last executing test programs: 8.636433364s ago: executing program 4 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0x0, 0x0, 0x31364d4e, 0x0, 0x7}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x14}}, 0x0) 8.507908574s ago: executing program 4 (id=3865): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x30}}, 0x40004) io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000740)='mm_shrink_slab_start\x00', r3}, 0xffffffffffffffde) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ff2153ed2d95"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x44, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x50, &(0x7f0000000880)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x26, 0x3, 0x5, 0x8, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x50}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x200}) 5.318667353s ago: executing program 4 (id=3880): r0 = socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x29, &(0x7f0000000000), 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000780)={0x0, 0xfffffffffffffee0}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x0, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862"}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a45323, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 4.191418141s ago: executing program 0 (id=3888): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x30, 0x0, 0x0, 0x0) 4.02740708s ago: executing program 0 (id=3890): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x30}}, 0x40004) io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000740)='mm_shrink_slab_start\x00', r3}, 0xffffffffffffffde) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ff2153ed2d95"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x44, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x50, &(0x7f0000000880)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x26, 0x3, 0x5, 0x8, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x50}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x200}) 4.026424798s ago: executing program 1 (id=3891): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240)) 3.766602903s ago: executing program 1 (id=3894): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb"], 0x11) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels}) io_setup(0x2, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0xc5, 0x7, "b8e2f9", 0x10}, {@any, 0x9f, 0x14, 0x0, "b8a86a", 0x200}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f, 0x3, 0xf3, "c2df96", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x6, 0x8, "992fdc", 0xa}]}}}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x14800, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001300"/56, @ANYRES32=0x0, @ANYBLOB="000000080024f016c100000000000000"], 0x4c}}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="03c9007d020000008b50dc1a49cdcee14dd39a6886df9c16c66e8569f5a301919b7d916f2805815776dac3acb4b844427c87962667fc4ce055210dd9381a486173f45502c530b138ce890b99786a8c747c08eb9b8233ab22cef535f7a9c8482ec7bcb0b31bdf7529ddfd612b8de17abdeaa790d11a01b3f47a013e7e416e952a3b"], 0x81) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x4, &(0x7f0000000080)='*n/)))\x00', &(0x7f00000000c0), 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x6) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000cc0), 0x0, 0x10120, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="48020000", @ANYRES16, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="05008800000000000600480000000000060048005100000005008900000000000a0006000802110000010000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c010}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfd}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03c9003320facb07ebc4da480c6658094486c8a78614eac252dbc42e6ae4ea17e1ac9ada3cfdc37dbaeebff49554c94536603023bdc9927e"], 0x37) 3.684315639s ago: executing program 4 (id=3896): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x5560, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40010000100001000400"/20, @ANYRES32=r3, @ANYBLOB="0000000012400000f8001a80f40002801c0001"], 0x140}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x77359400}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffcc, 0xfa00, {0xfffffffffffffffd, 0x0, 0x39, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x2011}) 3.509030499s ago: executing program 1 (id=3899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0xb8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_MARK={0x8}]}, 0xb8}}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 3.470540497s ago: executing program 4 (id=3900): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000780)='\r\n', 0x2, 0x6d91fb6102d8d9cc, 0x0, 0x0) recvfrom(r2, &(0x7f0000001140)=""/4101, 0x1005, 0x0, 0x0, 0x0) sendto$l2tp6(r2, &(0x7f0000000380)="ded58e1f045301c8a08041cc5d811bd3e6e0110051c542618c8c20c682f3215545a1eb1b0a1d4ab94c2e2d19acf24efea2301a73562c44f0068d75e509b9fcadab02d9", 0x43, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) unshare(0x2000400) r3 = open(&(0x7f0000000080)='./file0\x00', 0x115082, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000157c0)=ANY=[@ANYBLOB="120100000b4163206d0428095226010203010902"], 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='j', 0x1}], 0x1) fcntl$notify(r3, 0x402, 0x2a) clock_gettime(0x7, &(0x7f0000000140)) preadv(r3, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) 3.347406169s ago: executing program 1 (id=3901): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$netlink(0x10, 0x3, 0x8) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f00000003c0)=0xa, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001600010000001f00000000000a0000000800008004000500"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000440)={0x10002, 0x0, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='ata_bmdma_status\x00', r3}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) unshare(0x2a060400) r8 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r8}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='rpcgss_seqno\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x14, 0x0, 0x990, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query, @snprintf]}, 0x0}, 0x90) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000008120c300000000000000109fe23000100000000090400ec74c1e8f292696522cc0000050300000009210000000122"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) 2.829899293s ago: executing program 3 (id=3903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000100)=0x38, 0x4) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_io_uring_setup(0x0, &(0x7f0000001a80), 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "f00e354dc62218c5e05b42c26a25852220457ce96d89ac30d136970e02d1a603", "571457d46b7dc3d8000c432f00", "9630f1a294cc21f261e036183dfcd107bf900079ccd597c175b5f248ed5822e7", "dd22ad3c7f4255f469dc616057af5c98db1bf5c6fb7500", "a8ec0a521e0f41e4000000064eff0f00", "8994b1113345a22b15a36461"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x2, 0x0, 0xb, 0x8, 0xc524}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="030000000000000018001280081001006704653b615d89d6f67ce300ac1414aa08000a00", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.791272296s ago: executing program 3 (id=3904): r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000240)) 2.717985581s ago: executing program 3 (id=3905): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x202, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x23b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000dc0)="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", 0x5a8, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x400000, @mcast2}, 0x1c) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0xfffffd27) 2.541857556s ago: executing program 3 (id=3906): r0 = socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x29, &(0x7f0000000000), 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000780)={0x0, 0xfffffffffffffee0}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x0, 0x2, 0x0, "4b9c39f88e56d5d98deee9080b0de7611ebfeef3cef83f51fdb40f0aeab9e862"}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munlock(&(0x7f0000003000/0x3000)=nil, 0x3000) mlock2(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0x40a45323, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.122934955s ago: executing program 3 (id=3907): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0xa4, 0xba, 0x17, 0x40, 0xc4b, 0x100, 0xcdcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd7, 0xc4, 0x89, 0x0, [], [{{0x9, 0x5, 0xe, 0x2}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x8) syz_emit_ethernet(0x46, &(0x7f0000000580)={@random="8a6dd51f7016", @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b5e2b2", 0x10, 0x21, 0x0, @mcast2, @empty, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "50cfd1", 0x0, "af6007"}}}}}}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r6 = socket(0x28, 0x1, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x2}, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0x8000001c}) socket(0x0, 0x80002, 0x0) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) 1.032814168s ago: executing program 2 (id=3911): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x5560, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40010000100001000400"/20, @ANYRES32=r3, @ANYBLOB="0000000012400000f8001a80f40002801c0001"], 0x140}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x77359400}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffcc, 0xfa00, {0xfffffffffffffffd, 0x0, 0x39, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x2011}) 872.099974ms ago: executing program 0 (id=3912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst]}, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) 845.950406ms ago: executing program 2 (id=3913): unshare(0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x400) socket$inet6(0xa, 0x806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close(r1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r3, 0x114, 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x214, r5, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x70}}}}, [@NL80211_ATTR_SSID={0x1f, 0x34, @random="e54d7fc2c23a8bcb0989b8db6fdcaeda8d45b3d3fa83a42b43eb54"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x6}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_TX_RATES={0x1a8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xe0, 0xe, 0x6, 0x1ff, 0x6e9, 0x8000, 0x6]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x2, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x6, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {}, {0x3, 0x5}, {0x0, 0x5}, {0x2, 0x3}, {0x6}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x8}, {0x4, 0xa}, {0x6, 0x3}, {0x3, 0x6}, {0x2, 0x7}, {0x3, 0x8}, {0x5, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe251, 0x7, 0xf0, 0x40, 0x4, 0x3, 0x80, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x62bd, 0x8, 0xff, 0x38a0, 0xc00, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfc00, 0x1, 0x3, 0x7, 0x200, 0x2, 0x1000, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0x2, 0x6000, 0x630, 0x0, 0x9, 0xcae]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x159c, 0x5, 0x8, 0x1, 0x5, 0xee2a, 0xfad0, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x0, 0xa}, {0x2}, {0x7, 0x6}, {0x0, 0x3}, {0x5, 0x3}, {}, {0x6, 0x1}, {0x6, 0x2}, {0x4}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x1, 0x1f}, {0x2, 0x2}, {0x6, 0x1}, {0x7}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x9}, {0x3, 0x4}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x2}, {}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x5}, {0x3, 0x9}, {0x4, 0x3}, {0x7}, {0x2, 0x2}, {0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x1}, {0x2, 0x8}, {0x2, 0x9}, {0x6}, {}, {0x7, 0x2}, {0x5, 0x1}, {0x6, 0x6}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0x1}, {0x0, 0x7}, {0x0, 0x2}, {0x2}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x4, 0x2}, {0x6}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x9}, {}, {0x4, 0x2}, {0x7, 0x3}, {0x3}, {0x5}, {0x7, 0x8}, {}, {0x0, 0x9}, {0x7}, {}, {0x0, 0x7}, {0x3, 0x3}, {0x2, 0x8}, {0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x1}, {}, {0x1, 0x3}, {0x0, 0x6}, {0x2}, {0x0, 0x4}, {0x0, 0x5}, {}, {}, {0x0, 0x2}, {0x2, 0xa}]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x0, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x24]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x5, 0x6, 0x0, 0x12b, 0xffff]}}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x3ca, 0x800, 0xc, 0x0, 0x0, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8000, 0x4ba, 0x3, 0x0, 0x1, 0x1a69, 0x7]}}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x214}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000080) 