_do_signal_or_restart+0x458/0x860 [ 1610.762033][T28842] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1610.768238][T28842] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1610.774266][T28842] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1610.780009][T28842] syscall_exit_to_user_mode+0xc9/0x370 [ 1610.785575][T28842] do_syscall_64+0x100/0x230 [ 1610.790187][T28842] ? clear_bhb_loop+0x35/0x90 [ 1610.794888][T28842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1610.800805][T28842] RIP: 0033:0x7f037697cef7 [ 1610.805241][T28842] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1610.824971][T28842] RSP: 002b:00007f03776f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1610.833408][T28842] RAX: 0000000000000127 RBX: 00007f0376b35f80 RCX: 00007f037697cef9 [ 1610.841395][T28842] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 1610.849378][T28842] RBP: 00007f03776f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1610.857366][T28842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.865351][T28842] R13: 0000000000000000 R14: 00007f0376b35f80 R15: 00007f0376c5fa28 [ 1610.873351][T28842] [ 1611.184223][T28823] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1611.208143][T28823] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1611.517198][T28801] chnl_net:caif_netlink_parms(): no params data found [ 1611.779402][T28862] bridge1: entered promiscuous mode [ 1611.785546][T28862] bridge1: entered allmulticast mode [ 1612.161052][ T9946] Bluetooth: hci5: command tx timeout [ 1612.250820][T10853] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1612.343170][T28801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.356042][T28801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.371343][T28801] bridge_slave_0: entered allmulticast mode [ 1612.382514][T28801] bridge_slave_0: entered promiscuous mode [ 1612.428724][T28801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.438582][T28801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.446751][T28801] bridge_slave_1: entered allmulticast mode [ 1612.465718][T28801] bridge_slave_1: entered promiscuous mode [ 1612.520788][T10853] usb 4-1: Using ep0 maxpacket: 8 [ 1612.551900][T10853] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1612.587525][T10853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1612.603252][T28801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.641731][T10853] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1612.663957][T28801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.678009][T10853] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1612.692812][T10853] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1612.707727][T10853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.811730][T28801] team0: Port device team_slave_0 added [ 1612.853430][T28801] team0: Port device team_slave_1 added [ 1613.011597][T10853] usb 4-1: GET_CAPABILITIES returned 0 [ 1613.024213][T28801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.041231][T10853] usbtmc 4-1:16.0: can't read capabilities [ 1613.047515][T28801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.093518][T28801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.176444][T28801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.195156][T28801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.239830][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.248976][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.259004][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.268607][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.278177][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.287312][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.299084][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.310842][T28801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.321978][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.331283][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.344801][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.353922][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.369868][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.379018][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.388142][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.407032][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.416223][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1613.563684][T28801] hsr_slave_0: entered promiscuous mode [ 1613.592897][T28801] hsr_slave_1: entered promiscuous mode [ 1613.633649][T28801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1613.652842][T28801] Cannot create hsr debugfs directory [ 1614.078128][T28893] FAULT_INJECTION: forcing a failure. [ 1614.078128][T28893] name failslab, interval 1, probability 0, space 0, times 0 [ 1614.091755][T28893] CPU: 1 UID: 0 PID: 28893 Comm: syz.2.5050 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1614.102573][T28893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1614.112661][T28893] Call Trace: [ 1614.115948][T28893] [ 1614.118882][T28893] dump_stack_lvl+0x241/0x360 [ 1614.123699][T28893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.128907][T28893] ? __pfx__printk+0x10/0x10 [ 1614.133504][T28893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.139618][T28893] should_fail_ex+0x3b0/0x4e0 [ 1614.144316][T28893] should_failslab+0xac/0x100 [ 1614.149017][T28893] ? __alloc_skb+0x1c3/0x440 [ 1614.153626][T28893] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1614.159464][T28893] __alloc_skb+0x1c3/0x440 [ 1614.163911][T28893] ? __pfx___alloc_skb+0x10/0x10 [ 1614.168864][T28893] ? km_report+0x1f0/0x240 [ 1614.173306][T28893] ? __pfx_lock_release+0x10/0x10 [ 1614.178388][T28893] xfrm_alloc_compat+0x1b6/0x1690 [ 1614.183436][T28893] ? xfrm_get_translator+0x19/0x240 [ 