last executing test programs: 16.8070606s ago: executing program 3 (id=6047): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="8cea4e9e", 0x4, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "2f16ed963ce3d76284dc8967a1981027e4122e73c72d87e1c331ebec8464c2eb", 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001"], 0x48) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$dupfd(r5, 0x406, r1) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000048000), 0x0) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "8cb2ef287ad8b0080047563e765514e1c634a4dbebb105255be512a15914cf3924e7d9721eb77e71f610849e972dc50b15e8c5f4ed39cf58517fe38ba63f2801b457418bacfb5c7298e861301b96cbaf61db5454d8298d36d566bc6a8118"}, 0x69) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r3, 0x0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"f38dac620a983172da6c4749376e35d0cf406303e51ba65f9a91f151aafa5769", r3}) 16.528857111s ago: executing program 3 (id=6051): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xec, 0x10, 0x633, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}}, {@in6=@loopback, 0xfffffffd, 0x32}, @in=@local, {}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x0, 0xa, 0x4}}, 0xec}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0) (fail_nth: 6) 15.969053184s ago: executing program 3 (id=6054): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2}, 0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r2, 0x21f7bf90}, 0x8) 15.877242167s ago: executing program 3 (id=6056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="92") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4, 0x0, 0x0, 0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000fcffffff00", 0x8) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = eventfd2(0x5, 0x80800) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000100)={0x0, r6}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r6}) write$eventfd(r6, &(0x7f00000000c0), 0x8) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x147982, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r7, 0x0) 14.753345577s ago: executing program 3 (id=6063): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "c9c0e2f5"}, @local=@item_4={0x3, 0x2, 0x0, "71b9a7ab"}, @main=@item_4={0x3, 0x0, 0x0, "1000090e"}]}}, 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xed) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/udplite6\x00') (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x200}, {}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x10000, 0x0, 0x0, 0xb8dda8e490f5d67c, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0xb4, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e561ab25d6239846a7a09c3b5d"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xb}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @chandef_params, @NL80211_ATTR_MAC={0xa, 0x6, @random="374f85d8dc7c"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe438, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x3}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x4c}}, 0x4000040) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES16=r7], 0x28}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x7f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x20004000) 12.668987331s ago: executing program 3 (id=6066): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x0) 12.20253909s ago: executing program 2 (id=6069): r0 = epoll_create(0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x8, r1, &(0x7f0000000100)={0x5000201a}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xf, {0xf, 0x0, "a7ea3163fdfa964e45d3456808"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x1882, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x80000, 0x11b}, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fddbdf251400000018000180140002006e657464657673696d3000000000000008001400adf4b75c080010000000000008000f000000010008000e"], 0x4c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r8, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000d40)="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", 0x16c}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c810f1e6a6c98f0eaed1d795bc3495ea0b47ca0c44465d4b8b46dac524f2e179f22b486aaef3b7e436e9dc1ecdf10a3a2d59c839a8185d2fa5d802e15426193f256bb89fa695b0c2c5110a54f63b1a930f3bd73111ce745c418dd1b44e29bf1a828d1", 0x173}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)="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", 0x17a}, {&(0x7f0000000180)="03d54d849954097d5aeaacbe306754b3937816912081916a7d18908aea81d325a9c76d02f9eeed9daa3bb047de3228def84ccd1a1064d9ae9aab7e78b908af54f2e120c8d2bed7617a7a7533b1ee8fa46b1d91f115811a404eb511e02ae2ba718366c778ec0e6fe7e98faf627f47009fa4f5f1de8519313ebf6b0d48864d60a44a2a1fc8a2393995a0dc8f4f237a8f00698a9c9e581cc8f8c2befd33f93fed416e062a3f8e5350ffae9f3d1d7b8e349ae7f18cfb910da9685a5319fd2e13d10e48bc4f6b18a19b65baae27e8cfa98efe0a", 0xd1}, {0x0}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r8, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r9, @ANYBLOB="b1000000050000e2280012000c00010076657468"], 0x48}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1817000014002101000000000000000002020000", @ANYRES32=r11], 0x18}, 0x1, 0x300000000000000}, 0x0) 9.043788163s ago: executing program 2 (id=6078): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 8.929646603s ago: executing program 2 (id=6079): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891c, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in6={0x21, 0x0, 0x1c, 0x2, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) syz_usb_connect(0x0, 0x26, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x54, 0x6e, 0xfd, 0x20, 0x13d3, 0x3395, 0x9e61, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xb0, 0xc1, 0x0, [@generic={0x2, 0x2}]}}]}}]}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r4, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b0ac4ff0000000071103e000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.413041785s ago: executing program 0 (id=6082): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000200000000000000ff"]) 6.121306707s ago: executing program 0 (id=6084): r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000002100)=@abs, &(0x7f0000002180)=0x6e) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f000000a300), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000f40)=ANY=[@ANYBLOB="7a0af8ff75250000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000007000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651064d08dde084e0c7ffddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e13b2f9614d547244a22000000000000db453620ce72d75946c0b638d91dbef661935839c77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef4a96279856076ff7ac9ba09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be22dda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed5441218c54d0b3e9f298392b3276fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314d7bb31ad9713d249499ed0d8a24abd57e052888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f000000eaffffffffffffff0000000000c9b46ff99a039eda74f74fe532dcfcd2c315b626fd768dbdf00fd532575767a7bca3968f50c20cfcaf91ab14b77f87e476bcf45fff904531adea62a517702743bf3492c8952c8e1fc37674de47d5881750516404c647fe02085b1a9603227411b17b6c7bc84fdfa0cfce589550df8faeeae5ca5024b374da260be559a741d22370373392ed74a7d1aff96a5b59775237f50c6bd8e0c4a7666be5962cd0931845e659a03a48fe85d370d9b6b755a2f66989da880c899d4d1c6757be6baffdce49b8c81f43d933549289dd475e39f399f6822a111ed8142b5dd2c01a15c949d86bd93b580800"/798], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff96, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f000000a340)={0x0, 0x34324258}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x20000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000000)={0x24, 0x290, 0x260, "c5a9d2fc065e7ce6b663b86262a5b32153450367456444c9104de25cb3cfa2ee4ed3999d"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x2d, 0x2, 0x0, 0x6}]}) 5.896037712s ago: executing program 0 (id=6085): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x874, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x41, 0x0, "58f0a57b2acd7844503dbda53e49dbbe1d5780225329be44531493386d0314b2350f91c6404fcec90e0ab0c335d2b780da772de206ba8139f981b853ea3ff9119a8abb5e7d709d1d078737c76de57e27"}, 0xd8) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x16, 0x1, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}, 0x0) 5.649061969s ago: executing program 2 (id=6086): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/4124, 0x101c}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001140)=""/214, 0xd6}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000002640)=""/92, 0x5c}], 0x7}, 0x0) 5.471496816s ago: executing program 0 (id=6087): bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="370000002cc9"], 0x20) r0 = memfd_secret(0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x47) 5.44074709s ago: executing program 4 (id=6088): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 5.228902871s ago: executing program 0 (id=6089): r0 = socket(0x10, 0x803, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xeb, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r5}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0x10f000, 0x0, 0x1, r5}) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x1, r6, 0x1}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002500)=ANY=[@ANYBLOB="180000003a00b59500000000000000000a"], 0x18}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) recvmsg$can_bcm(r7, 0x0, 0x20) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 4.919369195s ago: executing program 4 (id=6091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002600)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "a8b48e", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@synack={0x1e, 0x10, 0x0, 0x3}]}}}}}}}}, 0x0) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={0x0, @isdn={0x22, 0xc, 0x9, 0x9}, @qipcrtr={0x2a, 0x2, 0x7fff}, @l2={0x1f, 0x7f, @any, 0x8001}, 0x23a, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth1_vlan\x00', 0x5139, 0x9d1, 0xdb62}) 4.736180717s ago: executing program 1 (id=6092): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e08010011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 4.536998473s ago: executing program 2 (id=6093): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000200000000000000ff"]) 4.48281681s ago: executing program 1 (id=6094): socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109b01) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) syz_usb_disconnect(0xffffffffffffffff) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='V', 0x1}], 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/21, 0x15}}], 0x1, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x11c, 0xc8, 0x8, 0x0, 0x5803, 0x270, 0x2e8, 0x2e8, 0x270, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'geneve0\x00', 'geneve1\x00'}, 0x0, 0xec, 0x11c, 0x0, {0x0, 0x2000000000000}, [@common=@eui64={{0x24}}, @common=@inet=@socket1={{0x24}, 0xc7c71a93f523f046}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xec, 0x154, 0x0, {}, [@common=@ipv6header={{0x24}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x394) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xd}, 0x1c) creat(&(0x7f0000000000)='./file0\x00', 0x104) 4.255084248s ago: executing program 4 (id=6095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000850}, 0x4040095) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x9281ef602e12bf1c) sendmsg$alg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000005c0)="6dd44b1ff2e089fc2630fa19b839fe89", 0x10}], 0x1, 0x0, 0x0, 0x80840}, 0xc0c0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000740)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000c40)=""/25, 0x19}], 0x1}, 0x5}], 0x1, 0x60, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000fa3000/0x2000)=nil, 0x2000, 0x7, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xd, 0x1f}}]}}}]}, 0x40}}, 0x0) 3.792899843s ago: executing program 4 (id=6096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, 0x7, &(0x7f0000000040)={[0x3, 0x4]}, 0xfffffffffffffcc5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) io_setup(0x6, &(0x7f0000001380)) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000380)={0x3ff}, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) setuid(0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) lseek(r3, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.841126948s ago: executing program 4 (id=6097): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002500), 0x0, 0x12021, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0xffffff7f) close_range(r0, 0xffffffffffffffff, 0x0) 1.652848724s ago: executing program 0 (id=6098): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e23, 0x0, @mcast2, 0x400}}}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001140)={'vcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f0000001180)={0x1d, r5}, 0x10) bind$can_raw(r4, &(0x7f0000000000), 0x10) close(0x3) 1.572865385s ago: executing program 4 (id=6099): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2}, 0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x2) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz1\x00', {0xec}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xba]}, 0x45c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="001c86ddfd0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111ccca490f4fd7a4fa6bc86f6a81b57f65e6136fcf9abb810cd81f96d2a83396e515f3cdc333fcc8086fab2d982e9de69cac8bed4f8d0e7c61c7ff9b8e95bba90772378b04df5721b5d1e9c21efc934a8852eb29337a8098395b9f1196a74624ee3a74255f567bbd6729f1531df5fea5ed56aaefc7a339b698b7"], 0xffe) 1.288086601s ago: executing program 1 (id=6100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="3d787da4c3cf4995bdb6aede5f2607b285e00dcc19dcd869f0ad46bbb4f1e93aeb021e16da3b2b3bcac1059674fb28c4b28d3a79ea767f743aa42c", 0x3b}, {&(0x7f0000000280)="5addcbb2452cb259444d21f49cbced2a4b44fc60ea2e1e4c3d4d236940b678965f3c33e62c415bac45a9adea69ddb302edc5b7a656661becf1e99a39340ee90db61ff2d24e4708f2e07df77673a4c5173b338a5e01d0b61b6d45f7b44a7b2641325f46adacf74ea65c5ec58c35c112aa98baa04ffe46", 0x76}, {&(0x7f0000000300)="0933e9c82aae616d3a616c7512d67c15a01631cccb0f020969565c45f0a8257fdf46c15ed29d6ddd9d18349186e0d9b9393bf4f93ecc0473e7e0b4277b0a05aa91efa9bb8a0045187a4ec83852a9648080", 0x51}, {&(0x7f0000000380)="b10bcfbbdfeb8eca86b50f35c2662dc379f79cb14cf7e1b6240e5a286097ba2562ec85bc5b989b15e6084f9ad43891e439a31b6a4846f3954c4c060ee6acbcb70c8659ee4aa0a4473f353782b0ebcacef33035bc342a063d3b58854292dde207d951c4f6161ba6600ff19b9c806e7bd91e5054037f9668faf71544", 0x7b}, {&(0x7f0000000400)="215702065c369fbc65c2b7ded68b292531e2063bfe4db509c95d0df9b98f39abf7854e266d1b626b255f41888cafebb9055d27d002eec43c385f5b138086e3aa97e1663d8a54173f21e13ead8bffd64e8c80e56ea11bef458329fccd3f621c38b8a152c35eca2f86d2c6b4cc265845566bd0e81660ecdc2b1b", 0x79}], 0x5}, 0x0) 1.168081981s ago: executing program 1 (id=6101): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 985.070403ms ago: executing program 1 (id=6102): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001600)=""/4124, 0x101c}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001140)=""/214, 0xd6}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000002640)=""/92, 0x5c}], 0x7}, 0x0) 894.242602ms ago: executing program 2 (id=6103): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x103ba, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x46}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000580)='autofs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xb8126c1eaec961b2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents(r7, 0x0, 0x0) getdents64(r7, 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="fb4d53e6c750dd44802df9b96d9433249e8008163ee640e52dd3dbc5bcecb21c34fecd33ae7a12e441535aedebb1fbf3d44a901bbcb23a70367b0c9e5735973633f46f92fe2e1b92bfc7d6f4047a52af2cda995860ecf15c0a3698f024e1934da0d82a7fc81fd9bc0863b34912959c6e92473655848811d00a5a1d6a23cfd9ddbb62f6939b5dce3d83c288d38c3447b545553dedf170873b5aa1bd4e979024d3b5c46df481c47466e7a282d9f875478e27d2e49fce5ed392055476180ce47bece4e83bd382bab201a52b73421fbff0e00498d09757fb167198fd8251b177cc340ca1c12a5287f1b1cb4618bee6c2d022fdd3f261e9c99ea7ff58b9f43252fa7c8a85b28bb8191e8b10757b579e76b420bdc23ad0fbd1ab353e3b4b0a20b07741ea8294c321a906fe4459545aa53ffeb4f623913e0839aaee281b06c8521b081e8b9a0fc0aa0ca594e61b343d42434c6d50c18bb6fe4066995f4c156daaa6247975722e74313a3dc3fd5288cb18499b9ea09d4729853fc22058a49d2d2d7659adcc4c8151db5248758bce41d0a2dcbf0b7b37ee369ca2962221ef2b2a3c57ab0b4c8340aa9978374b53fb9e8c1bc7dd480c90c8de7a85a40ba93624e74caad15dcca16308b5006b9f98c7e8b175ce63bb371876a1624fffb20aab024bdaa5063925ccc81bbffef25010b73472b2ef14e3dc7432bcc070ab584deecc765881807f91a3e16997ededaa725460aa8dfe55333c70290d988a852c0615f3eb2503db01c8e6ae947390713cb394924287d3aa3212709f776a8c72654a0636d48a3f03357e5a026e2ed48864846fa823c1d2fb4dded8e43c4f472e7782f3b8fa67eb8848bba3a75206db85e7c659058202decac3f97d886c5a721f6b96d81844b8ca66cf9d6dd0f5a397230373b39289de296a2ef75d673d0315c27ef1986d99053a13f200ebcaec65b83456eaf8e42fa58f06d8e6e6dca0978bd44282ebecc26dae157d20370f90fe5442ac6f5d80367de91964a503f7e790c6d176f9b6320b804fab1e1d2dab11fe308c8275927f8e7f225a4c8f63baba8b46394cf2cd06cb03d6c3caa74968b48034d793fbd0c7c4eb9f10a8527543afc86a80f3ffe86d6d8e09eb391c7743abc74b8b2b587a5712aa15e4e099987d068f8a020a3935e544ba5308b7d3d39af2ff5b3d3eab63c41c975a61010970bceb38cc7b88bd3d64db75bc4f85d390649d556ed33fedfe4b56701b0c460af573a324b211c322126326337920b4458d41a916607164c4ea32be84b67f5cf32eacd92f4d854b1e7a7be5a4e747f5c8071d124aa9a9a89925d5b0dc52a763b48ba1c82ccc5194a300658ed6ca087b4a145a0edbd44ed1950bb7050b084cb61b686095cfc0759a510d8aaeadd696e6b02655d239d83c5d453b87d5e83f5a26560b6448b39553ae72a0bdbbe62b2ea7cfcf0d5332c3928c4890592193e11ed05a7028e33a243f80c91fb8146fbdfddd4ab57df9b0340919bae79ae33cf2c422529219a6fbc6fe95d65ac532b8b14e0aac62b43d0481da12c16ea89833ce36e42c068f5b62aab48b2c78d91c9e17daf2a5eada53d92577eedd1ee7f1dacbef8bf6fc9dfd27db9ad954e0e9705a4b1dd42db989e73496eec457b555eaf9deab3225e505ab3688c6bc6afabfbdfd87ecfdb7f59ddaaeb8b20abac79d3db7a03526cead436d5a78202c9c52203c9c659a62065cdea7a4b1b318eda882686da18d02f9d281b481fa40e5a9ae506fd072d8e924ec5d042df2c3e84de49669d717048d44186459e7fb562df5b2d48c0ffb325b1121f7c900e8ec3da656d0634aed03148dac70a5df060614783552c7d0a95e3f076a0026387cd1afdd495535fd8921a2e0419c0ec081aa03d0edf31a32e710e150fda318d78748732856e9455412fddd6d661c3f833dcecde0c839ab6ef699de2e94ba0f90393eaf5cf33dc4bcaebf2c68e899a3be591876d74b8c76fac6040c033aa86548b206f353abf394853f2cb76cabbf197136a028fa3df90f3e01957e05c0d7040673c7711f2e1756185f89f56e74e1d5a729416f471ea313f9072608b6324a99db2db80e2be7a99158a8aca4587a000259b674d62a50ceb6e18d56d3903b7c9815f25e04d0dc6cd4254fcecb18d0c58d52b23ee263c9c93b501f0ccd95612bae0291a4f053cb62b1deb65fe6e6b2ea2495517c8f3d0ce5a62d52694d29e7ba4b7a2dd79b1f2f3a5ecf1c5f79a768ffd0e7ad1723bc68f8030b9370d1c93614d6e6fcdfef3f57c2dc5a8d0e67edb44657ad2a35bb14e611cf7082bacdad7bba4e0316ca175d39e9cd8c8dc6f34e5678f434d0ba07ce1408ad82b98b0ae1e5e14ad7c873d35e712ec868bfe9579f1ce0a32c4648dd4e19ddab45d449d81920e8c49b4b496196a2d52dde74e5c184951b3aafbbfff3eaf84ab66ef2522edf48c8bbfb1e181f8d2f107ddee9921c05542f717476060cee145703dc757cd95ee2613498487acc8b803bc8948cbf7bb995e6b321dbaec9ff9099695c114c86c1b5ab744504bcf9a9010781db8545da7ad9cf852723bd40427307ff1779196643c55a8fd5496a6938c0745247bb556220ab9c3b46ba138149709f0ad1a8068465056c2cc3aa95650752d1cf1a1021b4e92d8ffcd13d2ad4a214e3d1d88ce81f89e57e46409a68dc11e4495cbd749747791e209a55092a424cb000b976ebccce5e4f7db071057f975124490536a35c6c4c7ef3a2cc81cc43c1528b61b079a139554334b82b75ba7133375e32be42b2b63f36606c016919292ad04e4424775313563fa5ab74ed6a5be727bd07652e1eba1679eb86151495ef6a19a50b44e3f59656aeb978247b695ab8e2a9dd43092ce9851efbd26b38717409858f79c92a0bc53b919aed26e84dcef716e6b1c9e507bafaa38b539d867404184c140088028efc0dc472aab2df31e828ec0460a7c41e71e043c7b4454a2094ba067755df9d8fe59d9d43b22ea5bee35eb544c559a0741f542b92bedf028cf92ed18e21ee27ddb71515db928d762d7da004c5c2883773cfd273091497bc2aa6e8f68a77af26c2c02f34699ac82da54a71870fd0d6d66574365e20645d88293bff49275599a67525a36054da9eab710b9a832ee5eebee08eee9b9ae2e26130ce574507cfb478105f31fa846482cc807663139ddad2eb6ba26acf33da7b2ff5396ff0d43fc1f038ffa0f8c3c34e88e7f36199e20eca2d3a95b23751e5be6d59b873968eeeb18ce1450a6de2961eb49a0717dfb26deeafeb905a57cb4aa826dc37c642cc55a41b13e603c25e8671b6a6023328caf2ea1b1e94503d35e721b9eb20fd7ff0e1d5249e7c54417760fdbf16ac15f5cf0be29f18487b8450648ddd6ebd73f71fa0d6a62635d4009fd7c39cfb36fa35526aa734025890e59a03b54bb770f1a704dd3ca19eb6942d02de5d012662675c48d2320489e36bcb70b055dbaeeeba1191e079dd5acb79a38be30ff3ed308ed1194166bb5b5f53325d2617c980131f7d550672d7dd69736de1da7c4b3d41b2a1a1c4444cc0897e5294da6dad0ecd2764cd14c69eb9c9f2e77fa5e0fac6465db9f50be31d5d847d949a8f451acba946edfa92876b668fd8e6ef7d5a79de8cefd2c84c316343217b6bd9e40037dec4d86524d6e541c342cf000240381281c35f84493184c2d62a60ef49739a06a6101cd9330ed5e0b275420ab55a638b13a302a75c33ea020e239b4f13e3986e342031a46e9936ed6454d91571774cdbab66d45aa9e885de6121d95f533d5e38a113830f36db6c36300f1c028f4ce2e634df5cf608aba15a137ef95ce148297e96e069deb2286fc2e92680af7d9e5513bf0ca4ffd6eb80edfcaff70b616ae59bed1c021cf20869447271742fc4eb9c45472018e540de3ee5a6b0dd7c817997a6f225383d1850ea060cefbee8ed5c0712f87f543634a4eb2b12ef28124cdd2d0935c690850e8fb2584300e5d26e393ab626652d75d3e85068fa552a72c8d2de8b4735d1f7a27dc541c3741c00cf5cb081ae41d87640f6c250e42e1103da7e6f2d4bf0b334c40a22bcc2762323b298fb82fa07a9fee7fd3c107564ad94f074c7bc43873a91950ebfcc4718907de6319733754b00e4125d49217dbfaba55f1a9d281372a8a0b04d0499c464e338e6c5f4043ad43c4d0121f78bcb814c52eab005cd07325f4cd7ddcf3fd767bf71bcdf083f2aabd538ea94c7880a64abd1130b7cc4d13304c49fad91a623d1b097e32507e1d1e75154869a3c6b9c02560e327a3654b538c81cc27c80dc9b3bdee05bdf7abd095982810f4b5473e978ba2e984238b601b390e617ae8145f78c93b3f55bd01b39c398a9c7754b0db7963342f88602baca45e3827c45c02ed26dc20b4d451e1bccfad773bbe6c985cb41c7b0db3c09be4ed5a5a58a06957b1ad61591a8ba793674a9a9a93fa7288041400abdb2f8b3c72b41f5a4906f69a39f4d4a9c114aeda548325a02ddc77202edc3836a62e66975f84eb124bbf79f0c644cbfaee5982d1fec72f7f2d23410dac324542dab80cc9a1556ae6f5cd701a9000d8b02ac4d3b19710ad9bc7fc2dfdd6372b7d354554d3d605b5044d220822cdce47a1c4960e6282aa68daead258bf3c7fc3003d4425da8f455f68830f3d16d7ab905e55a14616b34112ed0c864d7935b9598bf28845d119e723835a97e0d3e9a6a2838cdee55f7c3a6b267d2979b7ef5ee97f51ddbf7be373be08bb130b9bd7e2bc5f82d94cb49dae22a2460ba2b67dfafea4484e5ec10410537efc3a6edd6748a29b40de24f013ea30cda4a7632a86b42e8626ed5c3affd052eb839f1ff6b81271279f7edafd92c58b6c88de1d763f8cac0136ff0d635db1a29fd80a30935770ac453c7126717b7d0c4f11a7d47833a76509a2c55c5790fa0a6bbfdf5f0d250e64806c5a703c6a2bf55966d99e8760eaea27b7773097ea0ac9b6eca3f8f27f6f4ef9e05ec89c389604062a21b4200eb888ada37e788fa9ad3473efbb1be4f57ab3417c9c947987d30a3f8a9287e9ceec70bef9660e2689d935e06ae97a3aefb1a06559f31c487bd74ab23c9710718a2453b3b4449b3272ac76a5214643ebe4fa5857a1a24bcc9a589906625ee9b55c0d439f87264e98182a3ffeda1e097c7a3bd904624ffa2f56ac486463b181ad64f2fb8c2f6459850b5cf892388ccbb2934fef5debd3ff0fd7395aef52d84ffb702b4690a00faa8791f10db320d4d10a9d1bbd50e598e0ba32fb28de5e34928d5773eba9f90d0d1b6ec5c764ff8b0f962595007f855a58b3a22b949e662257532125ba4faff786f2e089763e605d63c87c4594bb3c6651951b1fbae79363c427deb7a5f52846e6182113a84fb594128a74dab3670726406756c91c519720b8c8274abd9e09795635cee2ba0ffd0abd27faa7acab83cd27954727650ddc98d750720b3ee5baaec6e24e30eb97d444c9de3fd1d62859b2b71ddcdb87517779f5706bb80a95abc78cdb11e9c11c159f75c160ec6ba940dd3cf1d93b173c7517874f25c3b7db9ca81114168a3f92fc54956b540776885b14c3c5bf667365cbb234ab117cbf313bab4fd283953206026e6427ee2c8ac979fcb44835c4a343bed39b4ef59bb005af3469e4da867a2518cd0209d5fa1f2c782dfd2105af837c1c52a5864a442b276ce1855893f517282d86291f65925d59be8ae529b86be5ff0c7dc3a3451846cbaa39c9af46cdbf82f1c3f72ba87b0cd2664ec861852