722.121917ms ago: executing program 0 (id=3914): unshare(0x64020400) unshare(0x22020400) r0 = socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 593.256037ms ago: executing program 2 (id=3915): openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000240)) 544.453601ms ago: executing program 2 (id=3916): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x202, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "c04d831721b66c43", "7e50992d53face4acb591d981848b3d9", "a7844c4e", "6c25c0284645e18b"}, 0x28) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x23b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000dc0)="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", 0x5a8, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x400000, @mcast2}, 0x1c) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8}, 0xfffffd27) 445.599182ms ago: executing program 0 (id=3917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f256400000005005300010000000800054002"], 0x54}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r7, &(0x7f00000000c0), 0x10) sendto$l2tp(r7, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) close(r7) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0xe}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20100}, 0x44814) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0cc5640, &(0x7f0000000700)={0x2, @pix_mp={0x0, 0x0, 0x49433553, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x6}], 0x9}}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x50c, 0xffffffff, 0x0, 0x0, 0x358, 0xfeffffff, 0xffffffff, 0x444, 0x444, 0x444, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x23c, 0x260, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'bridge0\x00', {0x0, 0x6, 0x0, 0x0, 0x0, 0x40, 0x10000}}}, @common=@hbh={{0x48}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}}]}, @REJECT={0x24}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, [], [], 'team_slave_1\x00', 'syzkaller1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x568) 331.576941ms ago: executing program 2 (id=3918): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) r0 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1, r0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f0000004680)={{0x2, 0x2}, 'port0\x00', 0x0, 0x802, 0x8, 0x7, 0x7, 0xa, 0xce, 0x0, 0x5, 0x9}) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r1}, 0x10) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) syz_io_uring_submit(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002e40)={0xffffffffffffffff, 0x58, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003280)={r2, 0x58, &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r9, @ANYBLOB="000001"], 0x50}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000003580)={'ip6gre0\x00', &(0x7f0000003500)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x2, 0x6, 0x8, @remote, @mcast1, 0x40, 0x7800, 0x2, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000003ec0)={@remote, @multicast1, 0x0}, &(0x7f0000003f00)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000b080)={'syz_tun\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=r12, @ANYBLOB="140002"], 0x2c}}, 0x0) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000100)="19a3b7907ebca2b89b122bb5a735a5f7b3be2b8d0660f465a350192c6b789c60d5b29b2ae4303763e90dfbfc6432d8a894251e478573fcc62496f5d0a8a56b917976ff5963c6b6e43d99e74c2f711727592d17003920e26782cb9b46d0e0a210375906975a0358a6853deffa07aa", 0x6e}, {&(0x7f0000000300)="7c836f610a03b48db4e6fe4b1f5f73899e0f9ff02d2ff8050837c8a4dad69f5e7edef8cab761121cb0a4d268883717900b33e5ef946c6811bbc8457829950772110d3fecc1b83fb8b472903a6217a01e2588fea4c7f6e49a1f", 0x59}, {&(0x7f0000000380)="46effa82ec43f4258ebb3194533ef3cb58b4da76c707fae454749a50a9b6252c1b33eea37b6bd17c12864af227340305d27990b145269ecf5068859001bea6f033de3cff9c5bd2fbe57c713576c8d6b5c6902330cbdabfe90d54c0da4dcc2c18335ea1b662c1f4ddd2c991f2725677eab0e5eb258fbb1d932d5bba7c73a449d0d3829c10a777ea6264641907ee4ac0be24f9ef8ccf187787cf2edc400b46515cddbad642c60d9cb1a3d10006785de737cb609ce7acfc82f8286b9c8210bd3877726137790ad29de5c9502c442f9b6a7e3040bb6b764161c59cedfba0441632abeced087a", 0xe4}, {&(0x7f0000000180)="eaf081d9c2d98594528fce41cc7e", 0xe}, {&(0x7f0000000480)="8a2b9d65c486e7efd4731d3f91c790064a479bc19bfc03aaa14d9209bcd8aef7a71175f19681a78545ba120c03f0c9dff60d08b93b921f96e0f1393f4738839862febbff1c7940d60a94aa2fdebb3f86e1baad5c606fcea98414", 0x5a}, {&(0x7f0000000600)="42df61ab93321cd2e9514e283c83efc7759aaa2d1043f8a6d02874a37bc6f044b99070bce3e78b0555cf37d57c978022b1a468133cfdf47a43b3677f429c40c737f6a6041dff2c33a4f2f6631bacadb75c1ed77b35d12c5a37b1caf83d8f88def1f2cce907ba0e0175c1190f73f5c206f482f6f4ef903277e065dee204daad796435639cad8dc52b7bcadc95579ae882777b81a7036fc73c8be7124efc25628062761142960617b2d48d3ea93c27bd4fee7c035e3fb8524cc3d1074f48fcbc4e31b8bd35424da4f963a1de8140ac10e8b4a36658b92d259568e930bd5d4b1d3fe9df5e4c5f1fc481800b482be7644b4c86", 0xf1}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000500)}], 0x8, &(0x7f0000000700)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@generic={0x44, 0x6, "890880e5"}, @timestamp_addr={0x44, 0x2c, 0xeb, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x2}, {@broadcast, 0xfffffff8}, {@multicast1, 0x40}, {@private=0xa010102, 0xffff0001}, {@multicast1, 0xa}]}, @generic={0x7, 0x12, "413a3fff1df59ffcf7d0952299b0a3b6"}, @lsrr={0x83, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0xb, 0xc3, [@dev={0xac, 0x14, 0x14, 0x10}, @rand_addr=0x64010101]}, @generic={0x82, 0x8, "eb9f822d3c52"}, @noop]}}}], 0x6c}}, {{&(0x7f0000000580)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000002d40)=[{&(0x7f0000000780)="b44db2125368fca9ccf0369683b475bf937a3d9afa63f3aa98756e87eb0cabc7ed9c10989c11b9904f7fa2f2d4743972c4652e2dfb9f6a2a7ea58c4971b08f17755f37b4990b336d14f9fc36cf6a9d8dec453a80085ab1f098352fcce59b442c8631c988049b0eda32fbf70f309b94ff9120061fd193f996ee1f06a553e27f75b68d13e87dbec369704d36fd3bc291a2a6", 0x91}, {&(0x7f0000000840)="6d043f871098225a9a78fe2081d74f50aa840c198bd9f6abbe6aed0ec21fa96819c96162a935c22a701c516e520f8c18", 0x30}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="b8b24fdf68ccd45f8f7493972528068eac2f8a6d4f4c196395a945fb663b5f0cdf2438b08a87dfdf28066aa1cc9c11641699368b", 0x34}, {&(0x7f0000002900)="3cd4caf68d1d523586c6c8e4be3a8e0a0fe70b4418c7135d7390a183bf869e30da8e3cecaef0e0e5a2e520c720d586a1b6004d31f62530a7ebc73a98dc0ab189401fd9888228cf6b13b469d8e50b15fc66ecc353714c094aa99d0c4114bfdc5d32b708f681c343a498e27127f4d8e5d3ddb249c5d1a94146c8e72636895410a9847aebd98bb5876caea7682faec4eeb7de10b93934e5c059048c39e8d091e8c1c867e3cde885d41a579e2c", 0xab}, {&(0x7f00000029c0)="72df02e7d142871103bde88e297dedb8eb325c7122f44217f7125b0bbfaddc26c9c36c491c4a211e10d3ab7f2110113c38000e519af8953ff023330937694ff588ca63943587918626875cba6b2ef5e6a9e9bb7892584a02f655f39bcd71226b7b0d8722a767c99cecb9b2ef78f234e97ab7e6b743c24a9bddcb5a720b1675984f2d3d9db73377b3a83b61566e0333ebc7838e8c6d3485f5c3ee0eae521252eec687be06bedbe50d0fa76af7076fb9e6d9eed0cd2e2e2b6b71d3f41d30995a2be3380b15c373e1438c038c022bd087072edfe9d9d19797e0ca7c20232d396e0c438f7844efb2e089cfc599", 0xeb}, {&(0x7f0000002ac0)="f8dc8f03e0f7693ad93d1ca701b5b523d92ed92ef7663f5ddacebdd62af576adb5942f7640dfab98f9ad18a5c6e684db2df5a9fb0fa6522729e8cdb141bd15635a082c75215cbeca18ccec005b8ddc25eb5b291da1af1ede5a9937a0cdcbaaac3b0931ad27086f", 0x67}, {&(0x7f0000002b40)="7aad95e8284c6e89daa81c6811ce3de71e0cda69396a75c36a9886f30e7f45a8c02071653e585a00bdd9475a4adae772a16b788afd7866c1b1b3c2e7e2b29ab312b51b858f1f8dbbcba7ab95f60f0122072804a7e4ded51a9a035c89fc4cf93743966d33dbc5aa48f0e9d6db1146f53fc8e56396a1ef1ff85cbdc648027164c1292fe8acca4ca50ea9e5df370ac7bdc788b6445bbc0a441f9584ae51cc72daaff5e27903e09f720ed9f6efa34bdb86e388c5450ef6c9e3b68b0be5005dc1201e7256b99c1d6a859b680c298aa47d42", 0xcf}, {&(0x7f0000002c40)="8ded1d0d303e9e2e75fb7fddddb1547c59a9ecc42749c00b86db96f2b0d825f18c9575adb7d41cf185857c07632fb38f3efaefc797aee93395f84bf716788d623bbf66160559bc361a3e5c54e635fa7917991615913e86d7e1a33d2f9e557b6ba093754f959300cb2be153e019d796d575b0f34d6dee8c1548f86f7339c13a6e6f86b4850636a4871f3ded4112f878fac4d118074a5127222604f1c6e9e5f0f585e6250faf2500d6a01a9d5ce1d30b23586eac17876f25995a7d7c7a250dfd8a8657affd376d9137724d6b90bd81b59664976d0ef90aa6538b6d2db17fea575fd9", 0xe1}], 0x9, &(0x7f0000002e80)=[@ip_tos_int={{0x10, 0x0, 0x1, 0xfffffff7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xc3, 0x1, 0x2, [{@rand_addr=0x64010100, 0xd5}, {@loopback, 0x5}]}, @timestamp_addr={0x44, 0x3c, 0x37, 0x1, 0x1, [{@rand_addr=0x64010102, 0x8c2}, {@private=0xa010101, 0x10001}, {@remote, 0xc}, {@multicast1, 0x1}, {@rand_addr=0x64010102, 0xbf}, {@remote, 0x699f}, {@multicast2, 0xfff}]}, @generic={0x88, 0xb, "d7f97db961abbeb1a2"}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @private=0xa010102, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}, @ip_retopts={{0x114, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0x39, 0x3, 0x8, [{@multicast1, 0x8}, {@broadcast, 0x7}, {@rand_addr=0x64010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x40}, {@remote, 0x6}]}, @cipso={0x86, 0x64, 0x2, [{0x7, 0xe, "7635d386d564c7b610dd1914"}, {0x5, 0x8, "df241ad8002e"}, {0x1, 0x11, "1b9a5a89f0c2df04e6c2fc6fc0c56b"}, {0x6, 0x6, "8ff0f164"}, {0x0, 0xc, "4ecb9b53b892c6359c0b"}, {0x0, 0x9, "8704754877be7a"}, {0x0, 0xc, "b5b8bdd37f9810ab4166"}, {0x6, 0x10, "5d4a4438913040e523f125baddc9"}]}, @ssrr={0x89, 0xf, 0x65, [@multicast2, @local, @multicast2]}, @lsrr={0x83, 0x1f, 0x5d, [@loopback, @remote, @multicast2, @rand_addr=0x64010102, @broadcast, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1e}]}, @generic={0x83, 0x11, "1cec7b12cdcc518cca515263218cea"}, @timestamp={0x44, 0x14, 0x8a, 0x0, 0x8, [0x0, 0x0, 0xffffffff, 0x200]}, @rr={0x7, 0x23, 0x26, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @multicast1, @empty]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7ff}}], 0x1d8}}, {{&(0x7f0000003080)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000031c0)=[{&(0x7f00000030c0)}, {&(0x7f0000003100)="9e3fe6feb962615b20697f44530ca7f4808060ba7c2794dccfbf76510284e996ef577267bb697164fe38d0f025715a15c512930a36753bdded0162f3fdbe9088f48cb19747cfa3e74691e1ba16ba49d7f41be037ad146768f1e73fa0", 0x5c}, {&(0x7f0000003180)="75bdb1f1af7fb453f60892dc077ecc2a983bc2e9af49222525be060237dc08fc0b4f2643e30b666c053643bb026ae5", 0x2f}], 0x3, &(0x7f00000033c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xff}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x32}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r6, @broadcast, @local}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}], 0x88}}, {{&(0x7f0000003480)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000034c0), 0x0, &(0x7f00000035c0)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r10, @multicast2, @multicast1}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7ff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0xffffff01}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x7, 0x0}, @loopback}}}], 0x50}}, {{&(0x7f0000003640)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="1bceab1607b4ed1f237b06d33293a026330cd0c11bb5ea6111f825788da26c7b833cddee8ead03931d9557182ae37cbadfe8c90ff8460c63c821ac08b1a24db37e88617b7bb07da9f9c13f2d40b532e64e1f270130", 0x55}], 0x1}}, {{&(0x7f0000003740)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003780)="dacae9141bfce8e11722c99ed9a1de9780281136802cfba815737fe2ad0f67813c5ae7e92198daa6c5c758cc1c3a3a3760177214949767fe220c75c2cae6e5b8b301fdf4932cce6f6062aaae8173c17d6a64f00b49c84371a2f50f1b3ae687b21ebe12d1779c87df278268b8dd97f574b0fc82c3df43fab3b21c49e54bb22b2aa6ae2785d0d5bcd0a846e48223450554d05660dde54ce6cce2788e81e1d5bc480442ec194bfa14abff6de13dc6d8034783f7dde62895efe3de387385408c89a80f1d4cb48eab065544d29c9e", 0xcc}, {&(0x7f0000003880)="62948b488bcdc01c6d0707d81387ef7138f9b7ec3f05da42e7", 0x19}, {&(0x7f00000038c0)="58a1a297ae0bf257546669732b6564c6b0630573f672945ed4889d75a3bcd40050fc7890d867299ac09fd3be3a7f3ca8cc522e0e087a2247acd0f5e54128e3caba750274c9850e3cf9676d89e544122b16311e263e6f51a22b4dae7d83d5de590237f144ddbfe34c73dc5fcda44eee88933aa3f5b4b5a92d7a1c44c9b8b069710c9ca8f0866f3922c1a85b89cf54ab895b3921a31b3fe159753c999209910f84b1b0fa73e5826d13f4692db7f2345b060590b63cdb00675c5f6384c9a33ec3d7b8b36aa579b0dfc9b9006f4299c17e0c9adb228d45a6bb87b35e60dbcbc27d7f7d5868b7e15ca2a0dc3e3d66eca638d1b22ecb82", 0xf4}, {0x0}, {&(0x7f0000003ac0)="026b3582a6e02093d3df5b3eb59ead3e1b2f5d1f122234aa7abdcb7ac697a10fa30611d0faf7d73596d328aa8cf50f2cde835f4c9cb0f0d694f292485da1136b6a31611150d5b2ae7f5b551141b7", 0x4e}, {&(0x7f0000003b40)="4fee1657f777ac6d064cb99fdb2437cdd20e59baf2600a5dbfaf9ac563ca6fa0b394092570fd37b16cdff9664d4d0e5abe0889cb688e78cf401a9e428da27e5cfb0a3fca0c301ba603e3ca91856a2095f69e14c4ef71ce569a9f8c64b6f2a227417b2b7aa8e8b9cbf6e696fac567c28bad050d598681b31edfa4760bbec22dcb91b2a241e132e0feac6602d6829aa2983f83de48622d2de753bcccbc086de7a20609e1f8", 