1614.188656][T28893] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1614.194135][T28893] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 1614.199276][T28893] xfrm_send_policy_notify+0x1277/0x2360 [ 1614.204947][T28893] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1614.210954][T28893] ? xfrm_policy_insert+0x665/0x940 [ 1614.216177][T28893] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1614.221918][T28893] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1614.227178][T28893] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1614.233182][T28893] km_policy_notify+0x126/0x210 [ 1614.238062][T28893] ? km_policy_notify+0x2e/0x210 [ 1614.243034][T28893] xfrm_add_policy+0x54c/0x980 [ 1614.247823][T28893] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1614.253150][T28893] ? __nla_parse+0x40/0x60 [ 1614.257591][T28893] xfrm_user_rcv_msg+0x75b/0xa80 [ 1614.262561][T28893] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1614.268074][T28893] ? __mutex_trylock_common+0x183/0x2e0 [ 1614.273633][T28893] ? __pfx___might_resched+0x10/0x10 [ 1614.278946][T28893] netlink_rcv_skb+0x1e3/0x430 [ 1614.283725][T28893] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1614.289206][T28893] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1614.294543][T28893] xfrm_netlink_rcv+0x79/0x90 [ 1614.299248][T28893] netlink_unicast+0x7f6/0x990 [ 1614.304041][T28893] ? __pfx_netlink_unicast+0x10/0x10 [ 1614.309349][T28893] ? __virt_addr_valid+0x183/0x530 [ 1614.314478][T28893] ? __check_object_size+0x49c/0x900 [ 1614.319782][T28893] ? bpf_lsm_netlink_send+0x9/0x10 [ 1614.324919][T28893] netlink_sendmsg+0x8e4/0xcb0 [ 1614.329709][T28893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.335010][T28893] ? __import_iovec+0x536/0x820 [ 1614.339876][T28893] ? aa_sock_msg_perm+0x91/0x160 [ 1614.344847][T28893] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1614.350153][T28893] ? security_socket_sendmsg+0x87/0xb0 [ 1614.355636][T28893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1614.360940][T28893] __sock_sendmsg+0x221/0x270 [ 1614.365762][T28893] ____sys_sendmsg+0x525/0x7d0 [ 1614.370555][T28893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1614.375872][T28893] __sys_sendmsg+0x2b0/0x3a0 [ 1614.380487][T28893] ? __pfx___sys_sendmsg+0x10/0x10 [ 1614.385611][T28893] ? vfs_write+0x7c4/0xc90 [ 1614.390077][T28893] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1614.396422][T28893] ? do_syscall_64+0x100/0x230 [ 1614.401287][T28893] ? do_syscall_64+0xb6/0x230 [ 1614.405977][T28893] do_syscall_64+0xf3/0x230 [ 1614.410493][T28893] ? clear_bhb_loop+0x35/0x90 [ 1614.415293][T28893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.421204][T28893] RIP: 0033:0x7fd03e57cef9 [ 1614.425634][T28893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.445257][T28893] RSP: 002b:00007fd03f3c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1614.453686][T28893] RAX: ffffffffffffffda RBX: 00007fd03e735f80 RCX: 00007fd03e57cef9 [ 1614.461698][T28893] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 1614.469684][T28893] RBP: 00007fd03f3c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1614.477668][T28893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.485674][T28893] R13: 0000000000000000 R14: 00007fd03e735f80 R15: 00007fd03e85fa28 [ 1614.493680][T28893] [ 1614.534609][ T9946] Bluetooth: hci5: command tx timeout [ 1614.587472][T26327] usb 4-1: USB disconnect, device number 93 [ 1614.733858][T28895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1614.749622][T28895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1614.940023][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1614.940044][ T29] audit: type=1800 audit(1725672533.721:4036): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5051" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1615.516269][T28801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1615.556181][T28801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1615.567598][T28801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1615.594679][T28801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1615.944552][T28801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.034543][T28801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1616.065202][ T1064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1616.072393][ T1064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1616.114152][ T1064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1616.121361][ T1064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.387761][T28801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1616.561044][ T9946] Bluetooth: hci5: command tx timeout [ 1616.605080][T28801] veth0_vlan: entered promiscuous mode [ 1616.674181][T28801] veth1_vlan: entered promiscuous mode [ 1616.770856][T28801] veth0_macvtap: entered promiscuous mode [ 1616.796577][T28801] veth1_macvtap: entered promiscuous mode [ 1616.850305][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.873396][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.895140][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.918724][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.938493][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.959517][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1616.970256][T26002] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1616.971421][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1616.999659][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.011868][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.050814][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.081794][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1617.122698][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.162668][T28801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.190777][T26002] usb 