d52b9f79a1c4621d9d4563c537dd1615134dc20e63dedd68bcb29e889a5b061b43c10e99b822e02d4cf5412c46511a000ee51b1d58b56cfb1051f34734aff78423705b98874c886b87f7996d24250cb014f671c935efaeb2ef97722303104ae2c195bbead8934add1ab651f5ef3c6cb1f1b8215ff526700d63901cea8e09cfb513c6c3a1cc62f9fb7cb2accf6473662361b94ac0f9e29a569d460e38767da3b1caba464fc13c03521cc01efc884dc6265b37d51c840057ace901245a963b09112eaddd69a6a76fcd1763e80d1b3087dfe31cc08d81538c639a2170b6bf16c81eee47a007d81a93aac32fd596902871ac61f06d3dd7860bf02793c648af3fcaa7fac0dc794514eaf841505df736a37275c925235072031eb325959a09517200d05efab0e78495f0380db7b117f7c9639d7f2ac6e4d540e6397800bca645970216af871b585fd5a1e65a62d562a9b6c131091fca9cc02e9933a2f769fd7399929d762e687d55b7645a8bd02f078760ff7582c16566bc573dc5a7d3f2236e44aee202cf81afd4fc4723fcbf3b0858b3eddd6e910b0f3eb05f165d014ed84041411f997830ea17009d1b00f7038605289c40c38c143dabd74bc90db1cdf2cba6e0789922894e91775c9329a2cca56bd7a4ad0b5e7326c05be7e6359d1535497727ef163fd7e4d8326a5856addb24b4e7501b3f4e6d874956fd5b575bcfa0da1384bce19ddea6f2c6dfc6f082860ce7fde831494b4cad99e3738beb09d23dc946fd6bad8bea4ea8d7a861669b63b35edab15142e1d313787bef150ea9a06069934f22fd6ff1a31f0a926ba633a359413a04dd0edea45aca195c52b380c7c2e8c209965da9996b61234b367905bda1db8aaea6ea383dcb5b3220210c2a58ca638d7c4337905a1d889c8489bbe9ff38748944bdc71decda6541f85774f00670b85038114dc929925bc71be70ef76e72fd4cf256150a4266d9c5b38db2721b07974f0a5dd57e76ecd1f6b5667f5ea6bd2e3857d130ba827f740285c023458c5baf3b8cb873ceff3f88b9576499e26c79a8b09a88a86100d1c67289079e65e552a257981ad5869e2fc34ca8191b765757eea03ae0f3b7ba63a64973c8c814dc1c48f10f16df27b4f35408b08befd416ed6d5126e1886d186ba1343a4282d65123c926f99f98e3e9ab2d0c26b245e33f3188db3fb1136aadc9292afab9fe6c7b53990be2fe9eeb57ea6fb4129ea21178fd655b37d3bc81f90c6f80d670cc130f0e13db5a0da09b20c1614b6b2dd8be424f93c72bfb6dfe752f5e6fd5fd89779045d077a0f445e3754cb0062752ba4a52af26798242301865eac0f5fabede78f5e20b90ea68847d87971e3d203e5de27aa26797c58d1e3ae432430fbb5c3972811501dd1a59a1b26a577bbc25817f5f4ee50e9c18fa497fde3eefe8d0b465e8baadbbeacf3301d94b17d2638d89ffa1eceb7a3e975ba7e9c449060f16b6cbe96822fdce18d3037d054cda03dc9c6b95ba48f3ec9e1a75524d754f3cefe6280409606494413c215f51f09e0c8d91f05efb050a1a4139ee066a32012a677d0d148419440c97214ff1119f8f09f1eb3c85786351813d2b49eb98f0cde340fea7754e424462c7e45ea6d0a2e317e13d0c30c66de9c52c9def74ae993c506179d6791face2e3e9286b5fa19439f0da7c302dd1d180d555aed3ea3e40660c58dbd3810c3b713010e0ebca83c70d0c2c73c49b19d06cba36d5a1c149e2ca3f5e2c69b5acdd30e3dafc1e78586dcfc898774638abf69f469ae2778d8ccf987314997186cf063546ad66c473113a050bcfdfacd45ab8faad40e53e434025dc85f140fc1aa9833a859c6dda1dd69540bb75951471a6965a55a0498e85fc7a4e60c400e2f8f06a8480a412e97491d62fa6a089c8947db210ff1dea9d2131186327142bf6d6b09e5da33517bf8c352e7faa4483f3656c72ba7eec8bd80a54b8e903d2ba0018a1c05460971c52fedeedf97d6e2fd3be63bb936a444f52761271d71e5a64135d539093e364c580d81fdba56303a75d16aaa7882295fc931828cbbf34a9d9e8ab816add62d3f3992ad4adf579aafbec4b7f7297a903cc62e5d6f347e47cf887d3aa2dabc7c7d770c183aa2e366c37ebac0540a55bdf48fa93a8b6dca5c522eed67e7c6d3f3adfc6edda3cd5bfc6cee4c436f67fb888de7f295dd12fffc9ae57a1b76648e516c463c6db5e63fcc44e2377bd101b0012baa7bf501aa4fb18af089687a87375af41fbf8dc783673e2446031ddff069c7bee91c7b281bfff5b06718341389ce0331ec3e938037cf1b113cde3c12adcf5ffdc0183d53c3d95600f6d5c886a40d352ef09dd562fbbc59f3d4fba6195adf27b0c6ea0742d29e9639634dd1ec850d5a765afa367b07e64af4bc20e635eabd51c52ccea0b20050de011bbe12fefb41f43e4eea4b7b8d4b020e65e600fd3eb1a8d1ddf321ba191357752703b8dc3d55e8e61723288b90b292189284e4093f2d765b64b1f5bc0fb90b043b10a58e8248e844aa79c28e2a6b621f550c0a7fe51c2ee0dc9042d40492e9b9a50f100a8268f9874a802f16bdd5b738e4a717124207fbab886aca9a59ec2292d03d055edf4f5fc3033002c1fe23d725ee7b38c26ee0e5826ce88c774ec4a0d53ca2f371345b3033f61a201b88c8ede07dbcc3c3ce6dcc57162040e15886d32ae2e7667fcaf7862d9fad71916f8b32a748013f3e2bfe01ce0750557a58f80c682353f24e516520465810077a3d3ca722c2bb18f2ec76dbf4586e0bccbd79290a62172adc001e0eddcde02198aca4a90d4762753ea6ea1ab1bef425ca0bba66a20ff002163348337e01cbd1f151fff654b10d3f6212e19ade0d885a35fd8658d35e67cdfd476579de58f6bfa0023ff370d5a5bb2e00ab98b1862cf67e716508f09a1d22a856025b687389eb223b9f42987e5d0639751295bfa5a7ff6384f5a53fb61f49f1cebe7572b7a0a57d8dc0af915d90910fa49d33df7c4dbb709c4a86061346530f96528ee1e13a8c59d34b219f2180026b7cbce928269be7431b8563d36a892328521fda128373d6371124cbb5525eb8782fcc2330a994af1bd111162330a07bb66586e2118d9517d8d1971c426b3133e2b829140962c348136a22ed0e4b06dea2c0ffa8c832ebee338bc89a65e8ae39d89b600bcee5fb43e561f2b59fd30fe9193bdc091b4f9457118665ae4b9db6096cf56af90a68190eb48fe829699282f9b47f6d57f5c84403521c387b150444ada8aaa93aa69d09a8b000e0410f3ee894a66004e9e79bd1a873b983636ee6ab0a516a0ee4295ba543f4359314799c3739439f5df8bce2ce239016171e47c4aa18892f4509ea24ad5ca53688c4eab2032f13489ce1ee593edbe5dc0e59eb022dc6481bb5335b82341e90fcccf4c69e318a94c4663433a855a29528c2ce487a71ab65305dbb528d4e0e301333c7abf257ad87c78f9f2670bc669d4fb84704ae7972ea975b195f0a1a1c569d826c58f56eb2784df86d0a1382eec0ec58136abb0eda9d109d46cee873dd46ba5ef37d5d4f1df4d0218dab6c679ca370a4a9fda1123e15174d9a106ba51ea01992ddd1af9ff46ac215b1411a6f833bf1271afc14bb85e62b4b61a053d400b0db4542ed3c2f10bdb6a976f896be924564a9fd8871b4173b807ab6a8dbc1abb42e2025736ee8c14d999d7ce5f53d9695e42be7c586db995c253a3c06453cf411167efa6caf82976ffe992362d0d45d6ee52a099a806d212fbed15e681b4fbd4d4ae50ef3f834c62c4a771db6e56d564a203f557323947affa76a25e9eba7b9379ace027457c4637a23b5c072f322cb8bf0c2d5153c83674224fb6f0b642c2cf2e7d5be6a5b0179093d263d0a999673ff91cf119dd907ca2f35371093960ac5fa46502b8de3de373caceabfca42beaaee6b861455cc05c73dc0f36237401b836dc486c7daae2cd8a3ac096f27a5737df03735e53912e382bc93d61f14145282fd6eee356602e35e56d5d413949c42079c8965bb2b8b6607bc1dc2785cf3daa404381a39c0986add53179996063d32e33229dc6bc3297845b6a89297e50ef3e2268e1d857a58708018c98d20045a589f10599183fea15d2b3209293fb07c89945e4f2629488325138124a8c8ea39b3b366c0be53e59f0286202b2ea0795c29619bdd34b8f1aa6ce80a5da02718a80f37df4eb915d71e704d92bf3d9fe5205fd7f214c5bd97186ba6bfef06e9b84a301208f141b0b098114994ce7081cf3ea82760bc8695bfcf639c8e95797ac8f9489feecd0498a5ff8f43678a684d3d1840eebe22232206bd799d8ecd5029d2e3a6a8d3161b8b76441107700ec5586931c1da1b72a38eda97c55bd0a500e032a6f3237f457248f064dd806ee41c92fc086988c1fb8ce3087aa96ad7ddab7dd4b4808e14a8e217dae2d68ff4a0b1a9f1ab4be2fcc4f7ae0b532dd307cc69d3b254823fd35da919aa25de56bb642b3d73d86b197a659c7eb02dc20ae1eb7021c67f1ecf08f83cbeaafcaa60a40beb4194bbe567e196f621b2ce60402fcda81495a6f2cf45b7b50a3fdd43b90d4499b66c55ac204e4e4925c559b5d03c2bd29070c97dcebd1c2e603df4498b65913d6ef4f7f78d5cedf045b8f55e4d840bec27672c94e247a01209b9543a5343f8bb535660b2703abccf88f06a62f9671d4aeb405fe3dcef8107486e9a14cbb28a2c5b8e0f00a990a8c485d677cd2a44964bcfe1ffb5b16bea943167e261e49107b594863d6cfd69cf71003cdeac0a3d59a3e6d5aab357f4580fd2bf1e31d72bdb4fd2bde047fe52ab70bcc607cb7a2bfe0fd95f75293c2a32aa20b0eed5da76edeb7df814d77f9ec1830f1c9d84352c8f77bfc9c5eff792d020c80a26257e28a453dd25a113130723320d5705da0d784da1e17ec79f1781bdf2b95b2b1416f8b2658d139989294d634d3f62a05d5c729a649e00c4e4cc89dfd237c71284f7d9656b931cfa6dcc0de34566e36317dab00e5a27a8a8bb6e5e1b41e5e4bb7b8e68b2ac5583808e20cf8c5903a4163c44b0e41fd3fb659881cee3c2969770a7f5b894bd300b9027d5f1b53e9e60ca30c4aab963d495ce11099ae269851df7b151e8b5280b0e9a17166df2704400cb7ef07a0a828e9dcedd5bba7e6816ffcc12038495a6d10f2699717a277a168028abc0947bf522b654991b147e26f700e70f3b88f156691b114f44becdb184c8864ab67f77de1e24fb3856c5110a7373fa1df319492263c8235eb1e31fc32932a3810d4bc4123891b63f37cbe94b0cf02d95ceae39f7a39ccaaa9bdc896c0e1c790e2bd3529617d1a5c96c76f68cf765310718b09dc7e8767bde5f22265e9255892d66d3499722022bc966c44a91f0639dd3cbe69b4feed38e10acf5544d04b4450b9b5c00d741fc864fd3e8849698d0e7df49894a9a8c299785d6d0080987f04d40e4219b353df9895ee4f210157c92aa559655d82868dc8d5b7df79b28127a7c35456dc4ec8f37a37c6ec67ffc39984b2eb2e9356dd8ef404f081889f7687162c58910df80e730e30388f2817fe8a094f45e4ac0d78321c6fe39b3e9040d6ede0143d1c4c14868c0d2bb2f430f19672a6adbbe351c644b91e8a2163611374210044b4cbd30081e7b7b4309e2f27237648aacd89ba6d028d9a481d34ca60114bba7b1ccae034718b606c4ce86ba2cfcf2438519bed08e3cb915582e09f59984f96633a8385d91ae6663613f52ee68b88af7460b3726bcd3253ec089f657e9063d9b5c09888cceb67295a26af81d982fc85c045db19deadb85af9d4735b3f9393e4", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b0"], 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 1 (id=6104): prctl$PR_SCHED_CORE(0x3e, 0xffffeffe, 0x0, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x40120, 0x0) sched_setaffinity(0x0, 0xffd2, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x18ffa}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000100), 0x2, 0x8000) r1 = openat(r0, 0x0, 0x400242, 0x0) fcntl$setsig(r1, 0xa, 0x1a) mkdir(&(0x7f0000000000)='./control\x00', 0x87) rename(0x0, &(0x7f0000000080)='./control\x00') syz_emit_ethernet(0x46, 0x0, 0x0) bind$alg(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000000c0)=0x80000, 0x4) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x11, 0x9, 0x0, 'queue1\x00', 0xfffffff8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc08c5334, &(0x7f0000000400)={0x0, 0x0, {0x1}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000040)) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) r5 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0xffff4f62, 0xb, 0x0, 0x4bb, "57c1169b6664ea61326ac71ae7213059", 0x2, 0x0, 0x2, 0xfc, 0x0, 0xfc, 0x40}) syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20006c66cadefc9b8adda103aff0000000000ff02000000000000000000000000000186009078000000000000000000000000d016c59c6980fa9dd7843c1c5fd40dc1e73d0a8788ee069aff047e408ada5363b758f4f6f94479089b39eb82ace91a33617c4ad5de7809863e2821083a11230a09288976389b4fb75fa75521a6c803dc58579e4b9ad41b989f"], 0x0) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered blocking state [ 2221.348022][ T9842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2221.400629][ T3150] veth1_vlan: entered promiscuous mode [ 2221.434619][ T9842] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.441871][ T9842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.624310][ T3150] veth0_macvtap: entered promiscuous mode [ 2221.669654][ T3150] veth1_macvtap: entered promiscuous mode [ 2221.767214][ T3169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2221.788446][ T3150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2221.832779][ T3150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.863461][ T3150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2221.892488][ T3150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.904587][ T3150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2221.920444][ T3150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2221.932568][ T3150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.943068][ T3150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2221.954604][ T3150] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2221.976704][ T3150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2222.045565][ T3150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.054342][ T3150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.075730][ T3150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.081217][T24529] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 2222.084681][ T3150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.117216][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.133421][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.268754][T24529] usb 1-1: Using ep0 maxpacket: 16 [ 2222.293043][T24529] usb 1-1: config 0 has no interfaces? [ 2222.308091][T24529] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice=ac.00 [ 2222.335743][T24529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.351064][T24529] usb 1-1: config 0 descriptor?? [ 2222.648130][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.673237][ T3169] veth0_vlan: entered promiscuous mode [ 2222.689084][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.728467][ T3360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2222.738365][ T3360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2222.750980][ T3360] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 2222.800088][T29916] usb 1-1: USB disconnect, device number 85 [ 2222.883200][ T3362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2222.988639][T22508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2222.994334][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.017222][T22508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2223.026631][T22508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2223.033987][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.042813][ T3169] veth1_vlan: entered promiscuous mode [ 2223.048908][T22508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2223.065116][T22508] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2223.076792][T22508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2223.301533][ T3169] veth0_macvtap: entered promiscuous mode [ 2223.360282][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.372077][ T3169] veth1_macvtap: entered promiscuous mode [ 2223.396762][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.591220][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.646603][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.678737][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.709891][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.741779][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2223.776178][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2223.788079][ T3169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2223.905934][T29922] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2223.906582][ T3382] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2224.042677][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2224.079441][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.085212][T29922] usb 4-1: Using ep0 maxpacket: 32 [ 2224.103067][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2224.112379][T29922] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 2224.115409][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.129621][T29922] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2224.134802][ T3169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2224.160039][T29922] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2224.162957][ T3169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2224.180902][T29922] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2224.209401][T29922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2224.211424][ T3169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2224.224219][ T3370] chnl_net:caif_netlink_parms(): no params data found [ 2224.234960][T29922] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2224.262099][T29922] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2224.292592][ T3169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.294698][T29922] usb 4-1: Product: syz [ 2224.316622][T29922] usb 4-1: Manufacturer: syz [ 2224.321303][T29922] usb 4-1: SerialNumber: syz [ 2224.323474][ T3169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.341510][T29922] usb 4-1: config 0 descriptor?? [ 2224.360045][T29922] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2224.365094][ T3169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.380435][T29922] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2224.405051][ T3169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2224.463146][T26022] bridge_slave_1: left allmulticast mode [ 2224.473464][T26022] bridge_slave_1: left promiscuous mode [ 2224.483799][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.501401][T26022] bridge_slave_0: left allmulticast mode [ 2224.510725][T26022] bridge_slave_0: left promiscuous mode [ 2224.526783][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.169622][T22508] Bluetooth: hci1: command tx timeout [ 2225.214144][ T3390] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2225.222324][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 2225.228483][T29923] usb 4-1: USB disconnect, device number 122 [ 2225.257016][ T3425] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2225.271813][T29923] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 2225.525594][T26022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2225.542482][T26022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2225.552709][T26022] bond0 (unregistering): Released all slaves [ 2225.605896][ T3411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2225.660279][ T3421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2225.857961][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.865588][ T3370] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.872975][ T3370] bridge_slave_0: entered allmulticast mode [ 2225.881656][ T3370] bridge_slave_0: entered promiscuous mode [ 2225.890875][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.898380][ T3370] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.905821][ T3370] bridge_slave_1: entered allmulticast mode [ 2225.913430][ T3370] bridge_slave_1: entered promiscuous mode [ 2225.973150][ T3370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2226.004122][ T3370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.293950][ T3370] team0: Port device team_slave_0 added [ 2226.303152][ T3370] team0: Port device team_slave_1 added [ 2226.526486][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2226.544438][ T3370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2226.557861][ T3370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.558631][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2226.637623][ T3370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2226.692957][ T3370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2226.706264][T29916] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 2226.714933][ T3370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2226.765158][ T3370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2226.833425][ T3454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5838'. [ 2226.906301][T29916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2226.939373][T29916] usb 5-1: not running at top speed; connect to a high speed hub [ 2226.951266][ T3458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2226.981735][T29916] usb 5-1: config 11 has an invalid interface number: 244 but max is 0 [ 2226.998657][T29916] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.015353][T26022] hsr_slave_0: left promiscuous mode [ 2227.036248][T29916] usb 5-1: config 11 has no interface number 0 [ 2227.045545][T26022] hsr_slave_1: left promiscuous mode [ 2227.055575][T29916] usb 5-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2227.066321][T26022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2227.084745][T26022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2227.092204][T29916] usb 5-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2227.092254][T29916] usb 5-1: config 11 interface 244 has no altsetting 0 [ 2227.094160][T29916] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 2227.145974][T29916] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2227.154148][T29916] usb 5-1: Manufacturer: syz [ 2227.159161][T29916] usb 5-1: SerialNumber: syz [ 2227.245576][T22508] Bluetooth: hci1: command tx timeout [ 2227.921328][T26022] team0 (unregistering): Port device team_slave_1 removed [ 2228.021154][T26022] team0 (unregistering): Port device team_slave_0 removed [ 2228.879429][T29916] peak_usb 5-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 2228.899196][ T3466] netlink: 'syz.0.5841': attribute type 27 has an invalid length. [ 2228.908071][T29916] peak_usb 5-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 2229.064396][ T3466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2229.072061][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.298755][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2229.313970][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2229.316468][T22508] Bluetooth: hci1: command tx timeout [ 2229.509595][ T3466] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.521241][ T3466] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.535747][ T3466] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.551916][ T3466] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2229.632822][ T3470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5841'. [ 2229.662790][ T9842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2229.717197][ T9842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2229.945760][T29916] peak_usb 5-1:11.244: probe with driver peak_usb failed with error -71 [ 2229.958865][T29916] usb 5-1: USB disconnect, device number 52 [ 2230.176259][ T3370] hsr_slave_0: entered promiscuous mode [ 2230.195704][ T3370] hsr_slave_1: entered promiscuous mode [ 2230.345303][T29916] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2230.537211][T29916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2230.577662][T29916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2230.625142][T29916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2230.659188][T29916] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 2230.696041][T29916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2230.720607][T29916] usb 5-1: config 0 descriptor?? [ 2231.103150][ T3465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.146998][ T3465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.191908][T29916] usbhid 5-1:0.0: can't add hid device: -71 [ 2231.208637][T29916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2231.246585][T29916] usb 5-1: USB disconnect, device number 53 [ 2231.404079][T22508] Bluetooth: hci1: command tx timeout [ 2231.412411][ T3370] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2231.468610][ T3370] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2231.499867][ T3370] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2231.528710][ T3370] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2231.685393][T24538] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 2231.734045][ T3370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2231.736015][T29923] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2231.788967][ T3370] 8021q: adding VLAN 0 to HW filter on device team0 [ 2231.824375][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.831645][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2231.861324][T24538] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2231.866685][T26022] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.877695][T26022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2231.888358][T24538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.915364][T29923] usb 5-1: Using ep0 maxpacket: 8 [ 2231.925398][T29923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2231.938581][T29923] usb 5-1: config 0 has no interface number 0 [ 2231.957502][T24538] usb 2-1: config 0 descriptor?? [ 2231.969752][T29923] usb 5-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 2231.971422][ T3370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2232.004352][T29923] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 256, setting to 64 [ 2232.029551][T29923] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2232.066415][T29923] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2232.077892][T29923] usb 5-1: config 0 interface 1 has no altsetting 0 [ 2232.093867][T29923] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 2232.115714][T29923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2232.137797][ T3370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2232.173666][T29923] usb 5-1: config 0 descriptor?? [ 2232.199575][T29923] hso 5-1:0.1: Failed to find BULK IN ep [ 2232.305832][ T3370] veth0_vlan: entered promiscuous mode [ 2232.343134][ T3370] veth1_vlan: entered promiscuous