0xa4}, {&(0x7f0000003c00)="fc5d026c191dda4f23a56e271a76194dc36655c3c8372b6ec43e05c78b37f0a44583dacf23380bc132845c1411477d3bb00a740755c6fefd6e068ada7438baafed493dcd233cd4d9e5dff3a2e65d2ffc717014208d045d9b1fc9923ddd1352312bd7c30df29e5ad8f2e28d5503fd2f495f9cd2cfafaf11490bd8f402e96c91554cdfb6b4c61309da49", 0x89}], 0x7, &(0x7f0000003f40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x30, 0x3, 0x3, [{@remote, 0x8}, {@multicast1, 0xe9}]}, @end]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r11, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0x74}}, {{&(0x7f0000003fc0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000004200)=[{&(0x7f0000004000)="1e3f50dea35a219150", 0x9}, {&(0x7f0000004040)="ffce65", 0x3}, {&(0x7f0000004080)="9850c07743038e95345201d27aa13905ac0968a7e384f7fd073707cce33010f6cbcbad2059d66581784b75338299d84e7ba63ad3ebc2db1cf6ea7ddb761ee6d1371069a72e1c37b8278a992b873e68760347af78128be3775b34dfc0f781e7", 0x5f}, {&(0x7f0000004100)="e6521765782d554d28526b8243654f9c96b969876a8f0b43e80af0cb9ef62a89391a0584ff9a1e37eaa174bbed2789dcb40e26465122d5b9ca818dc6e0c743fe7d4d4d10b4028091aa502e7bfa4d53b0fd1f509ba9f2685b8a83f970c60ab532e3d3da6d6d66dd9016b1fccf46ca3852b77d3d80acb396163e616046b5e3bcab15d620c4d1eced110ddda61347af17010300e4ddfcb89fda5838626db2d2bc6da99cab34c58c1d9a8f93aa6060ac6206f12945ad4b9151bc472b02cc164e6d06351212ec9a5accf5cc8c1300d377a2bd70b732d787290877816ae5a26e0064f0e5f9fa682b053567af014f1501ce4084", 0xf0}], 0x4, &(0x7f0000004240)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r12, @broadcast, @multicast1}}}], 0x18}}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004280)="b4583a21d44486681ad4425dbe518e21b3592480d76a89ba76aa4bad5783118c7c29d4db16d0899e77f42346f9054bba0bb878d0248c5c5ffe5123d5e0524c6d9ffc47c02a8472f2b6f8b164956a7dc328961cfb810eb6833030f8427eca089063156aeb29771ed44e9b3452b79faab20e5f", 0x72}, {&(0x7f0000004300)="43baf5bd17156c98ac5befdf983d46063e153035e13e9aea666e2c81f2a69d8f3faa6561a8f83fa7417a7f63397dd87d9d1f7a58d1047ea1ea723e99fad62f5b413730fb30ad37a8", 0x48}, {&(0x7f0000004380)="380d4edc", 0x4}], 0x3, &(0x7f0000004400)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x2b}}], 0x10}}, {{&(0x7f0000004440)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000004480), 0x0, &(0x7f00000044c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xc}}, @ip_retopts={{0x44, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x56, 0x0, 0x2, [0x5]}, @timestamp_addr={0x44, 0x24, 0x2b, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x1}, {@private, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb7}]}, @noop, @rr={0x7, 0xb, 0x17, [@broadcast, @rand_addr=0x64010102]}]}}}], 0x54}}], 0x9, 0x4004810) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004700006000000000002f907800000000e00000018303fd83030a00000420880b0000000000000800000086dd080088be00f3cb96000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 261.751625ms ago: executing program 1 (id=3919): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x58}}, 0x0) 89.881066ms ago: executing program 4 (id=3920): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043d0eaaaaaaaaaa10bc205c7f30b257b9b56077dac5989b6963cb480ea7646257012a612c62a8a28b2c0e523427815b13ac93285f3cb016c18f150d2f0a89713e22745d7c30db48e9a979b684fdb54c5a5a1ff99485badc283586ed68c90b12e61f56b8fca5bea17ef38a60aa7b0efbf449c5f171c189c3f7c05aac28a8d0e4f3df3f7550692630902fb0bcb349276cdb"], 0x11) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8931, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels}) io_setup(0x2, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f0000000840)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0xc5, 0x7, "b8e2f9", 0x10}, {@any, 0x9f, 0x14, 0x0, "b8a86a", 0x200}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7f, 0x3, 0xf3, "c2df96", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x6, 0x8, "992fdc", 0xa}]}}}, 0x3c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x14800, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001300"/56, @ANYRES32=0x0, @ANYBLOB="000000080024f016c100000000000000"], 0x4c}}, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="03c9007d020000008b50dc1a49cdcee14dd39a6886df9c16c66e8569f5a301919b7d916f2805815776dac3acb4b844427c87962667fc4ce055210dd9381a486173f45502c530b138ce890b99786a8c747c08eb9b8233ab22cef535f7a9c8482ec7bcb0b31bdf7529ddfd612b8de17abdeaa790d11a01b3f47a013e7e416e952a3b"], 0x81) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x4, &(0x7f0000000080)='*n/)))\x00', &(0x7f00000000c0), 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000f64000/0x1000)=nil, 0x1000, 0x6) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r5, &(0x7f0000000cc0), 0x0, 0x10120, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) r6 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB="48020000", @ANYRES16, @ANYRESOCT=r2, @ANYRES32=r7, @ANYBLOB="05008800000000000600480000000000060048005100000005008900000000000a0006000802110000010000"], 0x48}, 0x1, 0x0, 0x0, 0x2400c010}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfd}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="03c9003320facb07ebc4da480c6658094486c8a78614eac252dbc42e6ae4ea17e1ac9ada3cfdc37dbaeebff49554c94536603023bdc9927e"], 0x37) 67.059879ms ago: executing program 1 (id=3921): r0 = userfaultfd(0x801) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0, 0x65900, 0x65f40}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="540000000206000000000000090000000000000005000400000000000900020073797a3100000000050001000700000010000300686173683a69702c6d61630300000080080013000000000005"], 0x54}}, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$UFFDIO_COPY(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4009}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000180)="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", &(0x7f0000000280)=""/72, &(0x7f00000004c0)="01dbc6e22f72054c01c6c4af148ce1101f59108dc8ba4f21ee0e011e32501e11a815a3a6ecb9efb528b8f4b7db2ae06815b324c9437fab3a660cb9390949bd36823ba0696014946b0d857a12b0c053caca99e9ea8f3b728ccc7180952c16ae2795af36154901f5e5f12cb2906cfcfb02c2ab6a29fa32351b055b2269ee4e67a9e10638f16126e3e0e69cacf93a800af433b3c0556003cda9e4218fecfb70b45e6c816215df60e301c087253d15b8acdb232b61d184647e26f928c02fa0e4bd336f0e595c27d1076e36a258e857a0c613744922ddeb0f96ba4f3774fdb29317f509c53deb", &(0x7f0000000400)="1a2bb6d83820c0a3a234d24c7a908d5f48702705b88a6bc2da9f07ad89ac5361dded1a925d5b127f23c3d113851eeadbbcf5f7b734909cd04e9d65dfb12424ddc8215e93323dae6d71e42ca6b95c452e1dc0331b04c423c6e9f11628e8b2a4574f0fcb9d237712ad0f5656c0ec9dcd5bb87cff78337286bb9c23d7f5f9de5310a6beb16e", 0x5, r2}, 0x38) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x1a1281) ioctl$USBDEVFS_CONTROL(r3, 0x550b, 0x0) r4 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000300)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "891459fe7925b46602e9951f69b336fc21e900585058f2c8e3a15af68afc25e50cd6c4d74d0b221f84aa506b7bd11647bd8772721a113655ec33dd30e1b43d62a73533cad392c4c3928f11c68fbd9a98b13f705883ed404313ec62e6290fdf57fb0e71951ba6a332e2055a0f8caf4052859beac333c4d7d27d275e9d663771b5c21222d4555715fa07208fc86173ee10c09438f9618f44ec445c09555e0b606cada0070b2cb04a943c36f15f4fc18b8930ccbab4c902068b4992f6b880145028f805c1b97ffea256da3a5f0f5536753f298fa2333fd5e589e392f5975d48f20d4f6e0d5b6965dd2d9aee1b5e12d561732d38e7f3e5f42160629e2dc63cf13b9135d289e885dcd8531999570877d0fcc1c044b17cd66e1f92ba129054d1d762b362b7948183b95e01b09aa1c3eeb842427fc5edd9bac8d3559b8ff1ae4a96add3a36967bebf063a407557062c6d6a7dfef0db156f94ab593bcde58644675fc8d57274e0923601ceebb8184aac7ca21eb91810b0128e40f81867482509bce51d5f1b16afc408268b27cec76c66e18d5e9df45a32f444b8e5d762e88dbc76feb57822ac96c324c5424d4d6bfef3f7a04ec2021e8f4cddda2ed1c85299e06f0161694184f1252e73ae267bb156d442de369c375811f5f18ef52c2b53655e01b363f282192bf48c384fbd790d3a28bea935ef7225c8712b6d14b4d68916d730119a6b5441f93b71c3e953792d04afb909d7c12e2c817405bdcb38f633f7d748265dbb14571fa7b03b2dd4c02f114515a178634fd9f453a5550f1eff4e7a5b209cc2b43f8193b91368861934520046c764b9d34e359883aa755277e001ce5ef5bca507124ada8e9549115c256304f0f79d5ceabf72cc30eb29c9b28d120ed5a8a1872b8fdde7fd1db0607dc3b8b3a1dad32ddae68d89cad63f7c775bacf74d1a1ff005d227240686087b786673af1c79109666b7930519b064095639af512802d6f74ad073b4aaf2800c11d62362258faf53e7052c4824ea05452c4dda4fbc0bb494f9ae5a2d674d0788fc4cba1bc7d2efc32387bb128c83d0259419826399341e16e28f7a30f522760151eac8e86698bc9aca380ff5c23d774f33e56fe685c30a31cfc7efe50172a814a67255434c0dbe65874bb78b5e7d95c51066b6c66e8e07afc8d15c345db98282a90d1bac8d308210efec267478ad35c8e8b862193c3702f5efa6d71e1e5f82c86c113809462ff27e654cc3c6b0fdb5dbcb6fb6b7d5c75a51bea153f450ea492a7a4d2fd5fc8debe307f07db6a2c5f006fb0cb566fe3788a7d0444e4b48d01080f1ce61d864b7981de1e1e897b9b1e044485decb7167c42e609da97263b1b7f50c16e835ccdca2190105b818542ebeb997459fc2d1e0bad0f6efeb4f0514b752d14f3b940304a69518953e14e711f33deebe5da7691c68768e6d01d7f3752c61d73ff18765a3983e018011fc60ecf5147caa384a85767fa25dc4f29352436ec9ecae43c442964f9a66928d9e5d79068d43ff9d8b4440071b1e8a077ab1797cd523e1da1de8417c4f621ee99cd60cbcd36593224f3dd9ecaed6530e662e53c97884216bc11d2460ec4231b274c23db2bbabf9f080f526c8dae93bd6b6b77eb2a899cfb80fbcc7640bea09895a799a5f9682ac8c88af599509f23888336c90a4b0a3b4e0cfb2e62f15bf506ddd1f5bd228860f39dc0ce215c9f2f2bbb762c02c33c69ab62ddafb4d82ca67ca7c81164e532ddd47d58046f524c1fed427ea3f34b685c2c0c9e07f13987f6fc877ec690c7ed88c0eb065b4f3a6f24b078e7d57a9aab445e95f7f0a25dee1f79d5372f9b5c1c57225140783131cdb18bb6cab98edc621eee06aa3807bbe12a08984e20297b19eba433f84fddf8f255c3564032de196521fa159f8633c39538a4b3042fe7bd626cc0813a13a32da6869b1f8fefd7cd1f21221b8a8c993995257526a8a05d8bca6eb1fc42d4dc77de8c130029bfccf0d22d15e2551d11d214f94a48cae90db13bf052c1ee8ad425098ffcccf3601b28a375467555ba78aa3f8c49fcfbe3fed334c39d6748323057e002cd24fb3178868e9998fce4efc09fc2ebf3f26c74e1de8eab1f6337a40a0597cef970f7b35b8f5f7f0da979e6f053593c9ca3e44494fa477411930bd690980acc4448cf4fd710b9bce99950bef36d1b510c483199b5bee2093116ac73338966c8b7a01153afec1e8ada7f1f0b9ac141283211f9b6a52850bb1b1b24b6e51629e0dff8e99a96568f0da5e56443b92f81463612c85f65bd044bfb71a7650e9ba9655623ea57f50530628437dc74968446a8a6622d5e411f98c3a6cb72f286be15e54faa4adf8dfc56afaaf625a6ce82e00665f8d8b928a030cc06c927558ec2bab570f65f61b760ef59923146064ecb47f729c92dbe2e5281d69a3953f38565107072ace2387a87154a80af398f41f57afb291948d75c33452ea2a74f507c6e3280565f6a589e6b7a892b1b2faee5c8a52f63a0099cacc3ba2847979f13368f76e2c0d26def909f3595810cc16dc7ec8d10a9163d8c715f70ad5aa967721b939c470d8374345cf2288e6c0ec5604c5f2fe26f80b17638e1c9f20733848f5ee6e12e6bb1b5ed010d857dc8b92315ef6d0c26675ebf796183de50f8ac40b47e295432be1ee742fa110262e0f26149c3fcbb233b8e5386b3125c53b4c5af0ea56435d15e711cbc3ba33d86c950037aae68e91e7d9dca745aa6e8fae3a246039fc1d8a45da62bb7d28dc22ae1a6505a1823fb5f687426471f19cdb0dacd44e934f452e317b8b9048c4d74a4f125c5ec2d1a8b85971b4c40c345f5c746c283160620828efc53d814c72f615a11f8c4602291677dc820487709d95ccc4b1aa504d4ee57a1fc570124c45039009e9c5217be761bc0debcb66cc2c462d3fdca3ff2c5a7ee5b35a447b61200f908a93e992711de7e903979f75613eb9e48f1a4b3cf66e42d295267330d069761d69c811a74e2b8237ed250f649e748829610d38fb4aefa39506e36ad968a1b3fc8e9496b34219a7b607aefb89d00dd1b34798d6695d229c573c34ce10272d29d37d2d3d04acfe78d68e35727c1e58c5e59a2ed07e990d848c817673761caeab38de048e5003321070fb625069174d6d9bd9b880c5ef6c289528253cc1b4d507c52e7b641db6d7a9df8454417fa2324101a6f64174cab4300db2fe1fad93c19f59fbd6c695299e727e886d40c00b5f7fb6723384d5223dd47d873288200d8f833effe9120f3cf1ce5816b2a162f774626d439f190d77dcee78d6cc1f431f3d70ee282365981e840a317747d7ba4e9582e9cb0f98e1695445ed5efa3d296c28e75ca63215298980c1391ca5b03e0d1c0c0a86e3b955003589ae4503f4086e91dde03a3d24157a03c0be267acc31ff6fac89a7250bb87c7bee188e4ef241490286b88423feeb2f4020b35f475c319e33cc4a46b56632e31b115f91a984529cf6a092713c603f7569dfeaf26d6e099e4a93aac3a21fc64298753c52d9e6800a37639baaffdd2cf5bb2e5c4e0d5da7f2eaaa3301797c4e740a34cfb6a6201539d61aad96b73dec6b494617d79fa55557f2414d94203700813718b848eb28bde8e7722dc0d749366761e3daf4d9970a119a5a80dbc427b54e821fffd3a242ea27cebea17f9ffddbdf209537ea9b902b776e99e55a5064c60a16ace9f6a4d9142d34ab23f947459b1a8fdc127f5381bdb701e5bc0e409252787efad10e8cb80c8300ac05e45c05353c71f1878a007ac024b4cf0dbcee3c406fe8e974086ae62d51fef0372d80b78cc66454e1b02dc4538ff2f705d2cf60f5496222b5d9c2882c9b14413612685cb45e7542fe74910e22c7152001afba27ab2f18fed6ce6d46d6bb5247124f5a5551dfea5e8ceb5e53b69debeaab2471592a5f82026a911c1d84d51cbe27604e8e194cece0c2f539123e6dffcbb4dc7725c6e9efd5d78e4b05b203f33b2f4212803a3291a8042a9954300b56834bd6519d28a28ff71bf0319b5bdf296f790c3fe1ee9ce851a4541521f52c68d065a7b114b8801f2e48260a3923ed16c885bc10e58e647