4-1: Using ep0 maxpacket: 16 [ 1617.228061][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.232450][T26002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.270128][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.301798][T26002] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.319419][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.330813][T26002] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1617.361115][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.373015][T26002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.391123][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.413172][T26002] usb 4-1: config 0 descriptor?? [ 1617.419363][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.457989][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.500489][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.530802][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.570313][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.602628][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.661855][T26002] glorious 0003:22D4:1503.0036: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 1617.665004][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.713680][T28801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1617.750860][T28801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1617.784144][T28801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1617.819501][T28801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.838926][ T5244] usb 4-1: USB disconnect, device number 94 [ 1617.848802][T28801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.869293][T28801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.885202][T28801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.283020][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.289405][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.728662][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.735831][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.810853][T24339] Bluetooth: hci5: command 0x0406 tx timeout [ 1771.682454][ T30] INFO: task kworker/1:5:5290 blocked for more than 143 seconds. [ 1771.690343][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1771.711375][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1771.720119][ T30] task:kworker/1:5 state:D stack:19760 pid:5290 tgid:5290 ppid:2 flags:0x00004000 [ 1771.730430][ T30] Workqueue: events rfkill_global_led_trigger_worker [ 1771.737501][ T30] Call Trace: [ 1771.740892][ T30] [ 1771.743883][ T30] __schedule+0x1800/0x4a60 [ 1771.748461][ T30] ? __pfx___schedule+0x10/0x10 [ 1771.753463][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1771.759547][ T30] ? __pfx_lock_release+0x10/0x10 [ 1771.765071][ T30] ? kick_pool+0x1bd/0x620 [ 1771.769645][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1771.775380][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1771.781215][ T30] ? schedule+0x90/0x320 [ 1771.785514][ T30] schedule+0x14b/0x320 [ 1771.789720][ T30] schedule_preempt_disabled+0x13/0x30 [ 1771.795467][ T30] __mutex_lock+0x6a4/0xd70 [ 1771.800185][ T30] ? __mutex_lock+0x527/0xd70 [ 1771.806030][ T30] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1771.812521][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1771.817775][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1771.824051][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1771.830788][ T30] ? process_scheduled_works+0x945/0x1830 [ 1771.836580][ T30] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1771.843184][ T30] ? process_scheduled_works+0x945/0x1830 [ 1771.849188][ T30] process_scheduled_works+0xa2c/0x1830 [ 1771.854959][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1771.861125][ T30] ? assign_work+0x364/0x3d0 [ 1771.865769][ T30] worker_thread+0x86d/0xd10 [ 1771.870435][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1771.883617][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1771.888960][ T30] kthread+0x2f0/0x390 [ 1771.893475][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1771.898659][ T30] ? __pfx_kthread+0x10/0x10 [ 1771.903606][ T30] ret_from_fork+0x4b/0x80 [ 1771.908156][ T30] ? __pfx_kthread+0x10/0x10 [ 1771.913952][ T30] ret_from_fork_asm+0x1a/0x30 [ 1771.918983][ T30] [ 1771.922133][ T30] INFO: task syz.1.4104:24450 blocked for more than 143 seconds. [ 1771.929970][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1771.937964][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1771.946911][ T30] task:syz.1.4104 state:D stack:25488 pid:24450 tgid:24450 ppid:22647 flags:0x00004006 [ 1771.957474][ T30] Call Trace: [ 1771.960977][ T30] [ 1771.963991][ T30] __schedule+0x1800/0x4a60 [ 1771.968892][ T30] ? __pfx___schedule+0x10/0x10 [ 1771.974079][ T30] ? __pfx_lock_release+0x10/0x10 [ 1771.979184][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1771.984966][ T30] ? schedule+0x90/0x320 [ 1771.989408][ T30] schedule+0x14b/0x320 [ 1771.993820][ T30] schedule_preempt_disabled+0x13/0x30 [ 1771.999321][ T30] __mutex_lock+0x6a4/0xd70 [ 1772.004327][ T30] ? kobject_put+0x446/0x480 [ 1772.008983][ T30] ? __mutex_lock+0x527/0xd70 [ 1772.015289][ T30] ? rfkill_unregister+0xd0/0x230 [ 1772.020399][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1772.025643][ T30] ? __pfx_device_del+0x10/0x10 [ 1772.030539][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 1772.035939][ T30] rfkill_unregister+0xd0/0x230 [ 1772.040916][ T30] hci_unregister_dev+0x366/0x510 [ 1772.045993][ T30] vhci_release+0x83/0xd0 [ 1772.050354][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1772.055537][ T30] __fput+0x24a/0x8a0 [ 1772.059660][ T30] task_work_run+0x24f/0x310 [ 1772.064359][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1772.069506][ T30] ? do_exit+0xa2a/0x27f0 [ 1772.073997][ T30] ? kmem_cache_free+0x145/0x350 [ 1772.078997][ T30] do_exit+0xa2f/0x27f0 [ 1772.086298][ T30] ? __pfx_do_exit+0x10/0x10 [ 1772.091069][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1772.097110][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1772.103556][ T30] do_group_exit+0x207/0x2c0 [ 1772.108188][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1772.113596][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1772.118837][ T30] get_signal+0x16a1/0x1740 [ 1772.123780][ T30] ? __pfx_get_signal+0x10/0x10 [ 1772.128694][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1772.134347][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1772.139937][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1772.146206][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1772.152379][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1772.158148][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1772.164090][ T30] do_syscall_64+0x100/0x230 [ 1772.168732][ T30] ? clear_bhb_loop+0x35/0x90 [ 1772.173616][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.179552][ T30] RIP: 0033:0x7f4a3bfaefe5 [ 1772.184076][ T30] RSP: 002b:00007f4a3ce2ff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1772.195468][ T30] RAX: fffffffffffffdfc RBX: 00007f4a3c135f80 RCX: 00007f4a3bfaefe5 [ 1772.203870][ T30] RDX: 00007f4a3ce2ffc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1772.212081][ T30] RBP: 00007f4a3bfef01e R08: 0000000000000000 R09: 0000000000000000 [ 1772.220088][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1772.228148][ T30] R13: 0000000000000000 R14: 00007f4a3c135f80 R15: 00007f4a3c25fa28 [ 1772.236235][ T30] [ 1772.239314][ T30] INFO: task kworker/u8:3:24857 blocked for more than 143 seconds. [ 1772.257059][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1772.265867][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1772.274665][ T30] task:kworker/u8:3 state:D stack:22912 pid:24857 tgid:24857 ppid:2 flags:0x00004000 [ 1772.284969][ T30] Workqueue: netns cleanup_net [ 1772.289777][ T30] Call Trace: [ 1772.293180][ T30] [ 1772.296152][ T30] __schedule+0x1800/0x4a60 [ 1772.300854][ T30] ? __pfx___schedule+0x10/0x10 [ 1772.305754][ T30] ? __pfx_lock_release+0x10/0x10 [ 1772.310973][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1772.316476][ T30] ? kthread_data+0x52/0xd0 [ 1772.321556][ T30] ? schedule+0x90/0x320 [ 1772.325894][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1772.331173][ T30] ? schedule+0x90/0x320 [ 1772.335463][ T30] schedule+0x14b/0x320 [ 1772.339802][ T30] schedule_preempt_disabled+0x13/0x30 [ 1772.345396][ T30] __mutex_lock+0x6a4/0xd70 [ 1772.350024][ T30] ? kobject_put+0x446/0x480 [ 1772.355349][ T30] ? __mutex_lock+0x527/0xd70 [ 1772.360179][ T30] ? rfkill_unregister+0xd0/0x230 [ 1772.365375][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1772.370446][ T30] ? __pfx_device_del+0x10/0x10 [ 1772.375532][ T30] rfkill_unregister+0xd0/0x230 [ 1772.380474][ T30] wiphy_unregister+0x22a/0xb00 [ 1772.385448][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1772.391503][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 1772.396947][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 1772.403032][ T30] ? kfree+0x149/0x360 [ 1772.407138][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1772.414617][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 1772.420236][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1772.426703][ T30] hwsim_exit_net+0x5c1/0x670 [ 1772.431891][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1772.437148][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 1772.443083][ T30] cleanup_net+0x802/0xcc0 [ 1772.447541][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1772.452624][ T30] ? process_scheduled_works+0x945/0x1830 [ 1772.458390][ T30] process_scheduled_works+0xa2c/0x1830 [ 1772.465202][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1772.471296][ T30] ? assign_work+0x364/0x3d0 [ 1772.475954][ T30] worker_thread+0x86d/0xd10 [ 1772.480893][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1772.486878][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1772.492691][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1772.497874][ T30] kthread+0x2f0/0x390 [ 1772.502064][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1772.507215][ T30] ? __pfx_kthread+0x10/0x10 [ 1772.511944][ T30] ret_from_fork+0x4b/0x80 [ 1772.516496][ T30] ? __pfx_kthread+0x10/0x10 [ 1772.521361][ T30] ret_from_fork_asm+0x1a/0x30 [ 1772.526204][ T30] [ 1772.529272][ T30] INFO: task syz-executor:28018 blocked for more than 144 seconds. [ 1772.537338][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1772.545161][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1772.553914][ T30] task:syz-executor state:D stack:23680 pid:28018 tgid:28018 ppid:5225 flags:0x00004002 [ 1772.564450][ T30] Call Trace: [ 1772.567755][ T30] [ 1772.571772][ T30] __schedule+0x1800/0x4a60 [ 1772.576355][ T30] ? __pfx___schedule+0x10/0x10 [ 1772.581384][ T30] ? __pfx_lock_release+0x10/0x10 [ 1772.586451][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1772.592016][ T30] ? schedule+0x90/0x320 [ 1772.596289][ T30] schedule+0x14b/0x320 [ 1772.600471][ T30] schedule_preempt_disabled+0x13/0x30 [ 1772.606641][ T30] __mutex_lock+0x6a4/0xd70 [ 1772.611617][ T30] ? kobject_put+0x446/0x480 [ 1772.616260][ T30] ? __mutex_lock+0x527/0xd70 [ 1772.621104][ T30] ? rfkill_unregister+0xd0/0x230 [ 1772.626170][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1772.633614][ T30] ? __pfx_device_del+0x10/0x10 [ 1772.638513][ T30] ? hci_sock_dev_event+0x2ef/0x5f0 [ 1772.644096][ T30] rfkill_unregister+0xd0/0x230 [ 1772.649000][ T30] hci_unregister_dev+0x366/0x510 [ 1772.654188][ T30] vhci_release+0x83/0xd0 [ 1772.658588][ T30] ? __pfx_vhci_release+0x10/0x10 [ 1772.663710][ T30] __fput+0x24a/0x8a0 [ 1772.667742][ T30] task_work_run+0x24f/0x310 [ 1772.672637][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1772.678255][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1772.684851][ T30] do_exit+0xa2f/0x27f0 [ 1772.689053][ T30] ? __pfx_do_exit+0x10/0x10 [ 1772.693762][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1772.699797][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1772.706247][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1772.711537][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1772.716784][ T30] do_group_exit+0x207/0x2c0 [ 1772.721995][ T30] __x64_sys_exit_group+0x3f/0x40 [ 1772.727177][ T30] x64_sys_call+0x2634/0x2640 [ 1772.731942][ T30] do_syscall_64+0xf3/0x230 [ 1772.736502][ T30] ? clear_bhb_loop+0x35/0x90 [ 1772.741633][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.747606][ T30] RIP: 0033:0x7fd03e57cef9 [ 1772.753721][ T30] RSP: 002b:00007fff6c524258 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1772.762563][ T30] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fd03e57cef9 [ 1772.770567][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1772.778814][ T30] RBP: 00007fd03e736a38 R08: 00007fff6c521ff7 R09: 000000000000000c [ 1772.786871][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 1772.795939][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1772.804079][ T30] [ 1772.807148][ T30] INFO: task syz.1.5037:28781 blocked for more than 144 seconds. [ 1772.815006][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1772.822826][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1772.831757][ T30] task:syz.1.5037 state:D stack:25456 pid:28781 tgid:28781 ppid:22647 flags:0x00004006 [ 1772.842032][ T30] Call Trace: [ 1772.845331][ T30] [ 1772.848265][ T30] __schedule+0x1800/0x4a60 [ 1772.852887][ T30] ? __pfx___schedule+0x10/0x10 [ 1772.857783][ T30] ? __pfx_lock_release+0x10/0x10 [ 1772.862980][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1772.868502][ T30] ? schedule+0x90/0x320 [ 1772.872842][ T30] schedule+0x14b/0x320 [ 1772.877040][ T30] schedule_preempt_disabled+0x13/0x30 [ 1772.882909][ T30] __mutex_lock+0x6a4/0xd70 [ 1772.887464][ T30] ? kobject_put+0x446/0x480 [ 1772.892176][ T30] ? __mutex_lock+0x527/0xd70 [ 1772.896899][ T30] ? rfkill_unregister+0xd0/0x230 [ 1772.903041][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1772.908114][ T30] ? __pfx_device_del+0x10/0x10 [ 1772.913059][ T30] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 1772.919079][ T30] rfkill_unregister+0xd0/0x230 [ 1772.924068][ T30] nfc_unregister_device+0x96/0x2a0 [ 1772.929307][ T30] virtual_ncidev_close+0x59/0x90 [ 1772.934438][ T30] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1772.940196][ T30] __fput+0x24a/0x8a0 [ 1772.944339][ T30] task_work_run+0x24f/0x310 [ 1772.949196][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1772.954405][ T30] ? switch_task_namespaces+0xe4/0x110 [ 1772.959902][ T30] do_exit+0xa2f/0x27f0 [ 1772.964367][ T30] ? __pfx_do_exit+0x10/0x10 [ 1772.969002][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1772.974501][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1772.981093][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1772.987487][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1772.992745][ T30] do_group_exit+0x207/0x2c0 [ 1772.997380][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1773.002967][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1773.008202][ T30] get_signal+0x16a1/0x1740 [ 1773.014105][ T30] ? __pfx_get_signal+0x10/0x10 [ 1773.019001][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1773.024568][ T30] arch_do_signal_or_restart+0x96/0x860 [ 1773.030150][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1773.036385][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1773.042688][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1773.048444][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 1773.054099][ T30] do_syscall_64+0x100/0x230 [ 1773.058728][ T30] ? clear_bhb_loop+0x35/0x90 [ 1773.063534][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.069462][ T30] RIP: 0033:0x7f4a3bfaefe5 [ 1773.073986][ T30] RSP: 002b:00007f4a3c25fb20 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1773.082539][ T30] RAX: 0000000000000000 RBX: 00007f4a3c135f80 RCX: 00007f4a3bfaefe5 [ 1773.090545][ T30] RDX: 00007f4a3c25fb60 RSI: 0000000000000000 RDI: 0000000000000000 [ 1773.098618][ T30] RBP: 00007f4a3c137a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 1773.106687][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000018974c [ 1773.114743][ T30] R13: 00007f4a3c25fc90 R14: 0000000000000bea R15: ffffffffffffffff [ 1773.124358][ T30] [ 1773.127420][ T30] INFO: task syz-executor:28801 blocked for more than 144 seconds. [ 1773.135402][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1773.143142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1773.154894][ T30] task:syz-executor state:D stack:20336 pid:28801 tgid:28801 ppid:28775 flags:0x00000000 [ 1773.165144][ T30] Call Trace: [ 1773.168431][ T30] [ 1773.171468][ T30] __schedule+0x1800/0x4a60 [ 1773.176040][ T30] ? __pfx___schedule+0x10/0x10 [ 1773.181031][ T30] ? __pfx_lock_release+0x10/0x10 [ 1773.186105][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1773.191709][ T30] ? schedule+0x90/0x320 [ 1773.195997][ T30] schedule+0x14b/0x320 [ 1773.200185][ T30] schedule_preempt_disabled+0x13/0x30 [ 1773.206443][ T30] __mutex_lock+0x6a4/0xd70 [ 1773.211058][ T30] ? __mutex_lock+0x527/0xd70 [ 1773.215783][ T30] ? rfkill_fop_open+0x131/0x850 [ 1773.220863][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1773.225930][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1773.232468][ T30] rfkill_fop_open+0x131/0x850 [ 1773.237306][ T30] ? module_put+0x13a/0x2d0 [ 1773.241923][ T30] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1773.247248][ T30] misc_open+0x313/0x390 [ 1773.251593][ T30] chrdev_open+0x5b0/0x630 [ 1773.256081][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1773.261220][ T30] ? security_file_open+0x51a/0x750 [ 1773.266483][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1773.271501][ T30] do_dentry_open+0x970/0x1440 [ 1773.276329][ T30] vfs_open+0x3e/0x330 [ 1773.280445][ T30] path_openat+0x2b3e/0x3470 [ 1773.285676][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1773.293861][ T30] ? __lock_acquire+0x137a/0x2040 [ 1773.298973][ T30] ? __pfx_path_openat+0x10/0x10 [ 1773.304097][ T30] do_filp_open+0x235/0x490 [ 1773.308759][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1773.313909][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1773.318804][ T30] ? alloc_fd+0x5a1/0x640 [ 1773.323327][ T30] do_sys_openat2+0x13e/0x1d0 [ 1773.328053][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1773.333334][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1773.339356][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1773.346952][ T30] __x64_sys_openat+0x247/0x2a0 [ 1773.351971][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1773.357405][ T30] ? do_syscall_64+0x100/0x230 [ 1773.362294][ T30] ? do_syscall_64+0xb6/0x230 [ 1773.367019][ T30] do_syscall_64+0xf3/0x230 [ 1773.371717][ T30] ? clear_bhb_loop+0x35/0x90 [ 1773.376442][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.382480][ T30] RIP: 0033:0x7fb7a4d7b890 [ 1773.386978][ T30] RSP: 002b:00007fb7a505fea0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1773.395722][ T30] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb7a4d7b890 [ 1773.404173][ T30] RDX: 0000000000000002 RSI: 00007fb7a4def8f6 RDI: 00000000ffffff9c [ 1773.412296][ T30] RBP: 00007fb7a4def8f6 R08: 0000000000000000 R09: 0000000000000000 [ 1773.420297][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 1773.428452][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1773.436504][ T30] [ 1773.439535][ T30] INFO: task syz.4.5041:28823 blocked for more than 145 seconds. [ 1773.447466][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1773.456031][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1773.464849][ T30] task:syz.4.5041 state:D stack:23632 pid:28823 tgid:28822 ppid:28490 flags:0x00004006 [ 1773.475136][ T30] Call Trace: [ 1773.478446][ T30] [ 1773.481575][ T30] __schedule+0x1800/0x4a60 [ 1773.486159][ T30] ? __pfx___schedule+0x10/0x10 [ 1773.491130][ T30] ? __pfx_lock_release+0x10/0x10 [ 1773.496195][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1773.501799][ T30] ? schedule+0x90/0x320 [ 1773.506100][ T30] schedule+0x14b/0x320 [ 1773.510297][ T30] schedule_preempt_disabled+0x13/0x30 [ 1773.515890][ T30] __mutex_lock+0x6a4/0xd70 [ 1773.520444][ T30] ? __mutex_lock+0x527/0xd70 [ 1773.525286][ T30] ? nfc_rfkill_set_block+0x50/0x310 [ 1773.530690][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1773.535799][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1773.541155][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1773.547098][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1773.553555][ T30] nfc_rfkill_set_block+0x50/0x310 [ 1773.558712][ T30] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1773.565747][ T30] rfkill_set_block+0x1f1/0x440 [ 1773.570713][ T30] rfkill_fop_write+0x5bb/0x790 [ 1773.575623][ T30] ? common_file_perm+0x1a6/0x210 [ 1773.580774][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1773.586190][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 1773.591672][ T30] ? rw_verify_area+0x1d2/0x6b0 [ 1773.596744][ T30] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1773.602450][ T30] vfs_write+0x2a2/0xc90 [ 1773.606752][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1773.611634][ T30] ? do_futex+0x392/0x560 [ 1773.616041][ T30] ? __fget_files+0x29/0x470 [ 1773.620754][ T30] ? __fget_files+0x3f6/0x470 [ 1773.625481][ T30] ? __fget_files+0x29/0x470 [ 1773.630133][ T30] ksys_write+0x1a0/0x2c0 [ 1773.634593][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1773.639483][ T30] ? do_syscall_64+0x100/0x230 [ 1773.644412][ T30] ? do_syscall_64+0xb6/0x230 [ 1773.649135][ T30] do_syscall_64+0xf3/0x230 [ 1773.653708][ T30] ? clear_bhb_loop+0x35/0x90 [ 1773.658465][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.664484][ T30] RIP: 0033:0x7f3c2877cef9 [ 1773.668927][ T30] RSP: 002b:00007f3c295eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1773.677751][ T30] RAX: ffffffffffffffda RBX: 00007f3c28935f80 RCX: 00007f3c2877cef9 [ 1773.686281][ T30] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000004 [ 1773.694564][ T30] RBP: 00007f3c287ef01e R08: 0000000000000000 R09: 0000000000000000 [ 1773.702658][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1773.710717][ T30] R13: 0000000000000000 R14: 00007f3c28935f80 R15: 00007f3c28a5fa28 [ 1773.718745][ T30] [ 1773.721833][ T30] INFO: task syz-executor:28938 blocked for more than 145 seconds. [ 1773.729727][ T30] Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1773.737896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1773.746971][ T30] task:syz-executor state:D stack:23680 pid:28938 tgid:28938 ppid:5225 flags:0x00000000 [ 1773.757387][ T30] Call Trace: [ 1773.760892][ T30] [ 1773.763876][ T30] __schedule+0x1800/0x4a60 [ 1773.768469][ T30] ? __pfx___schedule+0x10/0x10 [ 1773.773563][ T30] ? __pfx_lock_release+0x10/0x10 [ 1773.778816][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1773.784723][ T30] ? schedule+0x90/0x320 [ 1773.789018][ T30] schedule+0x14b/0x320 [ 1773.793512][ T30] schedule_preempt_disabled+0x13/0x30 [ 1773.799291][ T30] __mutex_lock+0x6a4/0xd70 [ 1773.803917][ T30] ? __mutex_lock+0x527/0xd70 [ 1773.808629][ T30] ? rfkill_register+0x34/0x8c0 [ 1773.813581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1773.818691][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1773.824187][ T30] ? device_initialize+0x266/0x460 [ 1773.829346][ T30] rfkill_register+0x34/0x8c0 [ 1773.834172][ T30] hci_register_dev+0x407/0x8b0 [ 1773.839076][ T30] vhci_create_device+0x35b/0x6a0 [ 1773.844518][ T30] vhci_write+0x3d1/0x490 [ 1773.848904][ T30] vfs_write+0xa72/0xc90 [ 1773.853304][ T30] ? __pfx_vhci_write+0x10/0x10 [ 1773.858310][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1773.863217][ T30] ksys_write+0x1a0/0x2c0 [ 1773.867600][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1773.872867][ T30] ? do_syscall_64+0x100/0x230 [ 1773.877698][ T30] ? do_syscall_64+0xb6/0x230 [ 1773.882865][ T30] do_syscall_64+0xf3/0x230 [ 1773.887420][ T30] ? clear_bhb_loop+0x35/0x90 [ 1773.892276][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.898392][ T30] RIP: 0033:0x7f8ad3b7b9a0 [ 1773.902895][ T30] RSP: 002b:00007ffcf37ddaf8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1773.911410][ T30] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8ad3b7b9a0 [ 1773.919410][ T30] RDX: 0000000000000002 RSI: 00007ffcf37ddb0a RDI: 00000000000000ca [ 1773.927866][ T30] RBP: 00007f8ad3d36a38 R08: 0000000000000000 R09: 0000000000000000 [ 1773.935970][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 1773.944082][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1773.953128][ T30] [ 1773.956195][ T30] [ 1773.956195][ T30] Showing all locks held in the system: [ 1773.964318][ T30] 1 lock held by khungtaskd/30: [ 1773.969212][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1773.979245][ T30] 2 locks held by getty/4992: [ 1773.984019][ T30] #0: ffff8880354590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1773.993888][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1774.004298][ T30] 3 locks held by kworker/1:5/5290: [ 1774.009549][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1774.021058][ T30] #1: ffffc90003a7fd00 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1774.034686][ T30] #2: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1774.046110][ T30] 1 lock held by syz.1.4104/24450: [ 1774.051478][ T30] #0: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1774.062052][ T30] 4 locks held by kworker/u8:3/24857: [ 1774.067460][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1774.078713][ T30] #1: ffffc90004397d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1774.089514][ T30] #2: ffffffff8fc7f290 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1774.099109][ T30] #3: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1774.109380][ T30] 1 lock held by syz-executor/28018: [ 1774.114785][ T30] #0: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1774.125306][ T30] 2 locks held by syz.1.5037/28781: [ 1774.130545][ T30] #0: ffff88806ffa8100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x63/0x2a0 [ 1774.140506][ T30] #1: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xd0/0x230 [ 1774.151408][ T30] 2 locks held by syz-executor/28801: [ 1774.156799][ T30] #0: ffffffff8f1469e8 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x5c/0x390 [ 1774.165500][ T30] #1: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x131/0x850 [ 1774.176068][ T30] 2 locks held by syz.4.5041/28823: [ 1774.181399][ T30] #0: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a9/0x790 [ 1774.191645][ T30] #1: ffff88806ffa8100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x50/0x310 [ 1774.201459][ T30] 2 locks held by syz-executor/28938: [ 1774.206892][ T30] #0: ffff88805c8b4918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x34/0x6a0 [ 1774.217046][ T30] #1: ffffffff8ff63448 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x34/0x8c0 [ 1774.227078][ T30] [ 1774.229415][ T30] ============================================= [ 1774.229415][ T30] [ 1774.237912][ T30] NMI backtrace for cpu 1 [ 1774.242295][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1774.252843][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1774.262936][ T30] Call Trace: [ 1774.266232][ T30] [ 1774.269167][ T30] dump_stack_lvl+0x241/0x360 [ 1774.273870][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.279109][ T30] ? __pfx__printk+0x10/0x10 [ 1774.283730][ T30] ? vprintk_emit+0x667/0x7c0 [ 1774.288494][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1774.293548][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1774.298537][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1774.304018][ T30] ? _printk+0xd5/0x120 [ 1774.308196][ T30] ? __pfx__printk+0x10/0x10 [ 1774.312817][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1774.317712][ T30] ? __pfx__printk+0x10/0x10 [ 1774.322333][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1774.327403][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1774.333417][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1774.339475][ T30] watchdog+0xff4/0x1040 [ 1774.343751][ T30] ? watchdog+0x1ea/0x1040 [ 1774.348204][ T30] ? __pfx_watchdog+0x10/0x10 [ 1774.352902][ T30] kthread+0x2f0/0x390 [ 1774.357012][ T30] ? __pfx_watchdog+0x10/0x10 [ 1774.361725][ T30] ? __pfx_kthread+0x10/0x10 [ 1774.366431][ T30] ret_from_fork+0x4b/0x80 [ 1774.370878][ T30] ? __pfx_kthread+0x10/0x10 [ 1774.375499][ T30] ret_from_fork_asm+0x1a/0x30 [ 1774.380299][ T30] [ 1774.383736][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1774.389006][ C0] NMI backtrace for cpu 0 [ 1774.389022][ C0] CPU: 0 UID: 0 PID: 2477 Comm: kworker/u8:8 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1774.389045][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1774.389057][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1774.389090][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 1774.389121][ C0] Code: 8b 04 24 65 48 8b 14 25 00 d7 03 00 65 8b 05 00 46 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 82 f8 15 00 00 83 f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 1774.389137][ C0] RSP: 0018:ffffc900094d76f8 EFLAGS: 00000246 [ 1774.389152][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802f573c00 [ 1774.389165][ C0] RDX: ffff88802f573c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1774.389178][ C0] RBP: ffffc900094d78e0 R08: ffffffff8187616f R09: 1ffffffff2030f25 [ 1774.389193][ C0] R10: dffffc0000000000 R11: fffffbfff2030f26 R12: dffffc0000000000 [ 1774.389207][ C0] R13: 0000000000000000 R14: ffffffff901870e8 R15: 0000000000000003 [ 1774.389219][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1774.389235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1774.389249][ C0] CR2: 000055b663f55248 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1774.389266][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1774.389277][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1774.389289][ C0] Call Trace: [ 1774.389297][ C0] [ 1774.389304][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1774.389330][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1774.389363][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1774.389387][ C0] ? nmi_handle+0x2a/0x5a0 [ 1774.389415][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1774.389438][ C0] ? nmi_handle+0x14f/0x5a0 [ 1774.389456][ C0] ? nmi_handle+0x2a/0x5a0 [ 1774.389475][ C0] ? __sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 1774.389500][ C0] ? default_do_nmi+0x63/0x160 [ 1774.389525][ C0] ? exc_nmi+0x123/0x1f0 [ 1774.389549][ C0] ? end_repeat_nmi+0xf/0x53 [ 1774.389577][ C0] ? smp_call_function_many_cond+0xff/0x29d0 [ 1774.389599][ C0] ? __sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 1774.389626][ C0] ? __sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 1774.389654][ C0] ? __sanitizer_cov_trace_const_cmp4+0x2f/0x90 [ 1774.389680][ C0] [ 1774.389686][ C0] [ 1774.389693][ C0] smp_call_function_many_cond+0xff/0x29d0 [ 1774.389715][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x790 [ 1774.389736][ C0] ? __text_poke+0xafd/0xd30 [ 1774.389757][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1774.389778][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x790 [ 1774.389804][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 1774.389826][ C0] ? perf_event_text_poke+0x258/0x330 [ 1774.389848][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1774.389869][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1774.389888][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 1774.389907][ C0] ? __pfx___might_resched+0x10/0x10 [ 1774.389934][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1774.389956][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1774.389977][ C0] text_poke_bp_batch+0x726/0xb30 [ 1774.390006][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x790 [ 1774.390027][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1774.390054][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1774.390084][ C0] text_poke_finish+0x30/0x50 [ 1774.390105][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1774.390130][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 1774.390157][ C0] static_key_enable+0x1a/0x20 [ 1774.390180][ C0] toggle_allocation_gate+0xb5/0x250 [ 1774.390209][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1774.390237][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1774.390270][ C0] ? process_scheduled_works+0x945/0x1830 [ 1774.390293][ C0] process_scheduled_works+0xa2c/0x1830 [ 1774.390335][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1774.390370][ C0] ? assign_work+0x364/0x3d0 [ 1774.390396][ C0] worker_thread+0x86d/0xd10 [ 1774.390430][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1774.390457][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1774.390482][ C0] kthread+0x2f0/0x390 [ 1774.390498][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1774.390522][ C0] ? __pfx_kthread+0x10/0x10 [ 1774.390539][ C0] ret_from_fork+0x4b/0x80 [ 1774.390564][ C0] ? __pfx_kthread+0x10/0x10 [ 1774.390581][ C0] ret_from_fork_asm+0x1a/0x30 [ 1774.390623][ C0] [ 1774.400688][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1774.400710][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 1774.400739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1774.400755][ T30] Call Trace: [ 1774.400766][ T30] [ 1774.400778][ T30] dump_stack_lvl+0x241/0x360 [ 1774.400815][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.400844][ T30] ? __pfx__printk+0x10/0x10 [ 1774.400866][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1774.400910][ T30] ? vscnprintf+0x5d/0x90 [ 1774.400943][ T30] panic+0x349/0x860 [ 1774.400969][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1774.401004][ T30] ? __pfx_panic+0x10/0x10 [ 1774.401025][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1774.401054][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1774.401089][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1774.401117][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1774.401147][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1774.401183][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1774.401219][ T30] watchdog+0x1033/0x1040 [ 1774.401256][ T30] ? watchdog+0x1ea/0x1040 [ 1774.401297][ T30] ? __pfx_watchdog+0x10/0x10 [ 1774.401331][ T30] kthread+0x2f0/0x390 [ 1774.401353][ T30] ? __pfx_watchdog+0x10/0x10 [ 1774.401387][ T30] ? __pfx_kthread+0x10/0x10 [ 1774.401411][ T30] ret_from_fork+0x4b/0x80 [ 1774.401444][ T30] ? __pfx_kthread+0x10/0x10 [ 1774.401468][ T30] ret_from_fork_asm+0x1a/0x30 [ 1774.401518][ T30] [ 1774.406177][ T30] Kernel Offset: disabled [ 1774.983746][ T30] Rebooting in 86400 seconds..