mode [ 2232.535897][T29916] usb 5-1: USB disconnect, device number 54 [ 2232.542694][ T3370] veth0_macvtap: entered promiscuous mode [ 2232.606872][ T3370] veth1_macvtap: entered promiscuous mode [ 2232.730141][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2232.925206][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.007176][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2233.058376][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.181365][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2233.253769][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.326314][ T3370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2233.485762][T24538] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2233.497380][T24538] asix 2-1:0.0: probe with driver asix failed with error -71 [ 2233.510564][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2233.530515][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.567217][T24538] usb 2-1: USB disconnect, device number 105 [ 2233.602312][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2233.659439][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.737905][ T3370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2233.816170][ T3370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2233.832408][ T3370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2233.854293][ T3537] netlink: 'syz.4.5854': attribute type 27 has an invalid length. [ 2234.209148][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5854'. [ 2234.467685][ T3370] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.496713][ T3370] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.514424][ T3370] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.524104][ T3370] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2234.677685][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2235.012201][T26022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2235.088701][T26022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2235.413988][ T9842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2235.686749][ T9842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2236.388692][ T3586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2236.394898][ T3586] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2236.465514][ T3586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2236.472085][ T3586] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2236.514682][ T3586] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2236.522839][ T3586] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2236.565441][ T3586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2236.602602][ T3586] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2237.388011][ T3557] warn_alloc: 1 callbacks suppressed [ 2237.388029][ T3557] syz.1.5857: vmalloc error: size 2428928, failed to allocated page array size 4744, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2237.481686][ T3557] CPU: 0 UID: 0 PID: 3557 Comm: syz.1.5857 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2237.492494][ T3557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2237.502609][ T3557] Call Trace: [ 2237.505928][ T3557] [ 2237.508878][ T3557] dump_stack_lvl+0x241/0x360 [ 2237.513583][ T3557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2237.518802][ T3557] ? __pfx__printk+0x10/0x10 [ 2237.523607][ T3557] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2237.530045][ T3557] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 2237.536575][ T3557] warn_alloc+0x278/0x410 [ 2237.540929][ T3557] ? __pfx_warn_alloc+0x10/0x10 [ 2237.545800][ T3557] ? vb2_vmalloc_alloc+0xf2/0x340 [ 2237.550846][ T3557] ? __get_vm_area_node+0x23d/0x270 [ 2237.556085][ T3557] __vmalloc_node_range_noprof+0x691/0x13f0 [ 2237.562027][ T3557] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 2237.568121][ T3557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2237.574467][ T3557] ? vb2_vmalloc_alloc+0xf2/0x340 [ 2237.579512][ T3557] ? __get_vm_area_node+0x23d/0x270 [ 2237.584740][ T3557] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 2237.590647][ T3557] ? vb2_vmalloc_alloc+0xf2/0x340 [ 2237.595707][ T3557] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2237.602050][ T3557] ? __kasan_kmalloc+0x98/0xb0 [ 2237.606830][ T3557] ? vb2_vmalloc_alloc+0xb5/0x340 [ 2237.611869][ T3557] vmalloc_user_noprof+0x74/0x80 [ 2237.616823][ T3557] ? vb2_vmalloc_alloc+0xf2/0x340 [ 2237.621862][ T3557] vb2_vmalloc_alloc+0xf2/0x340 [ 2237.626730][ T3557] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 2237.632203][ T3557] __vb2_queue_alloc+0xa0b/0x16f0 [ 2237.637272][ T3557] vb2_core_create_bufs+0x825/0x1040 [ 2237.642599][ T3557] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 2237.648434][ T3557] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 2237.654007][ T3557] vb2_create_bufs+0x60e/0xdd0 [ 2237.658804][ T3557] ? __pfx_vb2_create_bufs+0x10/0x10 [ 2237.664133][ T3557] ? v4l_sanitize_format+0x5c7/0xa50 [ 2237.669475][ T3557] v4l_create_bufs+0x18b/0x2a0 [ 2237.674342][ T3557] __video_do_ioctl+0xc23/0xdd0 [ 2237.679230][ T3557] ? __pfx___video_do_ioctl+0x10/0x10 [ 2237.684718][ T3557] ? rcu_is_watching+0x15/0xb0 [ 2237.689501][ T3557] ? video_usercopy+0x1f0/0x1180 [ 2237.694554][ T3557] ? video_usercopy+0x1f0/0x1180 [ 2237.699531][ T3557] ? __kmalloc_noprof+0x21a/0x400 [ 2237.704592][ T3557] video_usercopy+0x89b/0x1180 [ 2237.709390][ T3557] ? __pfx___video_do_ioctl+0x10/0x10 [ 2237.714796][ T3557] ? __pfx_video_usercopy+0x10/0x10 [ 2237.720066][ T3557] ? __fget_files+0x29/0x470 [ 2237.724679][ T3557] v4l2_ioctl+0x189/0x1e0 [ 2237.729073][ T3557] v4l2_compat_ioctl32+0x1d7/0x260 [ 2237.734561][ T3557] __se_compat_sys_ioctl+0x510/0xc90 [ 2237.739866][ T3557] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2237.745693][ T3557] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2237.751712][ T3557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2237.758071][ T3557] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2237.764700][ T3557] ? lockdep_hardirqs_on+0x99/0x150 [ 2237.769928][ T3557] __do_fast_syscall_32+0xb4/0x110 [ 2237.775228][ T3557] ? exc_page_fault+0x590/0x8c0 [ 2237.780166][ T3557] do_fast_syscall_32+0x34/0x80 [ 2237.785050][ T3557] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2237.791414][ T3557] RIP: 0023:0xf749d579 [ 2237.795505][ T3557] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2237.815239][ T3557] RSP: 002b:00000000f576556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2237.823787][ T3557] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0f8565c [ 2237.831789][ T3557] RDX: 0000000020000440 RSI: 0000000000000000 RDI: 0000000000000000 [ 2237.839817][ T3557] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2237.847828][ T3557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2237.855830][ T3557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2237.863840][ T3557] [ 2237.906170][ T3557] Mem-Info: [ 2237.909602][ T3557] active_anon:13054 inactive_anon:1 isolated_anon:0 [ 2237.909602][ T3557] active_file:20432 inactive_file:39462 isolated_file:0 [ 2237.909602][ T3557] unevictable:780 dirty:240 writeback:0 [ 2237.909602][ T3557] slab_reclaimable:8367 slab_unreclaimable:104899 [ 2237.909602][ T3557] mapped:26182 shmem:6168 pagetables:743 [ 2237.909602][ T3557] sec_pagetables:0 bounce:0 [ 2237.909602][ T3557] kernel_misc_reclaimable:0 [ 2237.909602][ T3557] free:1278266 free_pcp:6104 free_cma:0 [ 2237.954893][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.393196][ T3557] Node 0 active_anon:52076kB inactive_anon:4kB active_file:81524kB inactive_file:157776kB unevictable:1584kB isolated(anon):0kB isolated(file):0kB mapped:104376kB dirty:960kB writeback:0kB shmem:23268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:3076kB sec_pagetables:0kB all_unreclaimable? no [ 2238.427222][ T3557] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:188kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2238.466551][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.484278][ T3618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2238.553277][ T3557] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2238.580410][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.589774][ T3557] lowmem_reserve[]: 0 2465 2466 0 0 [ 2238.595915][ T3557] Node 0 DMA32 free:1187620kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:52040kB inactive_anon:4kB active_file:81524kB inactive_file:156944kB unevictable:1584kB writepending:956kB present:3129332kB managed:2552496kB mlocked:0kB bounce:0kB free_pcp:9900kB local_pcp:1336kB free_cma:0kB [ 2238.626412][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.704655][ T3621] netlink: 'syz.0.5868': attribute type 27 has an invalid length. [ 2238.714282][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5868'. [ 2238.791983][ T3557] lowmem_reserve[]: 0 0 0 0 0 [ 2238.800169][ T3557] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2238.827072][ C1] vkms_vblank_simulate: vblank timer overrun [ 2238.854184][ T3557] lowmem_reserve[]: 0 0 0 0 0 [ 2238.871781][ T3557] Node 1 Normal free:3911352kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13624kB local_pcp:2716kB free_cma:0kB [ 2238.918402][ T3557] lowmem_reserve[]: 0 0 0 0 0 [ 2238.923373][ T3557] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2239.011928][ T3557] Node 0 DMA32: 3*4kB (UME) 41*8kB (UE) 90*16kB (UE) 143*32kB (UME) 176*64kB (ME) 83*128kB (ME) 156*256kB (UME) 59*512kB (UME) 25*1024kB (UM) 7*2048kB (UME) 256*4096kB (UM) = 1186900kB [ 2239.041521][ T3557] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2239.056133][ T3557] Node 1 Normal: 201*4kB (UME) 53*8kB (UME) 34*16kB (UME) 198*32kB (UME) 97*64kB (UME) 26*128kB (UME) 18*256kB (UME) 4*512kB (UM) 2*1024kB (UE) 5*2048kB (UE) 946*4096kB (M) = 3911404kB [ 2239.089839][ T3557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2239.100258][ T3557] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2239.110289][ T3557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2239.126941][ T3557] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2239.169006][ T3557] 63242 total pagecache pages [ 2239.195440][ T3557] 8 pages in swap cache [ 2239.206501][ T3557] Free swap = 124412kB [ 2239.221042][ T3557] Total swap = 124996kB [ 2239.241374][ T3557] 2097051 pages RAM [ 2239.256699][ T3557] 0 pages HighMem/MovableOnly [ 2239.275584][ T3557] 427077 pages reserved [ 2239.283553][ T3557] 0 pages cma reserved [ 2239.534650][ T3645] veth0_vlan: left promiscuous mode [ 2239.542101][T29923] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2239.572993][ T3645] veth0_vlan: entered promiscuous mode [ 2239.718241][T29923] usb 3-1: Using ep0 maxpacket: 32 [ 2239.744058][T29923] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2239.782745][T29923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2239.807001][T29922] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2239.848652][T29923] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2239.904809][T29923] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2239.984261][T29923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2240.004469][T29922] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=51.38 [ 2240.041532][T29922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.059894][T29923] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2240.124564][T29923] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2240.139881][T29922] usb 5-1: Product: syz [ 2240.159178][T29922] usb 5-1: Manufacturer: syz [ 2240.184639][T29923] usb 3-1: Product: syz [ 2240.191267][T29922] usb 5-1: SerialNumber: syz [ 2240.207083][T29923] usb 3-1: Manufacturer: syz [ 2240.211761][T29923] usb 3-1: SerialNumber: syz [ 2240.271168][T29923] usb 3-1: config 0 descriptor?? [ 2240.277458][T29922] usb 5-1: config 0 descriptor?? [ 2240.311757][T29923] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2240.355304][ T5284] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 2240.374349][T29923] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2240.527739][T29922] usb 5-1: USB disconnect, device number 55 [ 2240.536636][ T5284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2240.589255][ T5284] usb 4-1: not running at top speed; connect to a high speed hub [ 2240.643784][ T5284] usb 4-1: config 11 has an invalid interface number: 244 but max is 0 [ 2240.673977][ T5284] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 2240.691696][ T5284] usb 4-1: config 11 has no interface number 0 [ 2240.699054][ T5284] usb 4-1: config 11 interface 244 altsetting 133 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2240.830175][ T5284] usb 4-1: config 11 interface 244 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2240.862184][ T5284] usb 4-1: config 11 interface 244 has no altsetting 0 [ 2240.887019][ T5284] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 2240.897868][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2240.906095][ T5284] usb 4-1: Manufacturer: syz [ 2240.910926][ T5284] usb 4-1: SerialNumber: syz [ 2241.144609][ T5284] peak_usb 4-1:11.244 can0: unable to request usb[type=0 value=1] err=-71 [ 2241.155710][ T5284] peak_usb 4-1:11.244: unable to read PCAN-USB X6 firmware info (err -71) [ 2241.226194][ T5284] peak_usb 4-1:11.244: probe with driver peak_usb failed with error -71 [ 2241.239659][ T5284] usb 4-1: USB disconnect, device number 123 [ 2241.623975][ T3663] netlink: 'syz.4.5878': attribute type 12 has an invalid length. [ 2241.987150][ T3637] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 2241.987480][T29923] usb 3-1: USB disconnect, device number 12 [ 2241.994372][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 2242.069731][ T3658] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 2242.112216][T29923] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2242.714114][ T3681] veth0_vlan: left promiscuous mode [ 2242.788856][ T3681] veth0_vlan: entered promiscuous mode [ 2243.226631][T24530] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2243.487442][T24530] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2243.557615][T24530] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2243.619632][T24530] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2243.666379][T24530] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2243.710831][T24530] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2243.764755][T24530] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2243.785505][T24530] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2243.793596][T24530] usb 1-1: Product: syz [ 2243.812287][T24530] usb 1-1: Manufacturer: syz [ 2243.834222][T24530] cdc_wdm 1-1:1.0: skipping garbage [ 2243.849923][T24530] cdc_wdm 1-1:1.0: skipping garbage [ 2243.869299][T24530] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2243.883906][T24530] cdc_wdm 1-1:1.0: Unknown control protocol [ 2243.963626][ T3696] netlink: 'syz.2.5892': attribute type 1 has an invalid length. [ 2243.980499][ T3696] netlink: 'syz.2.5892': attribute type 2 has an invalid length. [ 2243.992770][ T3696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5892'. [ 2244.037343][T24530] usb 1-1: USB disconnect, device number 86 [ 2244.039158][T29922] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2244.205080][T29922] usb 5-1: Using ep0 maxpacket: 16 [ 2244.212941][T29922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 2244.225286][T29922] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 2244.245654][T29922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.275691][T29922] usb 5-1: config 0 descriptor?? [ 2244.545324][ T5284] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2244.635837][T29923] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 2244.701753][ T3691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.712125][ T5284] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2244.722630][ T5284] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2244.734682][ T3691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.755308][ T5284] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2244.766764][T29922] hid (null): report_id 2838798905 is invalid [ 2244.783546][ T5284] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2244.795322][T29922] hid (null): unknown global tag 0xc [ 2244.823742][T29922] hid (null): unknown global tag 0xa5 [ 2244.829405][T29923] usb 2-1: Using ep0 maxpacket: 16 [ 2244.836095][ T5284] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2244.847454][T29922] hid (null): unknown global tag 0xd [ 2244.856675][T29922] hid-generic 0003:0158:0100.0089: unknown main item tag 0x1 [ 2244.864298][T29922] hid-generic 0003:0158:0100.0089: unexpected long global item [ 2244.872957][T29922] hid-generic 0003:0158:0100.0089: probe with driver hid-generic failed with error -22 [ 2244.895442][T29923] usb 2-1: config 0 has no interfaces? [ 2244.901084][T29923] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice=ac.00 [ 2244.910416][T29923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.919569][ T5284] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2244.930795][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2244.939465][ T5284] usb 1-1: Product: syz [ 2244.943705][ T5284] usb 1-1: Manufacturer: syz [ 2244.950791][T29923] usb 2-1: config 0 descriptor?? [ 2244.965233][ T5284] cdc_wdm 1-1:1.0: skipping garbage [ 2244.970556][ T5284] cdc_wdm 1-1:1.0: skipping garbage [ 2244.977530][ T5284] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 2244.983592][ T5284] cdc_wdm 1-1:1.0: Unknown control protocol [ 2244.985943][T29916] usb 5-1: USB disconnect, device number 56 [ 2245.190615][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.223267][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.272695][ T3700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.301512][ T3700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.363880][T29916] usb 2-1: USB disconnect, device number 106 [ 2245.513128][ T3705] netlink: 'syz.3.5896': attribute type 12 has an invalid length. [ 2245.749417][ T3706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2245.783928][ T3706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.999882][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 2246.000241][T29916] usb 1-1: USB disconnect, device number 87 [ 2246.006949][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 2246.018607][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2246.027537][ C1] vkms_vblank_simulate: vblank timer overrun [ 2246.222415][ T3721] veth0_vlan: left promiscuous mode [ 2246.233882][ T3721] veth0_vlan: entered promiscuous mode [ 2246.460472][ T3726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5902'. [ 2246.825108][T29916] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 2246.955217][T24538] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2246.989436][ T3740] netlink: 'syz.2.5908': attribute type 15 has an invalid length. [ 2247.007460][T29916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2247.026680][T29916] usb 2-1: config 0 has no interface number 0 [ 2247.032921][T29916] usb 2-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=27.55 [ 2247.043511][ T3740] fuse: Bad value for 'rootmode' [ 2247.062640][T29916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.083993][T29916] usb 2-1: config 0 descriptor?? [ 2247.107097][T29916] ftdi_sio 2-1:0.1: FTDI USB Serial Device converter detected [ 2247.129056][T29916] ftdi_sio ttyUSB0: unknown device type: 0x2755 [ 2247.145978][T24538] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2247.156566][T24538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2247.179717][T24538] usb 5-1: config 0 descriptor?? [ 2247.380108][ T3730] mac80211_hwsim hwsim440 wlan1: entered promiscuous mode [ 2247.403306][ T3730] macvlan2: entered promiscuous mode [ 2247.409170][ T3730] macvlan2: entered allmulticast mode [ 2247.425268][ T3730] mac80211_hwsim hwsim440 wlan1: entered allmulticast mode [ 2247.463901][ T3730] mac80211_hwsim hwsim440 wlan1: left allmulticast mode [ 2247.471385][ T3730] mac80211_hwsim hwsim440 wlan1: left promiscuous mode [ 2247.590461][T29916] usb 2-1: USB disconnect, device number 107 [ 2247.597663][T29916] ftdi_sio 2-1:0.1: device disconnected [ 2248.079336][T24530] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2248.236027][T29916] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2248.243939][T24530] usb 4-1: Using ep0 maxpacket: 8 [ 2248.250926][T24530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2248.262591][T24530] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2248.288194][T24530] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2248.303896][T24530] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2248.319712][T24530] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.336083][T24530] usb 4-1: config 0 descriptor?? [ 2248.385131][T29916] usb 1-1: device descriptor read/64, error -71 [ 2248.570402][ T3744] vlan2: entered promiscuous mode [ 2248.585588][ T3744] bond0: entered promiscuous mode [ 2248.590762][ T3744] bond_slave_0: entered promiscuous mode [ 2248.597438][ T3744] bond_slave_1: entered promiscuous mode [ 2248.631396][ T3744] team0: Port device vlan2 added [ 2248.643503][T29916] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2248.806297][T29916] usb 1-1: device descriptor read/64, error -71 [ 2248.925330][T29916] usb usb1-port1: attempt power cycle [ 2249.285681][T29916] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2249.336538][T29916] usb 1-1: device descriptor read/8, error -71 [ 2249.585200][T29916] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 2249.616058][T29916] usb 1-1: device descriptor read/8, error -71 [ 2249.725349][T29916] usb usb1-port1: unable to enumerate USB device [ 2249.876683][T24538] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2249.928449][T24538] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2249.976035][T24538] usb 5-1: USB disconnect, device number 57 [ 2250.525588][T24538] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2250.672040][ T3779] netlink: 201400 bytes leftover after parsing attributes in process `syz.2.5920'. [ 2250.709339][T24538] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2250.745905][ T3780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5920'. [ 2250.762994][T24538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2250.778850][T24538] usb 5-1: Product: syz [ 2250.810871][T24538] usb 5-1: Manufacturer: syz [ 2250.850098][T24538] usb 5-1: SerialNumber: syz [ 2250.922448][T24538] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2250.975787][T29922] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2251.023488][T24530] usbhid 4-1:0.0: can't add hid device: -71 [ 2251.060598][T24530] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2251.134147][T24530] usb 4-1: USB disconnect, device number 124 [ 2251.371957][ T3785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2251.619901][ T3030] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.759396][ T3030] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.800200][ T3788] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.5926'. [ 2251.980086][T30739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2251.993772][T30739] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2252.004224][T30739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2252.040417][T30739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2252.062436][T30739] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2252.064449][ T3030] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.110223][T30739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2252.189648][T22508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2252.212508][T22508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2252.220227][T22508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2252.256001][T22508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2252.266218][T22508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2252.277501][T22508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2252.356257][T29922] usb 