c8535574774e463aceb2d678e1c77c8fefd634507838f3d3a30d595205fdf5436c71193afffaf70f56dffa4fd698d121afad853a9438a0da592e72122765ad47a1a60cbe01524c2d4e8cb36b67220d11c51b3ebed47307c674f9d47e7e8fa760aab4f5b9a008548971ed829dbcd6ce9e813880278997cc495055a4ed3cfa1aeefd715518a9f363667ebee374b02c1ddbdf2eccbddafacc924a46edf235c887a703551a1fd4dbbb8a16704dcd67171245e4c726c898baf350e924ce13cb6ab20b9cad844fc54a40c97adfec161d8c2d2b7de0aee01296e677ee22e4bb37e82e3c0ec45295dd99e36795c60f2788e65f8d1b8185a743a5bcb4716771cd59d7ff1d62705d7db6f81263e545ca5f32166c57d34ce2070056ddbe5dabc04a0b483e9bcc9f24cec01a52997cb1ca9cce59e5174269ab3d69a177e3fa6ed8f92c948bda742e563e3c4caf8978aed4795f8706181541115950442697e08e2028c418ca0bd2ec1077daafe3262135dedda4a616970ebb9cc03969395f49d03343f00f9eeeb6fad987d48ce2183a2c2488b243f8a9853df7037b7f125369f096efec7d92632afb30a80312fafb03a773e4018a5fa9d360f242a29d8c009d7796d298acfe6775cc1137abc52c4551031f708e7d5b41f9099358bc3100643b9ed4926c3b8ad2134c95941c7b74a522a16afa4edde14e62b8d5146d2bebae4a0ccaf7081db42d994ad516cb2984b96fbe2ee429c875fd7bdb550ed9d7384516da67f262d54086d716f6774a000b45f21a10d91d95703d0c8ca23d847e0ce8910c75c8bab7286b3287abfd5cbb6804e954eae944b5957ebef78efad17b1e1b11d470e2d145cfcf6b6ab588a8977ff549b60602ef41a8b9e2073d89afce8387347a88e3db9ae9830827f59cbb31788f3e441f09dbc1304d9b3b346dc074663c47ac3e4bed5f8a9a4f92fcf956c7ac61df1d5cfe11fa8e577e68b9051c0bd86ff5d726f273a9eb0a5dc81a924af627feed201452a9674a7fa0f5f49ace770f7d9bf6f05c6ba96b59b34e213c4c20977e231f1385be89176a00df0a6f8ee90dbeec10949fc2d585e4a47cd7aaef29b5011f97d9320f1b6399f4c0136ed1be7a6ddd3dd2f94edcd312aa002a1b5919a1b22502f0847e8f00bd6786f7080d3078fa67d6d648c24bd27f025e2280d767e6a2afa034fdae1a4443ecb72fefa2196fd96c5b2243c044d3f7ee1c7545f2e3df0361db34a2f93d9ca21c4d71b5de8555dca00901124a2ddc745806d5fda302670038fe17563dc0b12cedb4655e3e321572fe163d4c9d679ca57bf27a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000015c0)={{r5, 0x7, 0x2, 0x8, 0x0, 0x200, 0x7ff, 0x6, 0x0, 0x3, 0x0, 0x2, 0x3, 0x8000000000000001, 0x80000000000}}) 40.457513ms ago: executing program 2 (id=3922): syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904000000f462260047a287393d93dc4c6edfbae334"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d1", 0x31}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 7.870369ms ago: executing program 0 (id=3923): ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) io_uring_setup(0x5560, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40010000100001000400"/20, @ANYRES32, @ANYBLOB="0000000012400000f8001a80f40002801c0001"], 0x140}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x77359400}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffcc, 0xfa00, {0xfffffffffffffffd, 0x0, 0x39, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x2011}) 0s ago: executing program 3 (id=3924): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x30}}, 0x40004) io_setup(0x0, &(0x7f00000000c0)) io_setup(0x4, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000740)='mm_shrink_slab_start\x00', r3}, 0xffffffffffffffde) syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000800)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0xf0, 0x1f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ff2153ed2d95"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x2, 0x81}, {0x6, 0x24, 0x1a, 0x44, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xfc, 0x61}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xc1, 0x9, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x2, 0x40}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x0, 0x2, 0xa, 0x8, 0xfc}, 0x50, &(0x7f0000000880)={0x5, 0xf, 0x50, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x6c, 0xffff}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc5, "e1c12e4953e95652f92ea7ad11fd5ac3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xf2, 0x8, 0x7, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0x4, 0x26, 0x3, 0x5, 0x8, 0x10}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "c2084e74e011acafa7d2bd01f325e399"}]}}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x50}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x200}) kernel console output (not intermixed with test programs): dge_slave_0) entered disabled state [ 735.251762][T18580] bridge_slave_0: entered allmulticast mode [ 735.261999][T18580] bridge_slave_0: entered promiscuous mode [ 735.277205][T18580] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.289260][T18580] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.298429][T18580] bridge_slave_1: entered allmulticast mode [ 735.312170][T18580] bridge_slave_1: entered promiscuous mode [ 735.324573][T18368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.506783][T18580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.600741][T18580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.691952][ T62] hsr0: left allmulticast mode [ 735.699354][ T62] hsr_slave_0: left allmulticast mode [ 735.706371][ T62] hsr_slave_1: left allmulticast mode [ 735.712447][ T62] bridge0: port 3(hsr0) entered disabled state [ 735.739043][ T62] bridge_slave_1: left allmulticast mode [ 735.750336][ T62] bridge_slave_1: left promiscuous mode [ 735.767881][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.790799][ T62] bridge_slave_0: left allmulticast mode [ 735.807738][ T62] bridge_slave_0: left promiscuous mode [ 735.817743][ T5142] usb 1-1: USB disconnect, device number 105 [ 735.830700][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.880879][T18661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.895820][T18661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.993508][ T5094] Bluetooth: hci2: command tx timeout [ 736.246842][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.258736][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.269250][ T62] bond0 (unregistering): Released all slaves [ 736.320408][T18580] team0: Port device team_slave_0 added [ 736.347154][T18580] team0: Port device team_slave_1 added [ 736.452065][T18368] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.461382][T18580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.472237][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.525348][T18580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.618760][T18580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.633216][T18580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 736.664943][T18580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.706750][ T5094] Bluetooth: hci5: command tx timeout [ 736.729106][T17754] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.736315][T17754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.772574][T17754] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.779810][T17754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.821685][T18673] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3543'. [ 736.831726][T18673] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3543'. [ 737.037347][T18685] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3544'. [ 737.097796][T18685] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3544'. [ 737.131868][T18580] hsr_slave_0: entered promiscuous mode [ 737.155610][T18580] hsr_slave_1: entered promiscuous mode [ 737.162322][T18580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 737.175631][T18580] Cannot create hsr debugfs directory [ 737.193924][T18678] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3544'. [ 737.213816][T18680] netlink: 4093 bytes leftover after parsing attributes in process `syz.1.3544'. [ 737.241838][ T62] hsr_slave_0: left promiscuous mode [ 737.261951][ T62] hsr_slave_1: left promiscuous mode [ 737.274462][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.281923][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.301262][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.320144][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.378378][ T62] veth1_macvtap: left promiscuous mode [ 737.384141][ T62] veth0_macvtap: left promiscuous mode [ 737.389811][ T62] veth1_vlan: left promiscuous mode [ 737.393446][ T8] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 737.398365][ T62] veth0_vlan: left promiscuous mode [ 737.406933][T18699] netlink: 'syz.1.3548': attribute type 29 has an invalid length. [ 737.604337][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 737.620645][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.630702][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.647732][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.660463][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.680773][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.690049][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.930149][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 737.936073][ T8] usbtmc 1-1:16.0: can't read capabilities [ 738.020082][ T62] team0 (unregistering): Port device team_slave_1 removed [ 738.058390][ T62] team0 (unregistering): Port device team_slave_0 removed [ 738.067701][ T5094] Bluetooth: hci2: command tx timeout [ 738.579089][T18699] netlink: 'syz.1.3548': attribute type 29 has an invalid length. [ 738.610661][ T8] usb 1-1: USB disconnect, device number 106 [ 738.789330][ T5094] Bluetooth: hci5: command tx timeout [ 738.847024][T18368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 738.969798][T18531] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.999203][T18531] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 739.057967][T18531] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 739.116124][T18531] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 739.206043][T18721] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3551'. [ 739.215935][T18721] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3551'. [ 739.427855][T18368] veth0_vlan: entered promiscuous mode [ 739.573662][T18368] veth1_vlan: entered promiscuous mode [ 739.687606][T18744] program syz.1.3555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 739.708507][T18531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.786976][T18368] veth0_macvtap: entered promiscuous mode [ 739.818278][T18531] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.872635][ T8] usb 2-1: USB disconnect, device number 90 [ 739.889836][T18368] veth1_macvtap: entered promiscuous mode [ 740.022463][T17754] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.029768][T17754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.040311][T17754] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.047522][T17754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.065550][ T5142] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 740.201370][T18368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.217732][T18368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.238206][T18368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.285146][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.301617][ T5142] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.312502][ T5142] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 740.331259][ T5142] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.411419][T18368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 740.425156][ T5142] usb 1-1: config 0 descriptor?? [ 740.443071][T18368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.475505][T18368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.509801][T18580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.542283][T18580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.575933][ T62] bond0: (slave netdevsim0): Releasing backup interface [ 740.607760][T18368] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.623434][T18368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.632332][T18368] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.652418][T18368] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.654958][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.675235][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.685134][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.693869][T18580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.711328][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.719742][T18580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 740.735642][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 740.744874][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.854560][ T5142] hid (null): invalid report_count 61986 [ 740.864508][ T5142] hid-led 0003:0FC5:B080.0013: invalid report_count 61986 [ 740.879486][ T5095] Bluetooth: hci5: command tx timeout [ 740.894420][ T5142] hid-led 0003:0FC5:B080.0013: item 0 2 1 9 parsing failed [ 740.937666][ T5142] hid-led 0003:0FC5:B080.0013: probe with driver hid-led failed with error -22 [ 