5-1: Service connection timeout for: 256 [ 2252.362642][T29922] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 2252.413881][T29922] ath9k_htc: Failed to initialize the device [ 2252.428594][T29922] usb 5-1: ath9k_htc: USB layer deinitialized [ 2252.460348][ T3030] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.535261][T24538] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2252.635405][ T5284] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 2252.647535][T24532] usb 5-1: USB disconnect, device number 58 [ 2252.685206][T24538] usb 3-1: Using ep0 maxpacket: 16 [ 2252.692131][T24538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2252.704478][T24538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2252.717876][T24538] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2252.731269][T24538] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2252.741114][T24538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.771132][T24538] usb 3-1: config 0 descriptor?? [ 2252.795547][ T3803] chnl_net:caif_netlink_parms(): no params data found [ 2252.807249][ T5284] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2252.833853][ T3030] bridge_slave_1: left allmulticast mode [ 2252.836312][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2252.848116][ T3030] bridge_slave_1: left promiscuous mode [ 2252.858185][ T5284] usb 2-1: config 0 descriptor?? [ 2252.874063][ T3030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.896350][ T3030] bridge_slave_0: left allmulticast mode [ 2252.902075][ T3030] bridge_slave_0: left promiscuous mode [ 2252.923433][ T3030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.011644][ T29] audit: type=1326 audit(1728613640.588:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.072629][ T29] audit: type=1326 audit(1728613640.618:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.106030][ T3030] bond0: left promiscuous mode [ 2253.113698][ T3030] bond_slave_0: left promiscuous mode [ 2253.121490][ T3030] bond_slave_1: left promiscuous mode [ 2253.133143][ T29] audit: type=1326 audit(1728613640.618:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.158306][ T29] audit: type=1326 audit(1728613640.618:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.268394][ T29] audit: type=1326 audit(1728613640.618:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.298581][ T29] audit: type=1326 audit(1728613640.618:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.360875][ T29] audit: type=1326 audit(1728613640.618:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.455150][ T29] audit: type=1326 audit(1728613640.618:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.525115][ T29] audit: type=1326 audit(1728613640.618:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.556114][ T29] audit: type=1326 audit(1728613640.618:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3801 comm="syz.2.5930" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2253.641148][T24532] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 2253.805310][T24532] usb 5-1: Using ep0 maxpacket: 8 [ 2253.822453][T24532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2253.843950][T24532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2253.854185][T24532] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2253.868861][T24532] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2253.879088][T24532] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.896721][T24532] usb 5-1: config 0 descriptor?? [ 2254.157443][ T3030] team0: Port device vlan2 removed [ 2254.172376][ T3030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.187099][ T3030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.200191][ T3030] bond0 (unregistering): Released all slaves [ 2254.233053][ T3814] netlink: 'syz.0.5931': attribute type 27 has an invalid length. [ 2254.249493][ T3817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5931'. [ 2254.295704][T24538] usbhid 3-1:0.0: can't add hid device: -71 [ 2254.301885][T24538] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2254.319371][ T3824] vlan3: entered promiscuous mode [ 2254.359908][T30739] Bluetooth: hci3: command tx timeout [ 2254.373786][T24538] usb 3-1: USB disconnect, device number 13 [ 2254.502847][ T3833] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.5933'. [ 2254.518541][ T3833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5933'. [ 2254.537755][ T5284] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2254.572315][ T5284] asix 2-1:0.0: probe with driver asix failed with error -71 [ 2254.610176][ T5284] usb 2-1: USB disconnect, device number 108 [ 2254.782836][ T3803] bridge0: port 1(bridge_slave_0) entered blocking state [ 2254.793956][ T3803] bridge0: port 1(bridge_slave_0) entered disabled state [ 2254.802926][ T3803] bridge_slave_0: entered allmulticast mode [ 2254.811041][ T3803] bridge_slave_0: entered promiscuous mode [ 2254.833124][ T3030] hsr_slave_0: left promiscuous mode [ 2254.843728][ T3030] hsr_slave_1: left promiscuous mode [ 2254.859896][ T3030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2254.874265][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2254.885527][ T3030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2254.897977][ T3030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2254.946712][ T3030] veth1_macvtap: left promiscuous mode [ 2254.952363][ T3030] veth0_macvtap: left promiscuous mode [ 2254.958237][ T3030] veth1_vlan: left promiscuous mode [ 2254.964685][ T3030] veth0_vlan: left promiscuous mode [ 2255.045721][T29916] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 2255.196956][T29916] usb 1-1: Using ep0 maxpacket: 16 [ 2255.204134][T29916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.231191][T29916] usb 1-1: config 0 has no interfaces? [ 2255.263593][T29916] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2255.298271][T29916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.324740][T29916] usb 1-1: Product: syz [ 2255.336590][T29916] usb 1-1: Manufacturer: syz [ 2255.347020][T29916] usb 1-1: SerialNumber: syz [ 2255.363340][T29916] usb 1-1: config 0 descriptor?? [ 2255.451327][T24538] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2255.601672][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2255.616927][T24538] usb 3-1: Using ep0 maxpacket: 32 [ 2255.622700][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2255.624619][T24538] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 2255.643124][T29916] usb 1-1: USB disconnect, device number 92 [ 2255.660825][T24538] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2255.676119][T24538] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 2255.689975][T24538] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2255.725171][T24538] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2255.753903][T24538] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2255.763727][T24538] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2255.794659][T24538] usb 3-1: Product: syz [ 2255.800068][T24538] usb 3-1: Manufacturer: syz [ 2255.805119][T24538] usb 3-1: SerialNumber: syz [ 2255.812701][T24538] usb 3-1: config 0 descriptor?? [ 2255.821341][T24538] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2255.866557][T24538] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2256.065462][T29922] usb 3-1: USB disconnect, device number 14 [ 2256.065570][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 2256.099033][T29922] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 2256.434299][T24532] usbhid 5-1:0.0: can't add hid device: -71 [ 2256.443299][T24532] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2256.445250][T30739] Bluetooth: hci3: command tx timeout [ 2256.462081][T24532] usb 5-1: USB disconnect, device number 59 [ 2256.647194][ T3030] team0 (unregistering): Port device team_slave_1 removed [ 2256.757207][ T3030] team0 (unregistering): Port device team_slave_0 removed [ 2257.713443][ T3803] bridge0: port 2(bridge_slave_1) entered blocking state [ 2257.721110][ T3803] bridge0: port 2(bridge_slave_1) entered disabled state [ 2257.730493][ T3803] bridge_slave_1: entered allmulticast mode [ 2257.743826][ T3803] bridge_slave_1: entered promiscuous mode [ 2257.821165][ T3879] netlink: 'syz.2.5942': attribute type 27 has an invalid length. [ 2257.966515][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2257.974028][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.516228][T30739] Bluetooth: hci3: command tx timeout [ 2258.584928][T22508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2258.599154][T22508] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2258.609941][T22508] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2258.630279][T22508] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2258.640906][T22508] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2258.650305][T22508] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2258.732920][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2258.763864][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2258.944394][ T3879] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.953636][ T3879] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.964124][ T3879] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.974271][ T3879] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.021525][ T3884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5942'. [ 2259.031259][ T3885] veth0_vlan: left promiscuous mode [ 2259.040127][ T3885] veth0_vlan: entered promiscuous mode [ 2259.147057][ T3803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2259.169596][ T3803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2259.360087][ T3803] team0: Port device team_slave_0 added [ 2259.415275][ T3803] team0: Port device team_slave_1 added [ 2259.502496][ T3803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.517417][ T3803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.553158][ T3803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2259.593779][ T3803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2259.625890][ T3803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2259.656773][ T3803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2259.668948][ T3908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5951'. [ 2259.679562][ T3908] netem: change failed [ 2259.783745][ T3803] hsr_slave_0: entered promiscuous mode [ 2259.792668][ T3803] hsr_slave_1: entered promiscuous mode [ 2259.815098][ T3803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2259.835220][ T3803] Cannot create hsr debugfs directory [ 2259.998564][T24538] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 2260.165293][T24538] usb 1-1: Using ep0 maxpacket: 8 [ 2260.175831][T24538] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2260.183986][T24538] usb 1-1: can't read configurations, error -61 [ 2260.195658][T29916] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 2260.264552][ T3896] chnl_net:caif_netlink_parms(): no params data found [ 2260.325498][T24538] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2260.384128][T29916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2260.417228][T29916] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2260.435409][T29916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.460601][T29916] usb 2-1: config 0 descriptor?? [ 2260.495149][T24538] usb 1-1: Using ep0 maxpacket: 8 [ 2260.520892][T24538] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2260.535366][T24538] usb 1-1: can't read configurations, error -61 [ 2260.544366][T24538] usb usb1-port1: attempt power cycle [ 2260.595086][T30739] Bluetooth: hci3: command tx timeout [ 2260.675419][T30739] Bluetooth: hci0: command tx timeout [ 2260.703786][T29916] ath6kl: Failed to submit usb control message: -71 [ 2260.725658][T29916] ath6kl: unable to send the bmi data to the device: -71 [ 2260.732855][T29916] ath6kl: Unable to send get target info: -71 [ 2260.799513][T29916] ath6kl: Failed to init ath6kl core: -71 [ 2260.827001][T29916] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2260.853943][T29916] usb 2-1: USB disconnect, device number 109 [ 2260.895325][T24538] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2260.935892][T24538] usb 1-1: Using ep0 maxpacket: 8 [ 2260.946242][T24538] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2260.966590][T24538] usb 1-1: can't read configurations, error -61 [ 2260.990737][ T3896] bridge0: port 1(bridge_slave_0) entered blocking state [ 2261.003676][ T3896] bridge0: port 1(bridge_slave_0) entered disabled state [ 2261.015848][ T3896] bridge_slave_0: entered allmulticast mode [ 2261.023333][ T3896] bridge_slave_0: entered promiscuous mode [ 2261.095606][T24538] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2261.148880][T24538] usb 1-1: Using ep0 maxpacket: 8 [ 2261.157173][T24538] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 2261.184458][T24538] usb 1-1: can't read configurations, error -61 [ 2261.202528][T24538] usb usb1-port1: unable to enumerate USB device [ 2261.216775][ T3896] bridge0: port 2(bridge_slave_1) entered blocking state [ 2261.232988][ T3896] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.256371][ T3896] bridge_slave_1: entered allmulticast mode [ 2261.269663][ T3896] bridge_slave_1: entered promiscuous mode [ 2261.278462][ T11] bridge_slave_1: left allmulticast mode [ 2261.295081][ T11] bridge_slave_1: left promiscuous mode [ 2261.305493][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2261.325141][ T11] bridge_slave_0: left allmulticast mode [ 2261.330864][ T11] bridge_slave_0: left promiscuous mode [ 2261.360023][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.166192][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2262.183162][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2262.193634][ T11] bond0 (unregistering): Released all slaves [ 2262.221447][ T3950] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2262.269257][ T3959] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2262.391418][ T3896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.405123][ T11] tipc: Disabling bearer [ 2262.411123][ T11] tipc: Left network mode [ 2262.457577][ T3896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.602424][ T3896] team0: Port device team_slave_0 added [ 2262.662509][ T3896] team0: Port device team_slave_1 added [ 2262.755352][T30739] Bluetooth: hci0: command tx timeout [ 2262.814613][ T3803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2262.857414][ T3803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2262.877300][ T3896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.884788][ T3896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.913734][ T3896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2262.933304][ T3896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2262.942384][ T3896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2262.969525][ T3896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2263.025653][ T11] hsr_slave_0: left promiscuous mode [ 2263.045560][ T11] hsr_slave_1: left promiscuous mode [ 2263.053974][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2263.062958][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2263.111562][ T11] team0 (unregistering): Port device vlan2 removed [ 2263.770920][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2263.849470][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2264.812115][ T3803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2264.840771][ T3967] netlink: 'syz.0.5959': attribute type 27 has an invalid length. [ 2264.846227][T30739] Bluetooth: hci0: command tx timeout [ 2264.891335][ T3970] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5959'. [ 2264.992437][ T3803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2265.146980][ T3896] hsr_slave_0: entered promiscuous mode [ 2265.197269][ T3896] hsr_slave_1: entered promiscuous mode [ 2265.225521][ T3896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2265.233352][ T3896] Cannot create hsr debugfs directory [ 2265.331540][ T3803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2265.363796][ T3803] 8021q: adding VLAN 0 to HW filter on device team0 [ 2265.413843][ T3803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2265.424458][ T3803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2265.449410][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 2265.456630][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2265.496728][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.503900][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2265.629278][ T3989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5964'. [ 2265.688676][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 2265.688696][ T29] audit: type=1326 audit(1728613653.268:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 2265.786389][ T29] audit: type=1326 audit(1728613653.268:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 2265.825810][ T29] audit: type=1326 audit(1728613653.268:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 2265.870921][ T3803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2265.894472][ T29] audit: type=1326 audit(1728613653.268:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3982 comm="syz.0.5964" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 2266.251188][ T3803] veth0_vlan: entered promiscuous mode [ 2266.332721][ T3803] veth1_vlan: entered promiscuous mode [ 2266.474630][ T3803] veth0_macvtap: entered promiscuous mode [ 2266.484529][ T3803] veth1_macvtap: entered promiscuous mode [ 2266.624554][ T3803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.635244][ T3803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.645273][ T3803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2266.655831][ T3803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.667338][ T3803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2266.677329][ T3803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.688033][ T3803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.698275][ T3803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2266.709079][ T3803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2266.720765][ T3803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2266.860081][ T3803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.875076][ T3803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.883880][ T3803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.895092][ T3803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2266.921116][T30739] Bluetooth: hci0: command tx timeout [ 2267.022125][ T4010] input: syz0 as /devices/virtual/input/input142 [ 2267.269431][ T9842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.295590][ T9842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.404215][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2267.441339][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2267.792828][ T3896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2267.808251][ T3896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2267.834529][ T3896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2267.852395][ T3896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2267.905475][ T5284] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2268.015482][ T4040] FAULT_INJECTION: forcing a failure. [ 2268.015482][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 2268.063040][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.3.5972 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2268.073814][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2268.083929][ T4040] Call Trace: [ 2268.087312][ T4040] [ 2268.090295][ T4040] dump_stack_lvl+0x241/0x360 [ 2268.095032][ T4040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2268.100294][ T4040] ? __pfx__printk+0x10/0x10 [ 2268.104958][ T4040] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2268.110487][ T4040] ? __pfx___might_resched+0x10/0x10 [ 2268.115850][ T4040] should_fail_ex+0x3b0/0x4e0 [ 2268.120684][ T4040] should_failslab+0xac/0x100 [ 2268.125412][ T4040] ? rtnl_newlink+0xf2/0x20a0 [ 2268.130150][ T4040] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2268.135509][ T4040] rtnl_newlink+0xf2/0x20a0 [ 2268.140091][ T4040] ? __pfx_lock_acquire+0x10/0x10 [ 2268.145185][ T4040] ? __mutex_lock+0x9a1/0xd70 [ 2268.149919][ T4040] ? __pfx_lock_release+0x10/0x10 [ 2268.155011][ T4040] ? do_raw_spin_lock+0x14f/0x370 [ 2268.160105][ T4040] ? __pfx_rtnl_newlink+0x10/0x10 [ 2268.165197][ T4040] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2268.170475][ T4040] ? __mutex_lock+0x9ab/0xd70 [ 2268.175305][ T4040] ? __mutex_lock+0x52a/0xd70 [ 2268.180218][ T4040] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2268.185613][ T4040] ? __pfx___mutex_lock+0x10/0x10 [ 2268.190879][ T4040] ? __pfx_rtnl_newlink+0x10/0x10 [ 2268.195966][ T4040] rtnetlink_rcv_msg+0x73f/0xcf0 [ 2268.200970][ T4040] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 2268.206149][ T4040] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2268.211684][ T4040] ? ref_tracker_free+0x643/0x7e0 [ 2268.216860][ T4040] netlink_rcv_skb+0x1e3/0x430 [ 2268.221700][ T4040] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2268.227323][ T4040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2268.232761][ T4040] ? netlink_deliver_tap+0x2e/0x1b0 [ 2268.238039][ T4040] netlink_unicast+0x7f6/0x990 [ 2268.242882][ T4040] ? __pfx_netlink_unicast+0x10/0x10 [ 2268.248235][ T4040] ? __virt_addr_valid+0x183/0x530 [ 2268.253421][ T4040] ? __check_object_size+0x48e/0x900 [ 2268.258778][ T4040] netlink_sendmsg+0x8e4/0xcb0 [ 2268.263616][ T4040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2268.268968][ T4040] ? __pfx_lock_release+0x10/0x10 [ 2268.274056][ T4040] ? aa_sock_msg_perm+0x91/0x160 [ 2268.279245][ T4040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2268.284587][ T4040] __sock_sendmsg+0x221/0x270 [ 2268.289333][ T4040] ____sys_sendmsg+0x52a/0x7e0 [ 2268.294205][ T4040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2268.299568][ T4040] __sys_sendmsg+0x292/0x380 [ 2268.304266][ T4040] ? __pfx___sys_sendmsg+0x10/0x10 [ 2268.309462][ T4040] ? __pfx_vfs_write+0x10/0x10 [ 2268.314320][ T4040] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2268.320991][ T4040] ? lockdep_hardirqs_on+0x99/0x150 [ 2268.326268][ T4040] __do_fast_syscall_32+0xb4/0x110 [ 2268.331532][ T4040] ? exc_page_fault+0x590/0x8c0 [ 2268.336543][ T4040] do_fast_syscall_32+0x34/0x80 [ 2268.341460][ T4040] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2268.347859][ T4040] RIP: 0023:0xf7f14579 [ 2268.351979][ T4040] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2268.371648][ T4040] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2268.380135][ T4040] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000280 [ 2268.388162][ T4040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2268.396186][ T4040] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2268.404300][ T4040] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2268.412330][ T4040] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2268.420374][ T4040] [ 2268.436006][ T5284] usb 1-1: Using ep0 maxpacket: 16 [ 2268.497835][ T5284] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 2268.512648][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2268.536782][ T5284] usb 1-1: Product: syz [ 2268.541074][ T5284] usb 1-1: Manufacturer: syz [ 2268.597209][ T5284] usb 1-1: SerialNumber: syz [ 2268.621059][ T5284] usb 1-1: config 0 descriptor?? [ 2268.655588][ T5284] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 2268.662125][ T5284] pctv452e: pctv452e_power_ctrl: 1 [ 2268.662125][ T5284] [ 2268.684661][ T5284] usb 1-1: selecting invalid altsetting 3 [ 2268.696407][ T5284] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 2268.696407][ T5284] [ 2268.712693][ T5284] dvb-usb: bulk message failed: -22 (5/0) [ 2268.724406][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2268.739249][ T5284] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 2268.746346][ T5284] usb 1-1: media controller created [ 2268.766425][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2268.884120][ T3896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2268.942523][ T3896] 8021q: adding VLAN 0 to HW filter on device team0 [ 2268.997516][ T5284] DVB: Unable to find symbol stb0899_attach() [ 2269.003696][ T5284] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 2269.128897][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.136081][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.222037][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.229211][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.275176][ T5284] rc_core: IR keymap rc-dib0700-rc5 not found [ 2269.281481][ T5284] Registered IR keymap rc-empty [ 2269.293241][ T5284] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2269.311583][ T5284] input: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input143 [ 2269.389254][ T5284] dvb-usb: schedule remote query interval to 100 msecs. [ 2269.405396][ T5284] pctv452e: pctv452e_power_ctrl: 0 [ 2269.405396][ T5284] [ 2269.413072][ T5284] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 2269.440126][ T5284] usb 1-1: USB disconnect, device number 97 [ 2269.495105][T29922] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 2269.650007][ T3896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2269.659854][ T5284] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 2269.685246][T29922] usb 2-1: Using ep0 maxpacket: 16 [ 2269.692138][T29922] usb 2-1: config 0 has no interfaces? [ 2269.699304][T29922] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice=ac.00 [ 2269.715896][T29922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.730502][T29922] usb 2-1: config 0 descriptor?? [ 2269.804227][ T3896] veth0_vlan: entered promiscuous mode [ 2269.821463][ T3896] veth1_vlan: entered promiscuous mode [ 2269.878389][ T3896] veth0_macvtap: entered promiscuous mode [ 2269.944181][ T4073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.967086][ T3896] veth1_macvtap: entered promiscuous mode [ 2269.988508][ T4073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.026739][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.048698][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.059034][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.069662][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.079793][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.090450][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.101732][ T3896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2270.126086][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2270.136980][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.148073][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2270.163427][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.187221][ T3896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2270.215173][ T3896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.319393][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2270.333135][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.384187][ T3896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2270.461311][ T5284] usb 2-1: USB disconnect, device number 110 [ 2270.541042][ T3896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.556011][T29916] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2270.661384][ T3896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.705106][T29916] usb 1-1: device descriptor read/64, error -71 [ 2270.738686][ T3896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.829550][ T3896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2270.965668][T29916] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2271.126186][T29916] usb 1-1: device descriptor read/64, error -71 [ 2271.241470][ T3030] wlan1: Trigger new scan to find an IBSS to join [ 2271.258089][T29916] usb usb1-port1: attempt power cycle [ 2271.276782][ T9842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2271.316885][ T9842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2271.409373][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2271.433264][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2271.465579][T29915] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 2271.635593][T29915] usb 2-1: Using ep0 maxpacket: 16 [ 2271.643767][T29915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2271.662789][T29915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2271.673403][T29915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.681960][T29916] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2271.707414][T29915] usb 2-1: config 0 descriptor?? [ 2271.725792][T29916] usb 1-1: device descriptor read/8, error -71 [ 2271.734924][T29915] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input144 [ 2271.942447][ T4090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.986128][ T4090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.048470][T29916] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2272.080835][T29916] usb 1-1: device descriptor read/8, error -71 [ 2272.155236][T29922] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2272.196616][T29916] usb usb1-port1: unable to enumerate USB device [ 2272.255269][T24532] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2272.336419][T29922] usb 3-1: Using ep0 maxpacket: 32 [ 2272.358005][T29922] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.44 [ 2272.379277][T29922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.392788][T29922] usb 3-1: Product: syz [ 2272.401665][T29922] usb 3-1: Manufacturer: syz [ 2272.423098][T29922] usb 3-1: SerialNumber: syz [ 2272.430377][T24532] usb 5-1: Using ep0 maxpacket: 32 [ 2272.441449][ T4114] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5982'. [ 2272.463107][T29922] usb 3-1: config 0 descriptor?? [ 2272.475478][T24532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2272.497617][T29922] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2272.527472][T24532] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 2272.548571][T29922] usb-storage 3-1:0.0: Quirks match for vid 04e6 pid 0007: 1 [ 2272.561032][T24532] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.578080][T29922] usb-storage 3-1:0.0: This device (04e6,0007,0144 S 3e P 01) has an unneeded Protocol entry in unusual_devs.h (kernel 6.12.0-rc2-syzkaller-00074-gd3d1556696c1) [ 2272.578080][T29922] Please send a copy of this message to and [ 2272.606606][T24532] usb 5-1: Product: syz [ 2272.610875][T24532] usb 5-1: Manufacturer: syz [ 2272.615654][T24532] usb 5-1: SerialNumber: syz [ 2272.623011][T24532] usb 5-1: config 0 descriptor?? [ 2272.737773][T24532] usb 3-1: USB disconnect, device number 15 [ 2272.853240][ T4097] kAFS: unparsable volume name [ 2272.928564][ T4097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.955523][ T4097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2273.022711][T24536] usb 5-1: USB disconnect, device number 60 [ 2273.418535][ T4143] netlink: 'syz.2.5986': attribute type 2 has an invalid length. [ 2273.651767][ T4151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5988'. [ 2273.678202][ T29] audit: type=1326 audit(1728613661.248:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz.2.5988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2273.678261][ T29] audit: type=1326 audit(1728613661.248:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz.2.5988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2273.678303][ T29] audit: type=1326 audit(1728613661.248:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz.2.5988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2273.678341][ T29] audit: type=1326 audit(1728613661.248:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz.2.5988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2273.678380][ T29] audit: type=1326 audit(1728613661.248:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4150 comm="syz.2.5988" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 2274.181894][ T4165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5991'. [ 2274.272225][ T4672] bcm5974 2-1:0.0: could not read from device [ 2274.304590][ T4672] bcm5974 2-1:0.0: could not read from device [ 2274.384666][T29915] usb 2-1: USB disconnect, device number 111 [ 2274.391609][ T4672] bcm5974 2-1:0.0: could not read from device [ 2274.638795][ T4187] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2274.772666][ T29] audit: type=1326 audit(1728613662.348:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 2274.824256][ T29] audit: type=1326 audit(1728613662.378:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 2274.888482][ T29] audit: type=1326 audit(1728613662.378:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 2274.945259][ T29] audit: type=1326 audit(1728613662.378:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 2274.985396][T24536] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 2274.987920][ T29] audit: type=1326 audit(1728613662.378:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4171 comm="syz.4.5994" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 2275.135857][T24536] usb 2-1: device descriptor read/64, error -71 [ 2275.395325][T24536] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2275.494269][ T4199] No such timeout policy "syz1" [ 2275.494885][ T4200] No such timeout policy "syz1" [ 2275.508451][ T4199] program syz.3.6002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2275.508478][ T4200] program syz.3.6002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2275.555328][T24536] usb 2-1: device descriptor read/64, error -71 [ 2275.665571][T24536] usb usb2-port1: attempt power cycle [ 2276.036016][T24536] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 2276.090353][T24536] usb 2-1: device descriptor read/8, error -71 [ 2276.153406][ T4229] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2276.159000][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 2276.251182][ T4233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6014'. [ 2276.356468][T24536] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 2276.396858][T24536] usb 2-1: device descriptor read/8, error -71 [ 2276.415320][ T8] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2276.537186][T24536] usb usb2-port1: unable to enumerate USB device [ 2276.593004][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2276.605748][ T8] usb 4-1: config 1 has no interface number 0 [ 2276.612042][ T8] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2276.632971][ T8] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2276.644222][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2276.664578][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2276.675712][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2276.683969][ T8] usb 4-1: Product: syz [ 2276.690005][ T8] usb 4-1: Manufacturer: syz [ 2276.694853][ T8] usb 4-1: SerialNumber: syz [ 2276.909266][T22508] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2276.927178][T22508] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2276.953635][T22508] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2276.973767][T22508] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2276.987949][T22508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2276.998481][T22508] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2277.116818][ T35] bridge_slave_1: left allmulticast mode [ 2277.122645][ T35] bridge_slave_1: left promiscuous mode [ 2277.137164][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2277.153179][ T35] bridge_slave_0: left allmulticast mode [ 2277.156374][T24536] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2277.161831][ T35] bridge_slave_0: left promiscuous mode [ 2277.175290][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2277.340868][T24536] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 2277.353212][T24536] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2277.362038][T24536] usb 3-1: can't read configurations, error -61 [ 2277.499667][T24536] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2277.540833][ T8] cdc_ncm 4-1:1.1: bind() failure [ 2277.686210][T24536] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 2277.723667][T24536] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2277.746051][T24536] usb 3-1: can't read configurations, error -61 [ 2277.758899][T24536] usb usb3-port1: attempt power cycle [ 2277.768189][ T4231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.806367][ T4231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.847113][ T5284] usb 4-1: USB disconnect, device number 125 [ 2277.984537][T29923] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2278.125117][T24536] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2278.163516][T29923] usb 2-1: Using ep0 maxpacket: 32 [ 2278.164205][T24536] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 2278.175544][T29923] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 2278.179752][T24536] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2278.196632][T29923] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2278.212527][T24536] usb 3-1: can't read configurations, error -61 [ 2278.214805][T29923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.241696][T29923] usb 2-1: Product: syz [ 2278.248329][T29923] usb 2-1: Manufacturer: syz [ 2278.253145][T29923] usb 2-1: SerialNumber: syz [ 2278.260280][T29923] usb 2-1: config 0 descriptor?? [ 2278.266538][ T4256] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2278.280345][T29923] hub 2-1:0.0: bad descriptor, ignoring hub [ 2278.286464][T29923] hub 2-1:0.0: probe with driver hub failed with error -5 [ 2278.294326][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2278.299563][T29923] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input145 [ 2278.326613][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2278.344806][ T35] bond0 (unregistering): Released all slaves [ 2278.365352][T24536] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2278.403351][T24536] usb 3-1: too many configurations: 21, using maximum allowed: 8 [ 2278.416964][T24536] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 2278.424728][T24536] usb 3-1: can't read configurations, error -61 [ 2278.433003][T24536] usb usb3-port1: unable to enumerate USB device [ 2278.540616][ T4256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2278.587244][ T4256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.857158][ T4265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2278.912164][ T5284] usb 2-1: USB disconnect, device number 116 [ 2278.918601][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 2279.075761][T30739] Bluetooth: hci2: command tx timeout [ 2279.238640][ T35] hsr_slave_0: left promiscuous mode [ 2279.266900][ T35] hsr_slave_1: left promiscuous mode [ 2279.310533][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2279.327377][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2281.051904][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2281.155323][T30739] Bluetooth: hci2: command tx timeout [ 2281.234155][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2282.948756][ T4287] erspan1: entered promiscuous mode [ 2282.954363][ T4287] erspan1: entered allmulticast mode [ 2283.077280][ T4299] geneve0: entered promiscuous mode [ 2283.126696][ T4299] geneve0: left promiscuous mode [ 2283.251508][T30739] Bluetooth: hci2: command tx timeout [ 2283.272844][ T4241] chnl_net:caif_netlink_parms(): no params data found [ 2283.558321][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.565604][ T4241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.572758][ T4241] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.575916][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.595357][ T4241] bridge_slave_0: entered allmulticast mode [ 2283.637020][ T4241] bridge_slave_0: entered promiscuous mode [ 2283.685865][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.695406][ T4241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.702838][ T4241] bridge_slave_1: entered allmulticast mode [ 2283.756035][ T4241] bridge_slave_1: entered promiscuous mode [ 2283.848524][ T4329] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 2283.857455][ T4329] PKCS7: Only support pkcs7_signedData type [ 2283.883034][ T4241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2283.972344][ T4328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2284.327719][ T4241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2284.499376][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.571953][ T4241] team0: Port device team_slave_0 added [ 2284.622766][ T4241] team0: Port device team_slave_1 added [ 2284.751538][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.778878][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2284.813091][ T4241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.858681][ T4241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.886596][ T4241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2284.933528][ T4241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2285.199542][ T4241] hsr_slave_0: entered promiscuous mode [ 2285.226706][ T4241] hsr_slave_1: entered promiscuous mode [ 2285.246322][ T4241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2285.254104][ T4241] Cannot create hsr debugfs directory [ 2285.315089][T30739] Bluetooth: hci2: command tx timeout [ 2285.440550][ T4362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2285.712889][ T4367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2286.533308][ T4392] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6050'. [ 2286.589904][ T4394] FAULT_INJECTION: forcing a failure. [ 2286.589904][ T4394] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.631028][ T4394] CPU: 0 UID: 0 PID: 4394 Comm: syz.3.6051 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2286.641827][ T4394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2286.645389][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6050'. [ 2286.651905][ T4394] Call Trace: [ 2286.651921][ T4394] [ 2286.651934][ T4394] dump_stack_lvl+0x241/0x360 [ 2286.651969][ T4394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2286.677091][ T4394] ? __pfx__printk+0x10/0x10 [ 2286.681739][ T4394] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 2286.687769][ T4394] ? __pfx___might_resched+0x10/0x10 [ 2286.693118][ T4394] should_fail_ex+0x3b0/0x4e0 [ 2286.697854][ T4394] should_failslab+0xac/0x100 [ 2286.702584][ T4394] ? __alloc_skb+0x1c3/0x440 [ 2286.707221][ T4394] kmem_cache_alloc_node_noprof+0x71/0x320 [ 2286.713089][ T4394] __alloc_skb+0x1c3/0x440 [ 2286.717552][ T4394] ? __pfx___alloc_skb+0x10/0x10 [ 2286.722537][ T4394] ? netlink_ack_tlv_len+0x6e/0x200 [ 2286.727789][ T4394] netlink_ack+0x13f/0xa30 [ 2286.732269][ T4394] netlink_rcv_skb+0x262/0x430 [ 2286.737084][ T4394] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 2286.742594][ T4394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2286.747960][ T4394] xfrm_netlink_rcv+0x79/0x90 [ 2286.752696][ T4394] netlink_unicast+0x7f6/0x990 [ 2286.757523][ T4394] ? __pfx_netlink_unicast+0x10/0x10 [ 2286.762857][ T4394] ? __virt_addr_valid+0x183/0x530 [ 2286.768015][ T4394] ? __check_object_size+0x48e/0x900 [ 2286.773353][ T4394] netlink_sendmsg+0x8e4/0xcb0 [ 2286.778173][ T4394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2286.783508][ T4394] ? __pfx_lock_release+0x10/0x10 [ 2286.788585][ T4394] ? aa_sock_msg_perm+0x91/0x160 [ 2286.793665][ T4394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2286.799002][ T4394] __sock_sendmsg+0x221/0x270 [ 2286.803737][ T4394] ____sys_sendmsg+0x52a/0x7e0 [ 2286.808558][ T4394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2286.813901][ T4394] __sys_sendmsg+0x292/0x380 [ 2286.818584][ T4394] ? __pfx___sys_sendmsg+0x10/0x10 [ 2286.823834][ T4394] ? __pfx_vfs_write+0x10/0x10 [ 2286.828669][ T4394] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2286.835319][ T4394] ? lockdep_hardirqs_on+0x99/0x150 [ 2286.840575][ T4394] __do_fast_syscall_32+0xb4/0x110 [ 2286.845723][ T4394] ? exc_page_fault+0x590/0x8c0 [ 2286.850719][ T4394] do_fast_syscall_32+0x34/0x80 [ 2286.855701][ T4394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2286.862071][ T4394] RIP: 0023:0xf7f14579 [ 2286.866184][ T4394] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2286.886011][ T4394] RSP: 002b:00000000f569656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2286.894571][ T4394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 2286.902584][ T4394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2286.910595][ T4394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2286.918611][ T4394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2286.926638][ T4394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2286.934760][ T4394] [ 2287.550926][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6059'. [ 2287.745459][T29923] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2287.766762][ T4241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2287.818070][ T4241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2287.858961][ T4241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2287.883317][ T4241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2287.897858][T29923] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2287.925232][T29923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.959417][T29923] usb 2-1: config 0 descriptor?? [ 2287.983319][T29923] cp210x 2-1:0.0: cp210x converter detected [ 2288.085348][T29922] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2288.140136][ T4241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2288.187603][T29923] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2288.197690][T29923] cp210x 2-1:0.0: querying part number failed [ 2288.209842][ T4241] 8021q: adding VLAN 0 to HW filter on device team0 [ 2288.233049][T29923] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2288.255080][T29922] usb 3-1: Using ep0 maxpacket: 16 [ 2288.262659][T26022] bridge0: port 1(bridge_slave_0) entered blocking state [ 2288.269894][T26022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2288.274915][T29922] usb 3-1: no configurations [ 2288.292704][T29922] usb 3-1: can't read configurations, error -22 [ 2288.326819][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2288.334025][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2288.475402][T29922] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2288.487053][ T4241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2288.648438][ T4241] veth0_vlan: entered promiscuous mode [ 2288.665503][T29922] usb 3-1: Using ep0 maxpacket: 16 [ 2288.672472][T29922] usb 3-1: no configurations [ 2288.691809][ T4241] veth1_vlan: entered promiscuous mode [ 2288.715521][T29922] usb 3-1: can't read configurations, error -22 [ 2288.735878][T29922] usb usb3-port1: attempt power cycle [ 2288.839403][ T4241] veth0_macvtap: entered promiscuous mode [ 2288.861503][ T4241] veth1_macvtap: entered promiscuous mode [ 2288.899284][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2288.936778][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2288.974451][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2288.994006][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.005348][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2289.016426][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.035040][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2289.052898][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.076847][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2289.087734][T29922] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2289.109837][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.126420][T29922] usb 3-1: Using ep0 maxpacket: 16 [ 2289.135445][T29922] usb 3-1: no configurations [ 2289.140411][T29922] usb 3-1: can't read configurations, error -22 [ 2289.154179][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.155589][T24536] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2289.166032][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.194528][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.205273][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.224527][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.244348][ T4241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2289.255077][ T4241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2289.277807][ T4241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2289.299297][ T4241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.308963][T29922] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2289.323554][ T4241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.332855][ T4241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.337316][T24536] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2289.342118][ T4241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2289.352318][T24536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.369544][T29922] usb 3-1: Using ep0 maxpacket: 16 [ 2289.375972][T29922] usb 3-1: no configurations [ 2289.380617][T29922] usb 3-1: can't read configurations, error -22 [ 2289.383899][T24536] usb 5-1: config 0 descriptor?? [ 2289.387544][T29922] usb usb3-port1: unable to enumerate USB device [ 2289.562538][ T9842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2289.589589][ T9842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2289.621352][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2289.652510][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2289.891820][T26022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.169136][T24536] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2290.189907][T24536] asix 5-1:0.0: probe with driver asix failed with error -71 [ 2290.237387][T24536] usb 5-1: USB disconnect, device number 61 [ 2290.286130][T26022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.468836][T24536] usb 2-1: USB disconnect, device number 117 [ 2290.502581][T24536] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2290.544052][T24536] cp210x 2-1:0.0: device disconnected [ 2290.568905][T26022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.787146][T26022] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.131420][T26022] bridge_slave_1: left allmulticast mode [ 2291.145820][T26022] bridge_slave_1: left promiscuous mode [ 2291.152323][T26022] bridge0: port 2(bridge_slave_1) entered disabled state [ 2291.177949][T26022] bridge_slave_0: left allmulticast mode [ 2291.195105][T29922] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2291.202929][T26022] bridge_slave_0: left promiscuous mode [ 2291.208853][T29923] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2291.223669][T26022] bridge0: port 1(bridge_slave_0) entered disabled state [ 2291.275922][ T4507] kvm: kvm [4497]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000012) = 0x0 [ 2291.365405][T29922] usb 5-1: Using ep0 maxpacket: 16 [ 2291.372960][T29922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 2291.396356][T29923] usb 3-1: Using ep0 maxpacket: 8 [ 2291.406997][T29923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.425078][T29922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 2291.449796][T29923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.468487][T29922] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 2291.468495][T22508] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2291.493137][T22508] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2291.493370][T29923] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2291.513583][T22508] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2291.525940][T29922] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 2291.540946][T29922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2291.544133][T22508] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2291.576180][T29923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.576419][T22508] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2291.587187][T29922] usb 5-1: Product: syz [ 2291.597023][T22508] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2291.627365][T29923] usb 3-1: config 0 descriptor?? [ 2291.633857][T29922] usb 5-1: Manufacturer: syz [ 2291.666327][T29922] usb 5-1: SerialNumber: syz [ 2291.686193][T29922] usb 5-1: config 0 descriptor?? [ 2291.692613][ T4498] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2292.116749][T29923] hid-picolcd 0003:04D8:F002.008A: No report with id 0xf3 found [ 2292.124539][T29923] hid-picolcd 0003:04D8:F002.008A: No report with id 0xf4 found [ 2292.561101][T26022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2292.579105][T26022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2292.593511][T26022] bond0 (unregistering): Released all slaves [ 2292.632229][T29922] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 2292.644743][T29922] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 2292.662374][T29922] mcba_usb 5-1:0.0 can0: failed tx_urb -90 [ 2292.669783][T29922] mcba_usb 5-1:0.0 can0: Failed to send cmd (169) [ 2292.681869][T29922] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 2292.697524][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6069'. [ 2292.740948][T29922] usb 5-1: USB disconnect, device number 62 [ 2292.752589][T29922] mcba_usb 5-1:0.0 can0: device disconnected [ 2292.855945][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 2292.855970][ T29] audit: type=1326 audit(1728613680.428:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4547 comm="syz.1.6075" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x0 [ 2293.002803][ T4552] openvswitch: netlink: Actions may not be safe on all matching packets [ 2293.187987][T26022] hsr_slave_0: left promiscuous mode [ 2293.201494][T26022] hsr_slave_1: left promiscuous mode [ 2293.207084][ T5284] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 2293.261582][T26022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2293.275147][T26022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2293.291033][T26022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2293.299040][T26022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2293.369425][T26022] veth1_macvtap: left promiscuous mode [ 2293.375180][T26022] veth0_macvtap: left promiscuous mode [ 2293.380925][T26022] veth1_vlan: left promiscuous mode [ 2293.407105][T26022] veth0_vlan: left promiscuous mode [ 2293.676151][T24536] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2293.718989][T30739] Bluetooth: hci3: command tx timeout [ 2293.726670][T29922] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2293.845839][T24536] usb 5-1: Using ep0 maxpacket: 8 [ 2293.866832][T24536] usb 5-1: config index 0 descriptor too short (expected 6436, got 36) [ 2293.903899][T24536] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2293.905121][T29922] usb 1-1: Using ep0 maxpacket: 16 [ 2293.933085][T24536] usb 5-1: config 0 has no interfaces? [ 2293.947402][T29922] usb 1-1: config 0 has no interfaces? [ 2293.955045][T29922] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice=ac.00 [ 2293.973655][T24536] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 2293.973961][T29922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.013080][T24536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2294.036329][T29922] usb 1-1: config 0 descriptor?? [ 2294.055995][T24536] usb 5-1: config 0 descriptor?? [ 2294.312298][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.335638][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.358384][ T4564] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6076'. [ 2294.437842][ T4574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2294.462437][ T4574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2294.808363][T26022] team0 (unregistering): Port device team_slave_1 removed [ 2294.866556][ T5284] usb 3-1: device descriptor read/64, error -71 [ 2294.890886][T26022] team0 (unregistering): Port device team_slave_0 removed [ 2295.115096][ T5284] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 2295.126005][ T5284] usb 3-1: device reset changed ep0 maxpacket size! [ 2295.142171][T24532] usb 3-1: USB disconnect, device number 24 [ 2295.305180][T24532] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2295.475244][T24532] usb 3-1: Using ep0 maxpacket: 32 [ 2295.490076][T24532] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2295.500893][T24532] usb 3-1: New USB device found, idVendor=13d3, idProduct=3395, bcdDevice=9e.61 [ 2295.510778][T24532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2295.524648][T24532] usb 3-1: config 0 descriptor?? [ 2295.787504][ T8] usb 1-1: USB disconnect, device number 102 [ 2295.796259][T30739] Bluetooth: hci3: command tx timeout [ 2296.052891][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 2296.064343][T29916] usb 5-1: USB disconnect, device number 63 [ 2296.258403][ T8] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2296.284721][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 2296.293305][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.302013][ T4519] bridge_slave_0: entered allmulticast mode [ 2296.310080][ T4519] bridge_slave_0: entered promiscuous mode [ 2296.319738][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 2296.327383][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 2296.336183][ T4519] bridge_slave_1: entered allmulticast mode [ 2296.343523][ T4519] bridge_slave_1: entered promiscuous mode [ 2296.431604][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2296.452578][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2296.458651][ T8] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2296.485439][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2296.529850][ T4519] team0: Port device team_slave_0 added [ 2296.552897][ T4519] team0: Port device team_slave_1 added [ 2296.555912][ T8] usb 2-1: config 0 descriptor?? [ 2296.700325][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2296.723433][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2296.771026][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2296.799142][ T4601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2296.871079][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2296.903175][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2296.940910][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2297.096693][ T4612] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6084'. [ 2297.176141][ T4519] hsr_slave_0: entered promiscuous mode [ 2297.189222][ T4519] hsr_slave_1: entered promiscuous mode [ 2297.196841][ T8] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2297.215297][ T4519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2297.223130][ T4519] Cannot create hsr debugfs directory [ 2297.223303][ T8] asix 2-1:0.0: probe with driver asix failed with error -71 [ 2297.269137][ T8] usb 2-1: USB disconnect, device number 118 [ 2297.311766][T24532] usb 3-1: USB disconnect, device number 25 [ 2297.875161][T30739] Bluetooth: hci3: command tx timeout [ 2299.955261][T30739] Bluetooth: hci3: command tx timeout [ 2301.795554][T24538] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2301.967126][T24538] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 2301.987257][T24538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.019892][T24538] usb 5-1: config 0 descriptor?? [ 2302.605842][ T5284] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2302.800240][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 2302.812619][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2302.837936][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2302.859170][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 2302.881066][ T5284] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 2302.899727][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.922292][ T5284] usb 3-1: config 0 descriptor?? [ 2303.353694][ T4712] futex_wake_op: syz.1.6104 tries to shift op by -1; fix this program [ 2307.326367][T24538] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 2307.349806][T24538] asix 5-1:0.0: probe with driver asix failed with error -110 [ 2308.074565][ T5284] usbhid 3-1:0.0: can't add hid device: -32 [ 2308.085090][ T5284] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2313.018792][T22508] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2313.035863][T22508] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2313.044756][T22508] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2313.053543][T22508] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2313.061589][T22508] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2313.070287][T22508] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2313.119093][T30739] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2313.138505][T30739] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2313.151467][T30739] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2313.161867][T30739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2313.170217][T30739] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2313.180812][T30739] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2314.155938][T22508] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2314.167325][T22508] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2314.177549][T22508] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2314.186682][T22508] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2314.198156][T22508] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2314.213496][T22508] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2314.255783][T15955] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2314.268008][T30739] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2314.277635][T30739] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2314.287568][T30739] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2314.295735][T30739] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2314.310065][T30739] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2315.155488][ T4728] Bluetooth: hci5: command tx timeout [ 2315.235264][ T4728] Bluetooth: hci6: command tx timeout [ 2316.355244][ T4728] Bluetooth: hci8: command tx timeout [ 2316.435228][ T4728] Bluetooth: hci7: command tx timeout [ 2317.243869][ T4728] Bluetooth: hci5: command tx timeout [ 2317.315181][ T4728] Bluetooth: hci6: command tx timeout [ 2318.435281][ T4728] Bluetooth: hci8: command tx timeout [ 2318.515189][ T4728] Bluetooth: hci7: command tx timeout [ 2319.318612][ T4728] Bluetooth: hci5: command tx timeout [ 2319.396234][ T4728] Bluetooth: hci6: command tx timeout [ 2320.515122][ T4728] Bluetooth: hci8: command tx timeout [ 2320.595272][ T4728] Bluetooth: hci7: command tx timeout [ 2321.395298][ T4728] Bluetooth: hci5: command tx timeout [ 2321.480022][ T4728] Bluetooth: hci6: command tx timeout [ 2322.595732][ T4728] Bluetooth: hci8: command tx timeout [ 2322.675279][ T4728] Bluetooth: hci7: command tx timeout [ 2345.001611][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.008213][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2353.566069][ T4729] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2353.578396][ T4729] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2353.588238][ T4729] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2353.596396][ T4729] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2353.605330][ T4729] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2353.612730][ T4729] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2355.715202][ T4729] Bluetooth: hci9: command tx timeout [ 2357.795378][ T4729] Bluetooth: hci9: command tx timeout [ 2359.875143][ T4729] Bluetooth: hci9: command tx timeout [ 2361.955208][ T4729] Bluetooth: hci9: command tx timeout [ 2374.235686][ T4728] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2374.247914][ T4728] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2374.257438][ T4728] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2374.265703][ T4728] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2374.285241][ T4728] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2374.295417][ T4728] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2374.401826][ T4729] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2374.412507][ T4729] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2374.423344][ T4729] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2374.432144][ T4729] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2374.444120][ T4729] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2374.453744][ T4729] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2375.307930][ T4728] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2375.322888][ T4728] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2375.334280][ T4728] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2375.342814][ T4728] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2375.351026][ T4728] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2375.359499][ T4728] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2375.423473][ T4729] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2375.437340][ T4729] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2375.450728][ T4729] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2375.458938][ T4729] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2375.475623][ T4729] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2375.483125][ T4729] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2376.355305][ T4729] Bluetooth: hci10: command tx timeout [ 2376.519817][ T4729] Bluetooth: hci11: command tx timeout [ 2377.475300][ T4729] Bluetooth: hci12: command tx timeout [ 2377.555141][ T4729] Bluetooth: hci13: command tx timeout [ 2378.435265][ T4729] Bluetooth: hci10: command tx timeout [ 2378.595212][ T4729] Bluetooth: hci11: command tx timeout [ 2379.555198][ T4729] Bluetooth: hci12: command tx timeout [ 2379.635089][ T4729] Bluetooth: hci13: command tx timeout [ 2380.515261][ T4729] Bluetooth: hci10: command tx timeout [ 2380.678935][ T4729] Bluetooth: hci11: command tx timeout [ 2381.635253][ T4729] Bluetooth: hci12: command tx timeout [ 2381.715237][ T4729] Bluetooth: hci13: command tx timeout [ 2382.595075][ T4729] Bluetooth: hci10: command tx timeout [ 2382.755243][ T4729] Bluetooth: hci11: command tx timeout [ 2382.922226][ T4729] Bluetooth: hci0: command 0x0406 tx timeout [ 2383.715191][ T4729] Bluetooth: hci12: command tx timeout [ 2383.795153][ T4729] Bluetooth: hci13: command tx timeout [ 2403.403814][ T4729] Bluetooth: hci2: command 0x0406 tx timeout [ 2406.443622][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.459784][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2413.854104][T22508] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2413.870297][T22508] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2413.880074][T22508] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2413.888799][T22508] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2413.897617][T22508] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2413.905934][T22508] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2418.835277][T15955] Bluetooth: hci3: command 0x0406 tx timeout [ 2435.938596][ T4773] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 2435.962364][ T4773] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 2435.976863][ T4773] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 2435.988368][ T4773] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 2435.996974][ T4773] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 2436.006519][ T4773] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 2436.018115][ T4773] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 2436.026355][ T4773] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 2436.034260][ T4773] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 2436.042801][ T4773] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 2436.050780][ T4774] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 2436.065140][ T4773] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 2436.957990][ T4774] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 2436.976354][ T4774] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 2436.986615][ T4774] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 2436.995955][ T4774] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 2437.006944][ T4774] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 2437.014426][ T4774] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 2437.054583][ T4776] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 2437.067200][ T4776] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 2437.076896][ T4776] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 2437.085950][ T4776] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 2437.093761][ T4776] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 2437.101804][ T4776] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 2439.243558][ T4790] Bluetooth: hci5: command 0x0406 tx timeout [ 2439.281503][ T4790] Bluetooth: hci6: command 0x0406 tx timeout [ 2439.297842][ T4790] Bluetooth: hci8: command 0x0406 tx timeout [ 2439.303935][ T4790] Bluetooth: hci7: command 0x0406 tx timeout [ 2462.115346][ T30] INFO: task syz.0.6098:4693 blocked for more than 143 seconds. [ 2462.123938][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2462.164023][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2462.215436][ T30] task:syz.0.6098 state:D stack:28576 pid:4693 tgid:4688 ppid:4241 flags:0x20000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2462.272225][ T30] Call Trace: [ 2462.285154][ T30] [ 2462.288171][ T30] __schedule+0x1895/0x4b30 [ 2462.292769][ T30] ? __pfx___schedule+0x10/0x10 [ 2462.346816][ T30] ? __pfx_lock_release+0x10/0x10 [ 2462.351958][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2462.445010][ T30] ? schedule+0x90/0x320 [ 2462.449378][ T30] schedule+0x14b/0x320 [ 2462.453600][ T30] schedule_preempt_disabled+0x13/0x30 [ 2462.548656][ T30] __mutex_lock+0x6a7/0xd70 [ 2462.553272][ T30] ? __mutex_lock+0x52a/0xd70 [ 2462.615121][ T30] ? raw_setsockopt+0xa89/0x1a80 [ 2462.620161][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2462.665377][ T30] ? __might_fault+0xc6/0x120 [ 2462.670160][ T30] raw_setsockopt+0xa89/0x1a80 [ 2462.725199][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 2462.731308][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2462.795087][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 2462.800133][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 2462.855072][ T30] do_sock_setsockopt+0x3af/0x720 [ 2462.860207][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2462.905127][ T30] ? __fget_files+0x3f3/0x470 [ 2462.909959][ T30] ? __fget_files+0x29/0x470 [ 2462.914619][ T30] __sys_setsockopt+0x1a2/0x250 [ 2462.975212][ T30] __ia32_sys_setsockopt+0xb5/0xd0 [ 2462.980437][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2463.032432][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 2463.071392][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2463.085772][ T30] do_fast_syscall_32+0x34/0x80 [ 2463.090726][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2463.148655][ T30] RIP: 0023:0xf7f77579 [ 2463.152830][ T30] RSP: 002b:00000000f56b456c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 2463.205035][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000000065 [ 2463.213119][ T30] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000004 [ 2463.274708][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2463.313173][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2463.345450][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2463.353544][ T30] [ 2463.393213][ T30] INFO: task syz.0.6098:4694 blocked for more than 144 seconds. [ 2463.445019][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2463.482786][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2463.543745][ T30] task:syz.0.6098 state:D stack:28576 pid:4694 tgid:4688 ppid:4241 flags:0x20000004 [ 2463.593509][ T30] Call Trace: [ 2463.596962][ T30] [ 2463.599937][ T30] __schedule+0x1895/0x4b30 [ 2463.604524][ T30] ? __pfx___schedule+0x10/0x10 [ 2463.650658][ T30] ? __pfx_lock_release+0x10/0x10 [ 2463.665093][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2463.670667][ T30] ? schedule+0x90/0x320 [ 2463.688621][ T30] schedule+0x14b/0x320 [ 2463.692985][ T30] schedule_preempt_disabled+0x13/0x30 [ 2463.723539][ T30] __mutex_lock+0x6a7/0xd70 [ 2463.735340][ T30] ? __mutex_lock+0x52a/0xd70 [ 2463.740202][ T30] ? raw_bind+0x99/0x770 [ 2463.744517][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2463.788890][ T30] ? aa_sk_perm+0x96d/0xab0 [ 2463.793516][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 2463.814770][ T30] ? __might_fault+0xaa/0x120 [ 2463.833565][ T30] raw_bind+0x99/0x770 [ 2463.839968][ T30] __sys_bind+0x22d/0x2d0 [ 2463.844386][ T30] ? __pfx___sys_bind+0x10/0x10 [ 2463.872222][ T30] __ia32_sys_bind+0x7a/0x90 [ 2463.892072][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2463.905099][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 2463.910135][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2463.942106][ T30] do_fast_syscall_32+0x34/0x80 [ 2463.952463][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2463.971942][ T30] RIP: 0023:0xf7f77579 [ 2463.990958][ T30] RSP: 002b:00000000f549156c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2464.015082][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001180 [ 2464.023157][ T30] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.050917][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2464.069352][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2464.081558][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.095109][ T30] [ 2464.100749][ T30] INFO: task syz.0.6098:4695 blocked for more than 145 seconds. [ 2464.270827][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2464.289615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2464.304986][ T30] task:syz.0.6098 state:D stack:28576 pid:4695 tgid:4688 ppid:4241 flags:0x20000004 [ 2464.322724][ T30] Call Trace: [ 2464.326187][ T30] [ 2464.329167][ T30] __schedule+0x1895/0x4b30 [ 2464.333754][ T30] ? __pfx___schedule+0x10/0x10 [ 2464.347531][ T30] ? __pfx_lock_release+0x10/0x10 [ 2464.352660][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2464.365793][ T30] ? schedule+0x90/0x320 [ 2464.380226][ T30] schedule+0x14b/0x320 [ 2464.384481][ T30] schedule_preempt_disabled+0x13/0x30 [ 2464.392855][ T30] __mutex_lock+0x6a7/0xd70 [ 2464.403711][ T30] ? __mutex_lock+0x52a/0xd70 [ 2464.412103][ T30] ? raw_bind+0x99/0x770 [ 2464.422672][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2464.432784][ T30] ? aa_sk_perm+0x96d/0xab0 [ 2464.444992][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 2464.450015][ T30] ? __might_fault+0xaa/0x120 [ 2464.454742][ T30] raw_bind+0x99/0x770 [ 2464.467719][ T30] __sys_bind+0x22d/0x2d0 [ 2464.473623][ T30] ? __pfx___sys_bind+0x10/0x10 [ 2464.483851][ T30] __ia32_sys_bind+0x7a/0x90 [ 2464.493659][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2464.502847][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 2464.513051][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2464.538182][ T30] do_fast_syscall_32+0x34/0x80 [ 2464.543146][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2464.554773][ T30] RIP: 0023:0xf7f77579 [ 2464.562918][ T30] RSP: 002b:00000000f526e56c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 2464.575040][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000000 [ 2464.583191][ T30] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.602139][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2464.614474][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2464.627805][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.641066][ T30] [ 2464.644268][ T30] INFO: task syz.4.6099:4691 blocked for more than 145 seconds. [ 2464.655060][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2464.662755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2464.680452][ T30] task:syz.4.6099 state:D stack:25264 pid:4691 tgid:4690 ppid:3896 flags:0x20000004 [ 2464.711266][ T30] Call Trace: [ 2464.714633][ T30] [ 2464.719654][ T30] __schedule+0x1895/0x4b30 [ 2464.724277][ T30] ? __pfx___schedule+0x10/0x10 [ 2464.735352][ T30] ? __pfx_lock_release+0x10/0x10 [ 2464.740470][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2464.753874][ T30] ? schedule+0x90/0x320 [ 2464.758644][ T30] schedule+0x14b/0x320 [ 2464.762983][ T30] schedule_preempt_disabled+0x13/0x30 [ 2464.774939][ T30] __mutex_lock+0x6a7/0xd70 [ 2464.781213][ T30] ? __mutex_lock+0x52a/0xd70 [ 2464.795586][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 2464.800720][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2464.814971][ T30] ? __might_fault+0xc6/0x120 [ 2464.819840][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 2464.824778][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2464.841478][ T30] ? __fget_files+0x3f3/0x470 [ 2464.851388][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 2464.862544][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2464.873610][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2464.884933][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2464.891371][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2464.905688][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2464.910992][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2464.926949][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2464.933209][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2464.947191][ T30] do_fast_syscall_32+0x34/0x80 [ 2464.952135][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2464.966995][ T30] RIP: 0023:0xf7f40579 [ 2464.971231][ T30] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2464.984652][ T30] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000400454ca [ 2464.998504][ T30] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2465.012337][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2465.024479][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2465.043994][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2465.053734][ T30] [ 2465.064303][ T30] INFO: task syz.4.6099:4705 blocked for more than 146 seconds. [ 2465.073801][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2465.095059][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2465.103815][ T30] task:syz.4.6099 state:D stack:27168 pid:4705 tgid:4690 ppid:3896 flags:0x20000004 [ 2465.123898][ T30] Call Trace: [ 2465.129073][ T30] [ 2465.132062][ T30] __schedule+0x1895/0x4b30 [ 2465.148350][ T30] ? __pfx___schedule+0x10/0x10 [ 2465.153301][ T30] ? __pfx_lock_release+0x10/0x10 [ 2465.167590][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2465.173151][ T30] ? schedule+0x90/0x320 [ 2465.184001][ T30] schedule+0x14b/0x320 [ 2465.189759][ T30] schedule_preempt_disabled+0x13/0x30 [ 2465.206519][ T30] __mutex_lock+0x6a7/0xd70 [ 2465.211120][ T30] ? __mutex_lock+0x52a/0xd70 [ 2465.224598][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 2465.230214][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2465.243928][ T30] ? apparmor_capable+0x13b/0x1b0 [ 2465.249463][ T30] ? bpf_lsm_capable+0x9/0x10 [ 2465.254222][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 2465.268324][ T30] ? get_user_ifreq+0x160/0x200 [ 2465.273265][ T30] inet_ioctl+0x3d7/0x4f0 [ 2465.282945][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 2465.295140][ T30] ? kfree+0x1a0/0x440 [ 2465.299302][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 2465.313031][ T30] ? packet_ioctl+0x26b/0x350 [ 2465.320128][ T30] sock_do_ioctl+0x158/0x460 [ 2465.324808][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2465.335029][ T30] compat_sock_ioctl+0xc84/0xf20 [ 2465.344198][ T30] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 2465.354182][ T30] ? __fget_files+0x29/0x470 [ 2465.364271][ T30] ? __fget_files+0x3f3/0x470 [ 2465.380185][ T30] __se_compat_sys_ioctl+0x510/0xc90 [ 2465.388335][ T30] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 2465.405320][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2465.411400][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2465.425925][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2465.432847][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2465.445566][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2465.450790][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 2465.466248][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2465.471548][ T30] do_fast_syscall_32+0x34/0x80 [ 2465.484981][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2465.491428][ T30] RIP: 0023:0xf7f40579 [ 2465.504973][ T30] RSP: 002b:00000000f56a556c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2465.513483][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000008914 [ 2465.529511][ T30] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2465.543822][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2465.557165][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2465.575018][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2465.583093][ T30] [ 2465.594703][ T30] INFO: task syz.2.6103:4704 blocked for more than 146 seconds. [ 2465.604668][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2465.621584][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2465.633977][ T30] task:syz.2.6103 state:D stack:25840 pid:4704 tgid:4703 ppid:3370 flags:0x20000004 [ 2465.654309][ T30] Call Trace: [ 2465.659331][ T30] [ 2465.662328][ T30] __schedule+0x1895/0x4b30 [ 2465.674369][ T30] ? __pfx___schedule+0x10/0x10 [ 2465.681016][ T30] ? __pfx_lock_release+0x10/0x10 [ 2465.690949][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2465.702173][ T30] ? schedule+0x90/0x320 [ 2465.710385][ T30] schedule+0x14b/0x320 [ 2465.714627][ T30] schedule_preempt_disabled+0x13/0x30 [ 2465.733056][ T30] __mutex_lock+0x6a7/0xd70 [ 2465.738193][ T30] ? __mutex_lock+0x52a/0xd70 [ 2465.743284][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2465.755425][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2465.760637][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2465.773994][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 2465.779644][ T30] ? __lock_acquire+0x1384/0x2050 [ 2465.784741][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2465.795327][ T30] netlink_rcv_skb+0x1e3/0x430 [ 2465.800195][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2465.818127][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2465.823536][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 2465.834941][ T30] netlink_unicast+0x7f6/0x990 [ 2465.839833][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 2465.854002][ T30] ? __virt_addr_valid+0x183/0x530 [ 2465.859712][ T30] ? __check_object_size+0x48e/0x900 [ 2465.873769][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 2465.878852][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2465.884201][ T30] ? __pfx_lock_release+0x10/0x10 [ 2465.900052][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 2465.909130][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2465.914554][ T30] __sock_sendmsg+0x221/0x270 [ 2465.924939][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 2465.929799][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2465.943581][ T30] __sys_sendmsg+0x292/0x380 [ 2465.949319][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 2465.954548][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2465.965398][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 2465.970686][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2465.986716][ T30] ? exc_page_fault+0x590/0x8c0 [ 2465.991770][ T30] do_fast_syscall_32+0x34/0x80 [ 2466.004984][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2466.013612][ T30] RIP: 0023:0xf73bd579 [ 2466.024930][ T30] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2466.033425][ T30] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000200002c0 [ 2466.050487][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2466.061643][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2466.075098][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2466.083145][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2466.099547][ T30] [ 2466.102793][ T30] INFO: task syz-executor:4721 blocked for more than 147 seconds. [ 2466.121164][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2466.131677][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2466.147117][ T30] task:syz-executor state:D stack:26816 pid:4721 tgid:4721 ppid:1 flags:0x20004004 [ 2466.165838][ T30] Call Trace: [ 2466.169200][ T30] [ 2466.172261][ T30] __schedule+0x1895/0x4b30 [ 2466.185049][ T30] ? __pfx___schedule+0x10/0x10 [ 2466.190008][ T30] ? __pfx_lock_release+0x10/0x10 [ 2466.203395][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2466.209317][ T30] ? schedule+0x90/0x320 [ 2466.226813][ T30] schedule+0x14b/0x320 [ 2466.231165][ T30] schedule_preempt_disabled+0x13/0x30 [ 2466.245869][ T30] __mutex_lock+0x6a7/0xd70 [ 2466.250465][ T30] ? __mutex_lock+0x52a/0xd70 [ 2466.263393][ T30] ? register_nexthop_notifier+0x84/0x290 [ 2466.270924][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2466.284023][ T30] ? __asan_memset+0x23/0x50 [ 2466.290556][ T30] register_nexthop_notifier+0x84/0x290 [ 2466.303917][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2466.313278][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 2466.328597][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 2466.340036][ T30] ? __asan_memset+0x23/0x50 [ 2466.344762][ T30] ops_init+0x31e/0x590 [ 2466.353018][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 2466.364740][ T30] setup_net+0x287/0x9e0 [ 2466.373087][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 2466.383999][ T30] ? __pfx_setup_net+0x10/0x10 [ 2466.392874][ T30] copy_net_ns+0x33f/0x570 [ 2466.404436][ T30] create_new_namespaces+0x425/0x7b0 [ 2466.414464][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 2466.426863][ T30] ksys_unshare+0x57d/0xa70 [ 2466.431466][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 2466.444940][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2466.451480][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2466.472132][ T30] __ia32_sys_unshare+0x37/0x40 [ 2466.478863][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2466.484061][ T30] ? exc_page_fault+0x590/0x8c0 [ 2466.494938][ T30] do_fast_syscall_32+0x34/0x80 [ 2466.499889][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2466.513844][ T30] RIP: 0023:0xf740d579 [ 2466.525144][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2466.533709][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2466.550418][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d224b RDI: 0000000030000000 [ 2466.561828][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2466.577882][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2466.593411][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2466.607092][ T30] [ 2466.610338][ T30] INFO: task syz-executor:4722 blocked for more than 147 seconds. [ 2466.622020][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2466.638466][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2466.654200][ T30] task:syz-executor state:D stack:26816 pid:4722 tgid:4722 ppid:1 flags:0x20004004 [ 2466.668911][ T30] Call Trace: [ 2466.672265][ T30] [ 2466.691779][ T30] __schedule+0x1895/0x4b30 [ 2466.696870][ T30] ? __pfx___schedule+0x10/0x10 [ 2466.701795][ T30] ? __pfx_lock_release+0x10/0x10 [ 2466.715714][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2466.721268][ T30] ? schedule+0x90/0x320 [ 2466.734425][ T30] schedule+0x14b/0x320 [ 2466.741864][ T30] schedule_preempt_disabled+0x13/0x30 [ 2466.755366][ T30] __mutex_lock+0x6a7/0xd70 [ 2466.759965][ T30] ? __mutex_lock+0x52a/0xd70 [ 2466.764695][ T30] ? register_nexthop_notifier+0x84/0x290 [ 2466.779621][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2466.784745][ T30] ? __asan_memset+0x23/0x50 [ 2466.793551][ T30] register_nexthop_notifier+0x84/0x290 [ 2466.804354][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2466.814289][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 2466.827297][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 2466.833653][ T30] ? __asan_memset+0x23/0x50 [ 2466.847158][ T30] ops_init+0x31e/0x590 [ 2466.851498][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 2466.864090][ T30] setup_net+0x287/0x9e0 [ 2466.871256][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 2466.883073][ T30] ? __pfx_setup_net+0x10/0x10 [ 2466.890894][ T30] copy_net_ns+0x33f/0x570 [ 2466.903787][ T30] create_new_namespaces+0x425/0x7b0 [ 2466.912037][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 2466.924069][ T30] ksys_unshare+0x57d/0xa70 [ 2466.932731][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 2466.944115][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2466.953360][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2466.965553][ T30] __ia32_sys_unshare+0x37/0x40 [ 2466.974665][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2466.986347][ T30] ? exc_page_fault+0x590/0x8c0 [ 2466.991306][ T30] do_fast_syscall_32+0x34/0x80 [ 2467.003785][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2467.011802][ T30] RIP: 0023:0xf742d579 [ 2467.023368][ T30] RSP: 002b:00000000f757ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2467.034797][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2467.050393][ T30] RDX: 00000000f741bff4 RSI: 00000000f72f224b RDI: 0000000030000000 [ 2467.063076][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2467.077932][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2467.091810][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2467.103795][ T30] [ 2467.112318][ T30] INFO: task syz-executor:4730 blocked for more than 148 seconds. [ 2467.124822][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2467.132909][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2467.153418][ T30] task:syz-executor state:D stack:26816 pid:4730 tgid:4730 ppid:1 flags:0x20004006 [ 2467.167615][ T30] Call Trace: [ 2467.170961][ T30] [ 2467.174245][ T30] __schedule+0x1895/0x4b30 [ 2467.184983][ T30] ? __pfx___schedule+0x10/0x10 [ 2467.189921][ T30] ? __pfx_lock_release+0x10/0x10 [ 2467.203523][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2467.211386][ T30] ? schedule+0x90/0x320 [ 2467.224338][ T30] schedule+0x14b/0x320 [ 2467.228701][ T30] schedule_preempt_disabled+0x13/0x30 [ 2467.234228][ T30] __mutex_lock+0x6a7/0xd70 [ 2467.252301][ T30] ? __mutex_lock+0x52a/0xd70 [ 2467.258810][ T30] ? register_nexthop_notifier+0x84/0x290 [ 2467.264619][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2467.275420][ T30] ? __asan_memset+0x23/0x50 [ 2467.282417][ T30] register_nexthop_notifier+0x84/0x290 [ 2467.294472][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2467.303371][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 2467.315099][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 2467.321370][ T30] ? __asan_memset+0x23/0x50 [ 2467.336201][ T30] ops_init+0x31e/0x590 [ 2467.341729][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 2467.356195][ T30] setup_net+0x287/0x9e0 [ 2467.360543][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 2467.373767][ T30] ? __pfx_setup_net+0x10/0x10 [ 2467.380225][ T30] copy_net_ns+0x33f/0x570 [ 2467.384734][ T30] create_new_namespaces+0x425/0x7b0 [ 2467.402097][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 2467.413437][ T30] ksys_unshare+0x57d/0xa70 [ 2467.423721][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 2467.433134][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2467.445057][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2467.451769][ T30] __ia32_sys_unshare+0x37/0x40 [ 2467.464474][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2467.470117][ T30] ? exc_page_fault+0x590/0x8c0 [ 2467.479580][ T30] do_fast_syscall_32+0x34/0x80 [ 2467.484518][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2467.502481][ T30] RIP: 0023:0xf7faf579 [ 2467.510052][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2467.524843][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2467.533094][ T30] RDX: 00000000f743bff4 RSI: 00000000f731224b RDI: 0000000030000000 [ 2467.552091][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2467.574963][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2467.583118][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2467.601030][ T30] [ 2467.604218][ T30] INFO: task syz-executor:4732 blocked for more than 148 seconds. [ 2467.615385][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2467.623082][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2467.640231][ T30] task:syz-executor state:D stack:26640 pid:4732 tgid:4732 ppid:1 flags:0x20004004 [ 2467.657890][ T30] Call Trace: [ 2467.661242][ T30] [ 2467.664214][ T30] __schedule+0x1895/0x4b30 [ 2467.682965][ T30] ? __pfx___schedule+0x10/0x10 [ 2467.690634][ T30] ? __pfx_lock_release+0x10/0x10 [ 2467.702245][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 2467.710688][ T30] ? schedule+0x90/0x320 [ 2467.721656][ T30] schedule+0x14b/0x320 [ 2467.728786][ T30] schedule_preempt_disabled+0x13/0x30 [ 2467.734337][ T30] __mutex_lock+0x6a7/0xd70 [ 2467.745015][ T30] ? __mutex_lock+0x52a/0xd70 [ 2467.753862][ T30] ? register_nexthop_notifier+0x84/0x290 [ 2467.767576][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2467.772792][ T30] ? __asan_memset+0x23/0x50 [ 2467.785775][ T30] register_nexthop_notifier+0x84/0x290 [ 2467.791433][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 2467.805375][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 2467.811710][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 2467.826803][ T30] ? __asan_memset+0x23/0x50 [ 2467.831497][ T30] ops_init+0x31e/0x590 [ 2467.843848][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 2467.851323][ T30] setup_net+0x287/0x9e0 [ 2467.864375][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 2467.870914][ T30] ? __pfx_setup_net+0x10/0x10 [ 2467.884984][ T30] copy_net_ns+0x33f/0x570 [ 2467.889980][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.896537][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.904850][ T30] create_new_namespaces+0x425/0x7b0 [ 2467.910326][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 2467.924127][ T30] ksys_unshare+0x57d/0xa70 [ 2467.930822][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 2467.944684][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2467.951613][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 2467.965008][ T30] __ia32_sys_unshare+0x37/0x40 [ 2467.969947][ T30] __do_fast_syscall_32+0xb4/0x110 [ 2467.984428][ T30] ? exc_page_fault+0x590/0x8c0 [ 2467.989774][ T30] do_fast_syscall_32+0x34/0x80 [ 2468.003885][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2468.012456][ T30] RIP: 0023:0xf7eff579 [ 2468.025210][ T30] RSP: 002b:00000000f74eff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 2468.033711][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 