740.969112][T18531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.200821][ T62] hsr0: left allmulticast mode [ 741.210367][ T62] hsr_slave_0: left allmulticast mode [ 741.218240][ T62] hsr_slave_1: left allmulticast mode [ 741.226828][ T62] bridge0: port 3(hsr0) entered disabled state [ 741.238738][ T62] bridge_slave_1: left allmulticast mode [ 741.247092][ T62] bridge_slave_1: left promiscuous mode [ 741.252881][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.268152][ T62] bridge_slave_0: left allmulticast mode [ 741.277131][ T62] bridge_slave_0: left promiscuous mode [ 741.282967][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.658502][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.669681][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.681991][ T62] bond0 (unregistering): Released all slaves [ 741.701890][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.718187][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.903368][ T2816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.911960][ T2816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.001957][T18580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.012143][T18531] veth0_vlan: entered promiscuous mode [ 742.032755][T18531] veth1_vlan: entered promiscuous mode [ 742.106014][T18757] chnl_net:caif_netlink_parms(): no params data found [ 742.182032][ T62] hsr_slave_0: left promiscuous mode [ 742.189149][ T62] hsr_slave_1: left promiscuous mode [ 742.196482][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.211017][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.314809][T18781] syz.2.3474 (18781): drop_caches: 1 [ 742.417117][T18781] syz.2.3474 (18781): drop_caches: 1 [ 742.771546][ T5138] usb 1-1: USB disconnect, device number 107 [ 742.783764][ T5095] Bluetooth: hci0: command tx timeout [ 742.825031][T18373] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 742.982334][ T62] team0 (unregistering): Port device team_slave_1 removed [ 743.021461][T18373] usb 3-1: Using ep0 maxpacket: 8 [ 743.029194][T18373] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.040310][T18373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.064729][T18373] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.080632][T18373] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.100202][T18373] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.101729][ T62] team0 (unregistering): Port device team_slave_0 removed [ 743.110672][T18373] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.341404][T18373] usb 3-1: GET_CAPABILITIES returned 0 [ 743.379109][T18373] usbtmc 3-1:16.0: can't read capabilities [ 743.932236][T18580] 8021q: adding VLAN 0 to HW filter on device team0 [ 743.977990][T18795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3561'. [ 744.001452][T18795] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3561'. [ 744.028460][T12894] usb 3-1: USB disconnect, device number 88 [ 744.058972][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.066146][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.078528][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.085750][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.112013][T18531] veth0_macvtap: entered promiscuous mode [ 744.182371][T18531] veth1_macvtap: entered promiscuous mode [ 744.278641][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.307712][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.317649][T18757] bridge_slave_0: entered allmulticast mode [ 744.326246][T18757] bridge_slave_0: entered promiscuous mode [ 744.336786][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.344043][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.352026][T18757] bridge_slave_1: entered allmulticast mode [ 744.365856][T18757] bridge_slave_1: entered promiscuous mode [ 744.401116][T18383] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 744.435160][T18383] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 744.442611][T18383] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 744.454542][T18383] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 744.473905][T18383] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 744.529639][T18531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.548492][T18531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.558641][T18531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 744.579381][T18531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.604845][T18531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.629705][T18531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.642585][T18531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.661998][T18531] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 744.673034][T17754] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 744.675263][T18531] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.699989][T18531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.721528][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.776392][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.826952][T18531] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.841843][T18531] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.853092][T18531] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.862831][T18531] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.863392][ T5095] Bluetooth: hci0: command tx timeout [ 744.892394][T17754] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 744.908913][T18580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 744.923318][T17754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.931681][T17754] usb 1-1: Product: syz [ 744.946019][T17754] usb 1-1: Manufacturer: syz [ 744.951719][T17754] usb 1-1: SerialNumber: syz [ 744.968705][T17754] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 745.010845][T18373] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 745.047755][T18757] team0: Port device team_slave_0 added [ 745.076833][T18757] team0: Port device team_slave_1 added [ 745.176211][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.193649][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.242015][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.289517][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.303892][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.359047][T17754] usb 1-1: USB disconnect, device number 108 [ 745.379081][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.471892][T18580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.531875][T18757] hsr_slave_0: entered promiscuous mode [ 745.539058][T18757] hsr_slave_1: entered promiscuous mode [ 745.550168][T18830] syz.2.3567 (18830): drop_caches: 1 [ 745.550986][T18757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.564088][T18757] Cannot create hsr debugfs directory [ 745.635076][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.677915][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.761340][T18830] syz.2.3567 (18830): drop_caches: 1 [ 745.793807][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.801669][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.037957][T18580] veth0_vlan: entered promiscuous mode [ 746.065109][T18373] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 746.085796][T18373] ath9k_htc: Failed to initialize the device [ 746.093762][T17754] usb 1-1: ath9k_htc: USB layer deinitialized [ 746.114611][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3569'. [ 746.181744][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3569'. [ 746.281973][T18851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3570'. [ 746.300839][T18851] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3570'. [ 746.324946][T18580] veth1_vlan: entered promiscuous mode [ 746.523608][T18860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3572'. [ 746.535481][T18860] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3572'. [ 746.695183][T17754] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 746.721342][T18580] veth0_macvtap: entered promiscuous mode [ 746.778025][T18580] veth1_macvtap: entered promiscuous mode [ 746.872521][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.893123][T17754] usb 5-1: Using ep0 maxpacket: 8 [ 746.903753][T17754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 746.924833][T17754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 746.936353][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.943121][ T29] audit: type=1326 audit(1720402858.997:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18869 comm="syz.2.3575" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7435579 code=0x0 [ 746.951407][ T5095] Bluetooth: hci0: command tx timeout [ 746.975735][T17754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 746.985807][T17754] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 746.987240][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.000015][T17754] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 747.019644][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.028696][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.045887][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.056533][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.092350][T18580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.141600][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.161556][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.172562][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.184101][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.197480][T18580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.208604][T18580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.223634][T18580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.246618][T17754] usb 5-1: GET_CAPABILITIES returned 0 [ 747.253785][T17754] usbtmc 5-1:16.0: can't read capabilities [ 747.273859][T12894] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 747.310518][T18580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.322270][T18580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.354603][T18580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.373103][T18580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.476939][T18875] syz.0.3576 (18875): drop_caches: 1 [ 747.495663][T12894] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 747.496251][T18757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 747.522143][T12894] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.532699][T12894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.547695][T12894] usb 3-1: Product: syz [ 747.551999][T12894] usb 3-1: Manufacturer: syz [ 747.559078][T12894] usb 3-1: SerialNumber: syz [ 747.572533][T18757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 747.586698][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.593097][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.630834][T18757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 747.677246][T18757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 747.790680][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.832352][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.885699][T18875] syz.0.3576 (18875): drop_caches: 1 [ 747.999338][ T6418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.032379][ T6418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.090178][T18373] usb 5-1: USB disconnect, device number 113 [ 748.285296][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.347888][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.405085][T18373] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.412258][T18373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.479820][T18373] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.487032][T18373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.755229][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.847813][T18757] veth0_vlan: entered promiscuous mode [ 748.895048][T18757] veth1_vlan: entered promiscuous mode [ 749.035746][ T5095] Bluetooth: hci0: command tx timeout [ 749.083206][T18373] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 749.112344][T18757] veth0_macvtap: entered promiscuous mode [ 749.131131][T18757] veth1_macvtap: entered promiscuous mode [ 749.186924][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.197599][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.207946][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.218510][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.229240][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.240493][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.250761][T18373] usb 1-1: device descriptor read/64, error -71 [ 749.257348][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 