2468.050566][ T30] RDX: 00000000f738bff4 RSI: 00000000f726224b RDI: 0000000030000000 [ 2468.062824][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2468.077247][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2468.092206][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2468.110827][ T30] [ 2468.113930][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2468.132104][ T30] [ 2468.132104][ T30] Showing all locks held in the system: [ 2468.140486][ T30] 3 locks held by kworker/0:0/8: [ 2468.154287][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2468.178961][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2468.199208][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 2468.220518][ T30] 1 lock held by khungtaskd/30: [ 2468.228323][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 2468.244588][ T30] 3 locks held by kworker/u8:10/3030: [ 2468.252857][ T30] #0: ffff88802dcb8148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2468.274411][ T30] #1: ffffc900097a7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2468.297025][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 2468.313421][ T30] 2 locks held by dhcpcd/4901: [ 2468.321163][ T30] #0: ffff888079eec6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 2468.341053][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 2468.354750][ T30] 2 locks held by getty/4989: [ 2468.363351][ T30] #0: ffff8880321d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2468.379882][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 2468.394203][ T30] 5 locks held by kworker/u9:5/15955: [ 2468.405083][ T30] #0: ffff88805ab12148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2468.423989][ T30] #1: ffffc90009217d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2468.451694][ T30] #2: ffff88805e9f4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2468.471701][ T30] #3: ffff88805e9f4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2468.483161][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2468.501774][ T30] 5 locks held by kworker/u9:1/22508: [ 2468.507786][ T30] #0: ffff88806695c948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2468.532646][ T30] #1: ffffc90003b87d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2468.554967][ T30] #2: ffff8880607a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2468.574731][ T30] #3: ffff8880607a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2468.594048][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2468.609085][ T30] 2 locks held by kworker/0:11/24530: [ 2468.625445][ T30] 4 locks held by kworker/0:5/29916: [ 2468.630801][ T30] 5 locks held by kworker/u9:2/30739: [ 2468.645241][ T30] #0: ffff88807a0b6948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2468.664988][ T30] #1: ffffc900031afd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2468.690965][ T30] #2: ffff88805cf9cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2468.705540][ T30] #3: ffff88805cf9c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2468.722924][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2468.734569][ T30] 7 locks held by syz-executor/4519: [ 2468.745016][ T30] #0: ffff88807cc02420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 2468.754131][ T30] #1: ffff8880310e5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 2468.773832][ T30] #2: ffff8880276b62d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 2468.787774][ T30] #3: ffffffff8f56fea8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 2468.806948][ T30] #4: ffff88804bc8c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 2468.824643][ T30] #5: ffff88804bc89250 (&devlink->lock_key#221){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 2468.844755][ T30] #6: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 2468.854205][ T30] 2 locks held by syz.0.6098/4692: [ 2468.864981][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2468.886523][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 2468.906711][ T30] 1 lock held by syz.0.6098/4693: [ 2468.911893][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_setsockopt+0xa89/0x1a80 [ 2468.930809][ T30] 1 lock held by syz.0.6098/4694: [ 2468.938757][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_bind+0x99/0x770 [ 2468.953704][ T30] 1 lock held by syz.0.6098/4695: [ 2468.963389][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: raw_bind+0x99/0x770 [ 2468.977740][ T30] 1 lock held by syz.4.6099/4691: [ 2468.982846][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 2468.999659][ T30] 1 lock held by syz.4.6099/4705: [ 2469.004750][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 2469.023719][ T30] 1 lock held by syz.2.6103/4704: [ 2469.032853][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 2469.049474][ T30] 1 lock held by syz.1.6104/4708: [ 2469.054620][ T30] 2 locks held by syz-executor/4721: [ 2469.064991][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.074520][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.095254][ T30] 2 locks held by syz-executor/4722: [ 2469.100613][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.121163][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.135304][ T30] 5 locks held by kworker/u9:0/4728: [ 2469.140666][ T30] #0: ffff888027dbd948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2469.159864][ T30] #1: ffffc9001181fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2469.176970][ T30] #2: ffff8880506bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2469.194533][ T30] #3: ffff8880506bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2469.209227][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2469.225008][ T30] 4 locks held by kworker/u9:3/4729: [ 2469.230366][ T30] #0: ffff8880397d4948 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2469.250666][ T30] #1: ffffc9001182fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2469.265896][ T30] #2: ffff888059bc8078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 2469.283387][ T30] #3: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 2469.299100][ T30] 2 locks held by syz-executor/4730: [ 2469.304620][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.322041][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.334416][ T30] 2 locks held by syz-executor/4732: [ 2469.347610][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.362827][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.378784][ T30] 2 locks held by syz-executor/4739: [ 2469.384175][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.401744][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.414774][ T30] 1 lock held by dhcpcd/4743: [ 2469.430582][ T30] #0: ffff88804fefa258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 2469.445067][ T30] 1 lock held by dhcpcd/4744: [ 2469.449818][ T30] #0: ffff8880784c6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 2469.469971][ T30] 1 lock held by dhcpcd/4745: [ 2469.474722][ T30] #0: ffff88805564c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 2469.492419][ T30] 1 lock held by dhcpcd/4746: [ 2469.501137][ T30] #0: ffff88807c908258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 2469.516227][ T30] 2 locks held by syz-executor/4752: [ 2469.521580][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.540557][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.555485][ T30] 2 locks held by syz-executor/4754: [ 2469.560843][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.585021][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.605024][ T30] 2 locks held by syz-executor/4760: [ 2469.610393][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.631028][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.654707][ T30] 2 locks held by syz-executor/4761: [ 2469.660507][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.674946][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.693003][ T30] 2 locks held by syz-executor/4766: [ 2469.700090][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2469.724421][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2469.738739][ T30] 4 locks held by kworker/u9:4/4767: [ 2469.744185][ T30] #0: ffff88808414a948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2469.764844][ T30] #1: ffffc9001295fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2469.785219][ T30] #2: ffff888043034078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 2469.808157][ T30] #3: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 2469.824992][ T30] 4 locks held by kworker/u9:6/4773: [ 2469.830353][ T30] #0: ffff88808414c948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2469.850094][ T30] #1: ffffc9001297fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2469.866324][ T30] #2: ffff888081070078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 2469.886575][ T30] #3: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 2469.907403][ T30] 4 locks held by kworker/u9:7/4774: [ 2469.912847][ T30] #0: ffff888083bbe148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2469.930476][ T30] #1: ffffc9001298fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2469.948532][ T30] #2: ffff888069e88078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 2469.968141][ T30] #3: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 2469.985002][ T30] 4 locks held by kworker/u9:8/4776: [ 2469.990450][ T30] #0: ffff888087a9a948 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2470.011130][ T30] #1: ffffc900129afd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2470.026140][ T30] #2: ffff88807bb2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 2470.047433][ T30] #3: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 2470.064999][ T30] 2 locks held by syz-executor/4778: [ 2470.070359][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2470.088059][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2470.104166][ T30] 2 locks held by syz-executor/4779: [ 2470.114304][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2470.132712][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2470.148756][ T30] 5 locks held by kworker/u9:9/4783: [ 2470.154105][ T30] #0: ffff88805b58c948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2470.174663][ T30] #1: ffffc900030efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2470.196940][ T30] #2: ffff88805e9f0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2470.215001][ T30] #3: ffff88805e9f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2470.224812][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2470.243031][ T30] 5 locks held by kworker/u9:10/4785: [ 2470.254124][ T30] #0: ffff88807ee50948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2470.273834][ T30] #1: ffffc9001320fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2470.297518][ T30] #2: ffff888027e28d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2470.315296][ T30] #3: ffff888027e28078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2470.333702][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2470.344138][ T30] 5 locks held by kworker/u9:11/4786: [ 2470.354920][ T30] #0: ffff8880687f3148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 2470.376791][ T30] #1: ffffc9001321fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 2470.394925][ T30] #2: ffff888042b18d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 2470.415552][ T30] #3: ffff888042b18078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 2470.433208][ T30] #4: ffffffff8fe3e668 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 2470.449057][ T30] 2 locks held by syz-executor/4787: [ 2470.454421][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2470.471228][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2470.485526][ T30] 2 locks held by syz-executor/4788: [ 2470.490936][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 2470.509311][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 2470.530749][ T30] [ 2470.533158][ T30] ============================================= [ 2470.533158][ T30] [ 2470.552715][ T30] NMI backtrace for cpu 1 [ 2470.557115][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2470.567671][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2470.578217][ T30] Call Trace: [ 2470.581563][ T30] [ 2470.584525][ T30] dump_stack_lvl+0x241/0x360 [ 2470.589254][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2470.594496][ T30] ? __pfx__printk+0x10/0x10 [ 2470.599163][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2470.604163][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2470.609675][ T30] ? _printk+0xd5/0x120 [ 2470.613887][ T30] ? __pfx__printk+0x10/0x10 [ 2470.618538][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2470.623449][ T30] ? __pfx__printk+0x10/0x10 [ 2470.628202][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2470.633295][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2470.639333][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2470.645368][ T30] watchdog+0xff4/0x1040 [ 2470.649664][ T30] ? watchdog+0x1ea/0x1040 [ 2470.654134][ T30] ? __pfx_watchdog+0x10/0x10 [ 2470.658953][ T30] kthread+0x2f0/0x390 [ 2470.663061][ T30] ? __pfx_watchdog+0x10/0x10 [ 2470.667784][ T30] ? __pfx_kthread+0x10/0x10 [ 2470.672413][ T30] ret_from_fork+0x4b/0x80 [ 2470.676879][ T30] ? __pfx_kthread+0x10/0x10 [ 2470.681684][ T30] ret_from_fork_asm+0x1a/0x30 [ 2470.686511][ T30] [ 2470.690732][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2470.696509][ C0] NMI backtrace for cpu 0 [ 2470.696524][ C0] CPU: 0 UID: 0 PID: 29916 Comm: kworker/0:5 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2470.696548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2470.696561][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 2470.696590][ C0] RIP: 0010:unwind_next_frame+0x17b5/0x22d0 [ 2470.696612][ C0] Code: 01 c6 49 8d 55 40 4c 89 ef e8 37 0e 00 00 84 c0 0f 84 66 01 00 00 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 20 42 0f b6 04 20 <84> c0 0f 85 36 08 00 00 48 8b 6c 24 08 8b 84 24 84 00 00 00 39 45 [ 2470.696629][ C0] RSP: 0018:ffffc90000006530 EFLAGS: 00000202 [ 2470.696645][ C0] RAX: 0000000000000000 RBX: ffffffff91289076 RCX: 0000000000000000 [ 2470.696658][ C0] RDX: dffffc0000000000 RSI: ffffc90000000000 RDI: ffffc90000007040 [ 2470.696680][ C0] RBP: dffffc0000000000 R08: ffffc90000007040 R09: 0000000000000000 [ 2470.696694][ C0] R10: ffffc90000006650 R11: fffff52000000ccc R12: dffffc0000000000 [ 2470.696709][ C0] R13: ffffc90000006600 R14: ffffffff89e7b478 R15: ffffc90000006650 [ 2470.696724][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2470.696740][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2470.696754][ C0] CR2: 0000563065cda7b8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 2470.696771][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2470.696782][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2470.696795][ C0] Call Trace: [ 2470.696802][ C0] [ 2470.696811][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2470.696834][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2470.696865][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2470.696887][ C0] ? nmi_handle+0x2a/0x5a0 [ 2470.696914][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2470.696940][ C0] ? nmi_handle+0x14f/0x5a0 [ 2470.696960][ C0] ? nmi_handle+0x2a/0x5a0 [ 2470.696980][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 2470.696998][ C0] ? default_do_nmi+0x63/0x160 [ 2470.697021][ C0] ? exc_nmi+0x123/0x1f0 [ 2470.697043][ C0] ? end_repeat_nmi+0xf/0x53 [ 2470.697061][ C0] ? synproxy_send_client_synack+0x8b8/0xf30 [ 2470.697093][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 2470.697112][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 2470.697131][ C0] ? unwind_next_frame+0x17b5/0x22d0 [ 2470.697150][ C0] [ 2470.697156][ C0] [ 2470.697168][ C0] ? synproxy_send_tcp+0x356/0x6c0 [ 2470.697196][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2470.697220][ C0] arch_stack_walk+0x11c/0x150 [ 2470.697243][ C0] ? synproxy_send_client_synack+0x8b8/0xf30 [ 2470.697272][ C0] stack_trace_save+0x118/0x1d0 [ 2470.697293][ C0] ? __asan_memset+0x23/0x50 [ 2470.697322][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2470.697347][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2470.697377][ C0] kasan_save_track+0x3f/0x80 [ 2470.697395][ C0] ? kasan_save_track+0x3f/0x80 [ 2470.697413][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 2470.697438][ C0] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 2470.697463][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 2470.697481][ C0] ? dst_init+0xee/0x490 [ 2470.697496][ C0] ? dst_alloc+0x14f/0x190 [ 2470.697513][ C0] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 2470.697541][ C0] ? ip_route_output_key_hash+0x193/0x2b0 [ 2470.697567][ C0] ? ip_route_output_flow+0x29/0x140 [ 2470.697591][ C0] ? ip_route_me_harder+0x80d/0x1300 [ 2470.697614][ C0] ? synproxy_send_tcp+0x356/0x6c0 [ 2470.697659][ C0] __kasan_kmalloc+0x98/0xb0 [ 2470.697679][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 2470.697697][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 2470.697725][ C0] ref_tracker_alloc+0x14b/0x490 [ 2470.697744][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2470.697774][ C0] dst_init+0xee/0x490 [ 2470.697790][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 2470.697816][ C0] dst_alloc+0x14f/0x190 [ 2470.697835][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 2470.697870][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 2470.697901][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 2470.697928][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2470.697958][ C0] ? __pfx_lock_release+0x10/0x10 [ 2470.697984][ C0] ? kthread+0x2f0/0x390 [ 2470.698008][ C0] ip_route_output_flow+0x29/0x140 [ 2470.698034][ C0] ip_route_me_harder+0x80d/0x1300 [ 2470.698063][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 2470.698089][ C0] ? trace_kmalloc+0x1f/0xd0 [ 2470.698111][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 2470.698149][ C0] synproxy_send_tcp+0x356/0x6c0 [ 2470.698178][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 2470.698212][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2470.698240][ C0] ? synproxy_pernet+0x45/0x270 [ 2470.698268][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 2470.698299][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2470.698326][ C0] ? NF_HOOK+0x29e/0x450 [ 2470.698347][ C0] ? nf_ip_checksum+0x13a/0x500 [ 2470.698377][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 2470.698407][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2470.698442][ C0] ? __lock_acquire+0x1384/0x2050 [ 2470.698471][ C0] ? __pfx_validate_chain+0x10/0x10 [ 2470.698497][ C0] nft_do_chain+0x4ad/0x1da0 [ 2470.698531][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 2470.698558][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 2470.698601][ C0] nft_do_chain_inet+0x418/0x6b0 [ 2470.698630][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2470.698657][ C0] ? ipt_do_table+0x312/0x1860 [ 2470.698692][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2470.698718][ C0] nf_hook_slow+0xc3/0x220 [ 2470.698743][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2470.698764][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2470.698786][ C0] NF_HOOK+0x29e/0x450 [ 2470.698809][ C0] ? NF_HOOK+0x9a/0x450 [ 2470.698828][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2470.698850][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2470.698875][ C0] ? ip_rcv_finish+0x406/0x560 [ 2470.698897][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2470.698918][ C0] NF_HOOK+0x3a4/0x450 [ 2470.698938][ C0] ? __lock_acquire+0x1384/0x2050 [ 2470.698966][ C0] ? NF_HOOK+0x9a/0x450 [ 2470.698986][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 2470.699006][ C0] ? ip_rcv_core+0x801/0xd10 [ 2470.699028][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2470.699053][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 2470.699074][ C0] __netif_receive_skb+0x2bf/0x650 [ 2470.699098][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2470.699126][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 2470.699148][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2470.699177][ C0] ? __pfx_lock_release+0x10/0x10 [ 2470.699205][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 2470.699249][ C0] process_backlog+0x662/0x15b0 [ 2470.699275][ C0] ? process_backlog+0x33b/0x15b0 [ 2470.699302][ C0] ? __pfx_process_backlog+0x10/0x10 [ 2470.699325][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2470.699353][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2470.699382][ C0] __napi_poll+0xcb/0x490 [ 2470.699406][ C0] net_rx_action+0x89b/0x1240 [ 2470.699445][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 2470.699470][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 2470.699512][ C0] handle_softirqs+0x2c5/0x980 [ 2470.699539][ C0] ? do_softirq+0x11b/0x1e0 [ 2470.699582][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 2470.699625][ C0] do_softirq+0x11b/0x1e0 [ 2470.699647][ C0] [ 2470.699672][ C0] [ 2470.699679][ C0] ? __pfx_do_softirq+0x10/0x10 [ 2470.699703][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 2470.699733][ C0] ? rcu_is_watching+0x15/0xb0 [ 2470.699756][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 2470.699780][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 2470.699804][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2470.699829][ C0] ? neigh_destroy+0x423/0x580 [ 2470.699854][ C0] neigh_periodic_work+0xb35/0xd50 [ 2470.699881][ C0] ? process_scheduled_works+0x976/0x1850 [ 2470.699908][ C0] process_scheduled_works+0xa63/0x1850 [ 2470.699946][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2470.699977][ C0] ? assign_work+0x364/0x3d0 [ 2470.700004][ C0] worker_thread+0x870/0xd30 [ 2470.700037][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2470.700065][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2470.700092][ C0] kthread+0x2f0/0x390 [ 2470.700109][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2470.700135][ C0] ? __pfx_kthread+0x10/0x10 [ 2470.700153][ C0] ret_from_fork+0x4b/0x80 [ 2470.700180][ C0] ? __pfx_kthread+0x10/0x10 [ 2470.700199][ C0] ret_from_fork_asm+0x1a/0x30 [ 2470.700231][ C0] [ 2471.573662][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2471.580671][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 2471.591389][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2471.601573][ T30] Call Trace: [ 2471.604885][ T30] [ 2471.607849][ T30] dump_stack_lvl+0x241/0x360 [ 2471.612570][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2471.617808][ T30] ? __pfx__printk+0x10/0x10 [ 2471.622452][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2471.628501][ T30] ? vscnprintf+0x5d/0x90 [ 2471.632874][ T30] panic+0x349/0x880 [ 2471.636816][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2471.643109][ T30] ? __pfx_panic+0x10/0x10 [ 2471.647567][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2471.652977][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2471.658746][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2471.664155][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2471.670355][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2471.676563][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2471.682763][ T30] watchdog+0x1033/0x1040 [ 2471.687146][ T30] ? watchdog+0x1ea/0x1040 [ 2471.691608][ T30] ? __pfx_watchdog+0x10/0x10 [ 2471.696351][ T30] kthread+0x2f0/0x390 [ 2471.700456][ T30] ? __pfx_watchdog+0x10/0x10 [ 2471.705182][ T30] ? __pfx_kthread+0x10/0x10 [ 2471.709809][ T30] ret_from_fork+0x4b/0x80 [ 2471.714268][ T30] ? __pfx_kthread+0x10/0x10 [ 2471.718897][ T30] ret_from_fork_asm+0x1a/0x30 [ 2471.723713][ T30] [ 2471.727117][ T30] Kernel Offset: disabled [ 2471.731451][ T30] Rebooting in 86400 seconds..