749.270181][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.285767][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.297482][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.308135][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.318603][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.333035][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.352963][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.375327][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.403075][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 749.424686][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 749.454616][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.502847][T18757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.522192][T18757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.550797][T18757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.559746][T18373] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 749.567796][T18757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.587728][T18922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3582'. [ 749.620967][T18922] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3582'. [ 749.723252][T18373] usb 1-1: device descriptor read/64, error -71 [ 749.849677][T18373] usb usb1-port1: attempt power cycle [ 750.127385][ T2816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.164275][T12894] cdc_ncm 3-1:1.0: bind() failure [ 750.168192][ T2816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.189833][T12894] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 750.216921][T12894] cdc_ncm 3-1:1.1: bind() failure [ 750.275683][T12894] usb 3-1: USB disconnect, device number 89 [ 750.298959][T18944] fuse: Bad value for 'fd' [ 750.313998][T18373] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 750.336123][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.389073][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.395179][T18373] usb 1-1: device descriptor read/8, error -71 [ 750.669075][T18945] syz.4.3585 (18945): drop_caches: 1 [ 750.703380][T18373] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 750.757865][T18373] usb 1-1: device descriptor read/8, error -71 [ 750.831925][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 750.861206][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 750.869671][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 750.885562][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 750.895768][T18961] FAULT_INJECTION: forcing a failure. [ 750.895768][T18961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.912119][T18373] usb usb1-port1: unable to enumerate USB device [ 750.915247][T18945] syz.4.3585 (18945): drop_caches: 1 [ 750.930169][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 750.938861][T18961] CPU: 0 PID: 18961 Comm: syz.1.3588 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 750.949024][T18961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 750.959071][T18961] Call Trace: [ 750.962346][T18961] [ 750.965274][T18961] dump_stack_lvl+0x241/0x360 [ 750.969986][T18961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.975180][T18961] ? __pfx__printk+0x10/0x10 [ 750.979762][T18961] ? __pfx_lock_release+0x10/0x10 [ 750.984785][T18961] should_fail_ex+0x3b0/0x4e0 [ 750.989460][T18961] _copy_from_user+0x2f/0xe0 [ 750.994051][T18961] copy_uabi_to_xstate+0x140/0xb30 [ 750.999184][T18961] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 751.004813][T18961] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 751.010526][T18961] ? __might_fault+0xaa/0x120 [ 751.015294][T18961] ? __might_fault+0xc6/0x120 [ 751.019967][T18961] fpu__restore_sig+0xdce/0x11b0 [ 751.024905][T18961] ? fpu__restore_sig+0xc1c/0x11b0 [ 751.030029][T18961] ? __pfx_fpu__restore_sig+0x10/0x10 [ 751.035400][T18961] ? __might_fault+0xc6/0x120 [ 751.040076][T18961] ia32_restore_sigcontext+0x583/0x910 [ 751.045532][T18961] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 751.051518][T18961] ? lockdep_hardirqs_on+0x99/0x150 [ 751.056727][T18961] ? _raw_spin_unlock_irq+0x2e/0x50 [ 751.061913][T18961] ? __set_current_blocked+0x310/0x380 [ 751.067391][T18961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 751.073364][T18961] __do_compat_sys_rt_sigreturn+0x162/0x230 [ 751.079258][T18961] ? __pfx___do_compat_sys_rt_sigreturn+0x10/0x10 [ 751.085670][T18961] ? lockdep_hardirqs_on+0x99/0x150 [ 751.090872][T18961] ? do_int80_emulation+0xe8/0x200 [ 751.095980][T18961] do_int80_emulation+0x11f/0x200 [ 751.101015][T18961] ? clear_bhb_loop+0x35/0x90 [ 751.105695][T18961] ? clear_bhb_loop+0x35/0x90 [ 751.110373][T18961] asm_int80_emulation+0x1a/0x20 [ 751.115304][T18961] RIP: 0023:0xf746a577 [ 751.119380][T18961] Code: 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 751.139071][T18961] RSP: 002b:00000000f5d8357c EFLAGS: 00000206 [ 751.145137][T18961] RAX: 0000000000000091 RBX: 0000000000000003 RCX: 0000000020002980 [ 751.153121][T18961] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.161081][T18961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 751.169040][T18961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 751.176995][T18961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 751.184960][T18961] [ 751.195834][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.205548][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.223538][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.236764][ T5142] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 751.244552][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.252126][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.282245][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.290564][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.298574][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.311468][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.320026][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.328605][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.358138][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.372414][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.390258][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.413165][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.437029][ T5142] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 751.447555][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.462605][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.479132][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.501037][ T5142] usb 4-1: config 0 descriptor?? [ 751.509918][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.540181][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.548395][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.561117][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.568854][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.579154][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.591092][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.603777][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.613458][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.621057][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.629445][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.640642][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.649527][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.667216][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.675992][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.685258][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.693779][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.701375][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.710485][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.718448][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.726899][ T8] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 751.760284][ T8] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 751.778358][ T5142] (null): keene_cmd_main failed (-71) [ 751.804101][T18383] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 751.835702][ T5142] video4linux radio32: keene_cmd_main failed (-71) [ 751.865270][ T5142] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 751.887589][ T5142] usb 4-1: USB disconnect, device number 99 [ 751.896416][T18976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3592'. [ 751.918735][T18976] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3592'. [ 752.003402][T18383] usb 3-1: Using ep0 maxpacket: 8 [ 752.014743][T18383] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 752.048128][T18383] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 752.067291][T18383] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 752.090767][T18383] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 752.125026][ T29] audit: type=1326 audit(1720402864.197:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18987 comm="syz.0.3595" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d579 code=0x0 [ 752.160565][T18383] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 752.181351][T18383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.239812][T18989] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3596'. [ 752.261049][T18989] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3596'. [ 752.429507][T18383] usb 3-1: GET_CAPABILITIES returned 0 [ 752.464056][T18383] usbtmc 3-1:16.0: can't read capabilities [ 752.494839][T18373] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 752.747740][T18373] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 752.824774][T18373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.845682][T18373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.880136][T18373] usb 1-1: Product: syz [ 752.890244][T18373] usb 1-1: Manufacturer: syz [ 752.903817][T18373] usb 1-1: SerialNumber: syz [ 753.092891][ T5142] usb 3-1: USB disconnect, device number 90 [ 753.191473][T19008] FAULT_INJECTION: forcing a failure. [ 753.191473][T19008] name failslab, interval 1, probability 0, space 0, times 0 [ 753.240544][T19008] CPU: 1 PID: 19008 Comm: syz.3.3601 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 753.250792][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 753.260851][T19008] Call Trace: [ 753.264139][T19008] [ 753.267093][T19008] dump_stack_lvl+0x241/0x360 [ 753.271803][T19008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.277036][T19008] ? __pfx__printk+0x10/0x10 [ 753.281659][T19008] ? __pfx___might_resched+0x10/0x10 [ 753.287069][T19008] should_fail_ex+0x3b0/0x4e0 [ 753.291776][T19008] ? ptlock_alloc+0x20/0x70 [ 753.296310][T19008] should_failslab+0x9/0x20 [ 753.299080][T19013] netlink: 'syz.4.3598': attribute type 10 has an invalid length. [ 753.300845][T19008] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 753.314094][T19008] ptlock_alloc+0x20/0x70 [ 753.318451][T19008] pte_alloc_one+0xcd/0x5d0 [ 753.323009][T19008] ? __pfx_pte_alloc_one+0x10/0x10 [ 753.328149][T19008] ? down_read+0x82b/0xa40 [ 753.332605][T19008] ? lock_vma_under_rcu+0x18a/0x6e0 [ 753.338013][T19008] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 753.343682][T19008] __pte_alloc+0x79/0x3a0 [ 753.348039][T19008] ? __lock_acquire+0x1346/0x1fd0 [ 753.353118][T19008] ? __pfx___pte_alloc+0x10/0x10 [ 753.358082][T19008] ? uffd_lock_vma+0x91/0x2e0 [ 753.361336][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3598'. [ 753.362767][T19008] mfill_atomic_zeropage+0xcff/0x1200 [ 753.362815][T19008] ? __pfx_mfill_atomic_zeropage+0x10/0x10 [ 753.382904][T19008] ? __pfx_lock_release+0x10/0x10 [ 753.387959][T19008] ? is_bpf_text_address+0x285/0x2a0 [ 753.393275][T19008] ? is_bpf_text_address+0x26/0x2a0 [ 753.398497][T19008] ? __might_fault+0xc6/0x120 [ 753.403209][T19008] userfaultfd_ioctl+0x3939/0x7160 [ 753.408362][T19008] ? stack_trace_save+0x118/0x1d0 [ 753.413415][T19008] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 753.418912][T19008] ? stack_depot_save_flags+0x29/0x830 [ 753.421903][T19013] hsr0: entered promiscuous mode [ 753.424382][T19008] ? kasan_save_track+0x51/0x80 [ 753.424408][T19008] ? kasan_save_track+0x3f/0x80 [ 753.424425][T19008] ? kasan_save_free_info+0x40/0x50 [ 753.424459][T19008] ? poison_slab_object+0xe0/0x150 [ 753.424478][T19008] ? __kasan_slab_free+0x37/0x60 [ 753.424496][T19008] ? kfree+0x149/0x360 [ 753.424518][T19008] ? tomoyo_path_number_perm+0x68d/0x880 [ 753.424540][T19008] ? security_file_ioctl_compat+0x75/0xb0 [ 753.424563][T19008] ? __se_compat_sys_ioctl+0xd6/0xca0 [ 753.424590][T19008] ? __do_fast_syscall_32+0xb4/0x120 [ 753.424615][T19008] ? do_fast_syscall_32+0x34/0x80 [ 753.424638][T19008] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.424664][T19008] ? do_vfs_ioctl+0xf0e/0x2e50 [ 753.424692][T19008] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 753.424734][T19008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 753.424756][T19008] ? tomoyo_path_number_perm+0x208/0x880 [ 753.424781][T19008] ? __pfx_lock_release+0x10/0x10 [ 753.424809][T19008] ? kfree+0x149/0x360 [ 753.449064][T19013] bridge0: port 3(hsr0) entered blocking state [ 753.449691][T19008] ? tomoyo_path_number_perm+0x71a/0x880 [ 753.467762][T19013] bridge0: port 3(hsr0) entered disabled state [ 753.470014][T19008] ? __lock_acquire+0x1346/0x1fd0 [ 753.470048][T19008] ? tomoyo_path_number_perm+0x208/0x880 [ 753.491752][T19013] hsr0: entered allmulticast mode [ 753.492163][T19008] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 753.521146][T19013] hsr_slave_0: entered allmulticast mode [ 753.522983][T19008] ? __fget_files+0x29/0x470 [ 753.523015][T19008] ? __fget_files+0x3f6/0x470 [ 753.523043][T19008] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 753.523064][T19008] ? security_file_ioctl_compat+0x87/0xb0 [ 753.523091][T19008] __se_compat_sys_ioctl+0x51c/0xca0 [ 753.523116][T19008] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 753.532401][T19013] hsr_slave_1: entered allmulticast mode [ 753.534864][T19008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 753.534898][T19008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 753.534925][T19008] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 753.534951][T19008] ? lockdep_hardirqs_on+0x99/0x150 [ 753.534975][T19008] __do_fast_syscall_32+0xb4/0x120 [ 753.535000][T19008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.535079][T19008] ? lockdep_hardirqs_on+0x99/0x150 [ 753.535116][T19008] do_fast_syscall_32+0x34/0x80 [ 753.535142][T19008] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 753.535163][T19008] RIP: 0023:0xf744c579 [ 753.535181][T19008] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 753.535198][T19008] RSP: 002b:00000000f5d4457c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 753.535220][T19008] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa04 [ 753.535233][T19008] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.561656][T19013] bridge0: port 3(hsr0) entered blocking state [ 753.563003][T19008] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 753.563021][T19008] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 753.563034][T19008] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 753.563061][T19008] [ 753.740145][T19013] bridge0: port 3(hsr0) entered forwarding state [ 753.853494][ T5142] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 753.997396][T19009] syz.1.3600 (19009): drop_caches: 1 [ 754.053168][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 754.068540][ T5142] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 754.089155][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 754.121902][ T5142] usb 5-1: Product: syz [ 754.131688][ T5142] usb 5-1: Manufacturer: syz [ 754.139703][ T5142] usb 5-1: SerialNumber: syz [ 754.167445][ T5142] usb 5-1: config 0 descriptor?? [ 754.707364][T19035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3607'. [ 754.717838][T19035] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3607'. [ 754.759823][ T5162] usb 5-1: USB disconnect, device number 114 [ 754.773049][ T8] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 754.850233][T19040] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3608'. [ 754.860518][T19040] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 754.984015][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 755.012135][ T8] usb 4-1: New USB device found, idVendor=199e, idProduct=8102, bcdDevice=33.4f [ 755.037040][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.050418][ T8] usb 4-1: Product: syz [ 755.058703][ T8] usb 4-1: Manufacturer: syz [ 755.064877][ T8] usb 4-1: SerialNumber: syz [ 755.107716][ T8] usb 4-1: config 0 descriptor?? [ 755.217601][T18373] cdc_ncm 1-1:1.0: bind() failure [ 755.241943][T18373] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 755.254586][T18373] cdc_ncm 1-1:1.1: bind() failure [ 755.280064][T18373] usb 1-1: USB disconnect, device number 113 [ 755.556682][T19053] syz.2.3614 (19053): drop_caches: 1 [ 755.644886][T19054] syz.1.3613 (19054): drop_caches: 1 [ 755.743116][T18373] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 755.754754][T19053] syz.2.3614 (19053): drop_caches: 1 [ 755.853958][T19054] syz.1.3613 (19054): drop_caches: 1 [ 755.991823][T12894] usb 4-1: USB disconnect, device number 100 [ 756.051598][T18373] usb 1-1: Using ep0 maxpacket: 8 [ 756.058920][ T29] audit: type=1326 audit(1720402868.127:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19063 comm="syz.4.3616" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7469579 code=0x0 [ 756.104470][T18373] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 756.118738][T19072] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3619'. [ 756.124777][T18373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 756.137918][T19072] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3619'. [ 756.155151][T18373] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 756.174018][T18373] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 756.219897][T18373] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 756.232162][T19074] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 756.255012][T18373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.472246][T18373] usb 1-1: GET_CAPABILITIES returned 0 [ 756.478496][T18373] usbtmc 1-1:16.0: can't read capabilities [ 756.526745][T19082] syz.1.3622 (19082): drop_caches: 1 [ 756.749320][ T29] audit: type=1326 audit(1720402868.817:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19084 comm="syz.3.3623" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744c579 code=0x0 [ 756.821182][T19082] syz.1.3622 (19082): drop_caches: 1 [ 757.093629][ T8] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 757.139320][T18373] usb 1-1: USB disconnect, device number 114 [ 757.286327][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 757.318338][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.328924][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.370708][ T8] usb 4-1: Product: syz [ 757.378685][ T8] usb 4-1: Manufacturer: syz [ 757.391346][ T8] usb 4-1: SerialNumber: syz [ 757.520423][T19107] netlink: 'syz.2.3625': attribute type 10 has an invalid length. [ 757.567645][T19102] syz.4.3628 (19102): drop_caches: 1 [ 757.573362][T19107] __nla_validate_parse: 1 callbacks suppressed [ 757.573400][T19107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3625'. [ 757.699891][T19107] hsr0: entered promiscuous mode [ 757.707134][T19107] bridge0: port 3(hsr0) entered blocking state [ 757.723891][T19107] bridge0: port 3(hsr0) entered disabled state [ 757.752285][T19107] hsr0: entered allmulticast mode [ 757.796395][T19102] syz.4.3628 (19102): drop_caches: 1 [ 757.828409][T19107] hsr_slave_0: entered allmulticast mode [ 757.865250][T19107] hsr_slave_1: entered allmulticast mode [ 757.902504][T19107] bridge0: port 3(hsr0) entered blocking state [ 757.908988][T19107] bridge0: port 3(hsr0) entered forwarding state [ 758.056272][T19118] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3631'. [ 758.093088][T12894] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 758.110022][T19118] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3631'. [ 758.293280][T12894] usb 3-1: Using ep0 maxpacket: 32 [ 758.311453][T12894] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 758.321828][T12894] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 758.353187][T12894] usb 3-1: Product: syz [ 758.365673][T12894] usb 3-1: Manufacturer: syz [ 758.376912][T12894] usb 3-1: SerialNumber: syz [ 758.403047][T12894] usb 3-1: config 0 descriptor?? [ 758.680097][T19145] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3639'. [ 758.701419][T19145] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 758.908692][ T5142] usb 3-1: USB disconnect, device number 91 [ 758.982828][T19146] syz.4.3638 (19146): drop_caches: 1 [ 759.102242][T19146] syz.4.3638 (19146): drop_caches: 1 [ 759.113360][T12894] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 759.188678][T19152] syz.0.3642 (19152): drop_caches: 1 [ 759.313033][T12894] usb 2-1: Using ep0 maxpacket: 8 [ 759.315931][T19152] syz.0.3642 (19152): drop_caches: 1 [ 759.332538][T12894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 759.353105][T12894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 759.369979][T12894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 759.380566][T12894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 759.400776][T12894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 759.410231][T12894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.553883][T17754] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 759.639575][T12894] usb 2-1: GET_CAPABILITIES returned 0 [ 759.653486][T12894] usbtmc 2-1:16.0: can't read capabilities [ 759.656121][T19162] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3645'. [ 759.678129][T19162] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3645'. [ 759.724695][T17754] usb 5-1: device descriptor read/64, error -71 [ 759.816937][ T8] cdc_ncm 4-1:1.0: bind() failure [ 759.830456][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 759.840977][ T8] cdc_ncm 4-1:1.1: bind() failure [ 759.850850][ T8] usb 4-1: USB disconnect, device number 101 [ 760.023387][T17754] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 760.178959][ T8] usb 2-1: USB disconnect, device number 91 [ 760.193186][T17754] usb 5-1: device descriptor read/64, error -71 [ 760.323241][T17754] usb usb5-port1: attempt power cycle [ 760.437627][T19188] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3656'. [ 760.466998][T19188] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3656'. [ 760.717479][T19194] syz.2.3657 (19194): drop_caches: 1 [ 760.754166][T17754] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 760.825398][T17754] usb 5-1: device descriptor read/8, error -71 [ 761.011384][T19194] syz.2.3657 (19194): drop_caches: 1 [ 761.114311][T17754] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 761.125434][T19206] netlink: 'syz.3.3655': attribute type 10 has an invalid length. [ 761.170037][T19206] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3655'. [ 761.180270][T19206] hsr0: entered promiscuous mode [ 761.183160][T17754] usb 5-1: device descriptor read/8, error -71 [ 761.186390][T19206] bridge0: port 3(hsr0) entered blocking state [ 761.210552][T19206] bridge0: port 3(hsr0) entered disabled state [ 761.218876][T19206] hsr0: entered allmulticast mode [ 761.227588][T19206] hsr_slave_0: entered allmulticast mode [ 761.250595][T19206] hsr_slave_1: entered allmulticast mode [ 761.281527][T19206] bridge0: port 3(hsr0) entered blocking state [ 761.287928][T19206] bridge0: port 3(hsr0) entered forwarding state [ 761.324505][T17754] usb usb5-port1: unable to enumerate USB device [ 761.435032][ T5138] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 761.513344][T12894] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 761.643007][ T5138] usb 2-1: Using ep0 maxpacket: 32 [ 761.684935][ T5138] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 761.696009][T12894] usb 4-1: Using ep0 maxpacket: 32 [ 761.722332][ T5138] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 761.732662][T12894] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 761.742378][T12894] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 761.751551][ T5138] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.760093][T12894] usb 4-1: Product: syz [ 761.764577][ T5138] usb 2-1: Product: syz [ 761.768725][ T5138] usb 2-1: Manufacturer: syz [ 761.773702][T12894] usb 4-1: Manufacturer: syz [ 761.778992][T12894] usb 4-1: SerialNumber: syz [ 761.784306][ T5138] usb 2-1: SerialNumber: syz [ 761.796193][T19223] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3668'. [ 761.807595][T12894] usb 4-1: config 0 descriptor?? [ 761.813824][ T5138] usb 2-1: config 0 descriptor?? [ 762.054730][T17754] usb 2-1: USB disconnect, device number 92 [ 762.295387][T19230] syz.0.3670 (19230): drop_caches: 1 [ 762.331459][T19233] netlink: 'syz.2.3667': attribute type 10 has an invalid length. [ 762.332492][ T5142] usb 4-1: USB disconnect, device number 102 [ 762.415089][T19230] syz.0.3670 (19230): drop_caches: 1 [ 762.588927][T19238] __nla_validate_parse: 2 callbacks suppressed [ 762.588944][T19238] netlink: 4093 bytes leftover after parsing attributes in process `syz.0.3672'. [ 762.633272][T17754] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 762.690256][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 762.719953][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 762.733039][ T5138] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 762.743291][T19242] geneve2: entered promiscuous mode [ 762.803283][T17754] usb 3-1: device descriptor read/64, error -71 [ 762.926449][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 762.933129][ T5138] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 762.947437][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 762.967423][ T5138] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 762.982384][ T5138] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.002031][ T5138] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 763.018923][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.033209][ T5142] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 763.075644][T17754] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 763.233935][T17754] usb 3-1: device descriptor read/64, error -71 [ 763.235215][ T5138] usb 5-1: GET_CAPABILITIES returned 0 [ 763.246366][ T5138] usbtmc 5-1:16.0: can't read capabilities [ 763.255447][ T5142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 763.267573][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.275927][ T5142] usb 1-1: Product: syz [ 763.280254][ T5142] usb 1-1: Manufacturer: syz [ 763.285023][ T5142] usb 1-1: SerialNumber: syz [ 763.296175][ T5142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 763.335239][ T5138] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 763.353570][T17754] usb usb3-port1: attempt power cycle [ 763.606088][ T5162] usb 1-1: USB disconnect, device number 115 [ 763.648381][ T5142] usb 5-1: USB disconnect, device number 119 [ 763.763610][T17754] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 763.803671][T17754] usb 3-1: device descriptor read/8, error -71 [ 763.843221][T19261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3680'. [ 763.859547][T19261] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3680'. [ 763.938084][T19264] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3681'. [ 764.083027][T17754] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 764.125689][T17754] usb 3-1: device descriptor read/8, error -71 [ 764.254016][T17754] usb usb3-port1: unable to enumerate USB device [ 764.383134][ T5138] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 764.407954][ T5138] ath9k_htc: Failed to initialize the device [ 764.436791][ T5162] usb 1-1: ath9k_htc: USB layer deinitialized [ 764.693184][T12894] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 764.893317][T12894] usb 5-1: Using ep0 maxpacket: 32 [ 764.900884][T12894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 764.926360][T12894] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=cb.c8 [ 764.940383][T12894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.965620][T12894] usb 5-1: Product: syz [ 764.969830][T12894] usb 5-1: Manufacturer: syz [ 764.985874][T12894] usb 5-1: SerialNumber: syz [ 764.997174][T12894] usb 5-1: config 0 descriptor?? [ 765.249835][T12894] usb 5-1: USB disconnect, device number 120 [ 765.264287][T19292] netlink: 'syz.3.3686': attribute type 10 has an invalid length. [ 765.373013][T19292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3686'. [ 765.600450][T19294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3691'. [ 765.626720][ T5142] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 765.646684][T19294] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3691'. [ 765.686348][T19296] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3692'. [ 765.833098][ T5142] usb 4-1: Using ep0 maxpacket: 32 [ 765.852533][ T5142] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 765.879553][ T5142] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 765.929697][ T5142] usb 4-1: Product: syz [ 765.933115][ T29] audit: type=1326 audit(1720402877.997:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.1.3695" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746a579 code=0x0 [ 765.970965][ T5142] usb 4-1: Manufacturer: syz [ 766.003597][ T5142] usb 4-1: SerialNumber: syz [ 766.044528][ T5142] usb 4-1: config 0 descriptor?? [ 766.263161][T12894] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 766.323126][ T5162] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 766.473361][T12894] usb 1-1: Using ep0 maxpacket: 8 [ 766.509317][T12894] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 766.543065][T12894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 766.548811][ T5162] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 766.573578][T12894] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 766.596441][ T5162] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 766.603446][T12894] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.613041][ T5162] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.657097][T12894] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 766.683036][ T5162] usb 2-1: Product: syz [ 766.687257][ T5162] usb 2-1: Manufacturer: syz [ 766.710328][ T5162] usb 2-1: SerialNumber: syz [ 766.728724][T12894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.860133][T17754] usb 4-1: USB disconnect, device number 103 [ 766.995416][T12894] usb 1-1: GET_CAPABILITIES returned 0 [ 767.021061][T12894] usbtmc 1-1:16.0: can't read capabilities [ 767.672399][T19335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3704'. [ 767.746688][T19337] netlink: 'syz.4.3699': attribute type 10 has an invalid length. [ 767.780667][T19337] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3699'. [ 767.932643][T19341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3705'. [ 767.965460][T19341] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3705'. [ 768.058926][ T5142] usb 1-1: USB disconnect, device number 116 [ 768.200095][T18385] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 768.232697][T19346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3706'. [ 768.288443][T19346] bond1: entered promiscuous mode [ 768.399281][T18385] usb 5-1: device descriptor read/64, error -71 [ 768.431641][T19346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 768.463924][T19346] bond2: entered promiscuous mode [ 768.469764][T19346] bond1: (slave bond2): Enslaving as an active interface with an up link [ 768.489402][T19349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3706'. [ 768.519652][T19349] bond1 (unregistering): (slave bond2): Releasing backup interface [ 768.555149][T19349] bond2: left promiscuous mode [ 768.583643][T19349] bond1 (unregistering): Released all slaves [ 768.693227][T18385] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 768.701182][T17754] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 768.886459][T18385] usb 5-1: device descriptor read/64, error -71 [ 768.935026][T17754] usb 3-1: config 0 has an invalid interface number: 216 but max is 0 [ 768.970747][T17754] usb 3-1: config 0 has no interface number 0 [ 769.000746][T17754] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.028050][T18385] usb usb5-port1: attempt power cycle [ 769.042760][T17754] usb 3-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 769.069808][ T5162] cdc_ncm 2-1:1.0: bind() failure [ 769.085757][T17754] usb 3-1: New USB device found, idVendor=0499, idProduct=1002, bcdDevice=df.d7 [ 769.099682][ T5162] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 769.109278][T17754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.121625][ T5162] cdc_ncm 2-1:1.1: bind() failure [ 769.140592][T17754] usb 3-1: Product: syz [ 769.157862][ T5162] usb 2-1: USB disconnect, device number 93 [ 769.170995][T17754] usb 3-1: Manufacturer: syz [ 769.186071][T17754] usb 3-1: SerialNumber: syz [ 769.216007][T17754] usb 3-1: config 0 descriptor?? [ 769.230498][T17754] usb 3-1: Interface #216 referenced by multiple IADs [ 769.358021][T17754] snd-usb-audio 3-1:0.216: probe with driver snd-usb-audio failed with error -2 [ 769.463857][T17754] usb 3-1: USB disconnect, device number 96 [ 769.473152][T18385] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 769.496655][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.216/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 769.743177][T18385] usb 5-1: device not accepting address 123, error -71 [ 769.799770][T19381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3717'. [ 769.829408][T19381] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3717'. [ 769.877236][T19380] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3716'. [ 770.068340][ T29] audit: type=1326 audit(1720402882.137:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19385 comm="syz.4.3719" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7469579 code=0x0 [ 770.157113][ T29] audit: type=1326 audit(1720402882.227:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19388 comm="syz.2.3722" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7435579 code=0x0 [ 770.402293][T19398] netlink: 'syz.3.3714': attribute type 10 has an invalid length. [ 770.411565][T19398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3714'. [ 770.421430][ T8] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 770.433736][T18385] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 770.476377][T18385] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 770.500742][T18385] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.510161][T17754] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 770.517819][T18385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.526242][T18385] usb 5-1: Product: syz [ 770.530597][T18385] usb 5-1: Manufacturer: syz [ 770.538160][T18385] usb 5-1: SerialNumber: syz [ 770.613024][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 770.620191][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.631604][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 770.641466][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 770.654811][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.667920][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.681376][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.713233][T18373] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 770.729084][T17754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 770.742621][T17754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.751986][T17754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.763411][T17754] usb 3-1: Product: syz [ 770.767638][T17754] usb 3-1: Manufacturer: syz [ 770.772275][T17754] usb 3-1: SerialNumber: syz [ 770.900059][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 770.903051][T18373] usb 4-1: Using ep0 maxpacket: 32 [ 770.905707][ T8] usbtmc 1-1:16.0: can't read capabilities [ 770.917921][T18373] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 770.927844][T18373] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 770.937082][T18373] usb 4-1: Product: syz [ 770.941871][T18373] usb 4-1: Manufacturer: syz [ 770.959311][T18373] usb 4-1: SerialNumber: syz [ 770.978104][T18373] usb 4-1: config 0 descriptor?? [ 771.569305][ T5142] usb 4-1: USB disconnect, device number 104 [ 771.620458][T12894] usb 1-1: USB disconnect, device number 117 [ 771.985421][T19414] netlink: 'syz.1.3725': attribute type 10 has an invalid length. [ 771.993854][T19414] hsr0: entered promiscuous mode [ 772.000692][T19414] bridge0: port 3(hsr0) entered blocking state [ 772.007177][T19414] bridge0: port 3(hsr0) entered disabled state [ 772.013825][T19414] hsr0: entered allmulticast mode [ 772.020692][T19414] hsr_slave_0: entered allmulticast mode [ 772.027136][T19414] hsr_slave_1: entered allmulticast mode [ 772.035777][T19414] bridge0: port 3(hsr0) entered blocking state [ 772.042094][T19414] bridge0: port 3(hsr0) entered forwarding state [ 772.333042][ T5142] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 772.523077][ T5142] usb 2-1: device descriptor read/64, error -71 [ 772.772370][T19425] __nla_validate_parse: 1 callbacks suppressed [ 772.772385][T19425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3729'. [ 772.794337][T19425] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3729'. [ 772.807452][ T5142] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 772.963651][ T5142] usb 2-1: device descriptor read/64, error -71 [ 773.066745][T18385] cdc_ncm 5-1:1.0: bind() failure [ 773.095379][ T5142] usb usb2-port1: attempt power cycle [ 773.103491][T18385] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 773.110351][T18385] cdc_ncm 5-1:1.1: bind() failure [ 773.142140][T18385] usb 5-1: USB disconnect, device number 124 [ 773.241735][ T29] audit: type=1326 audit(1720402885.307:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19432 comm="syz.0.3732" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 773.352159][T17754] cdc_ncm 3-1:1.0: bind() failure [ 773.377798][T17754] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 773.398670][T17754] cdc_ncm 3-1:1.1: bind() failure [ 773.430503][T17754] usb 3-1: USB disconnect, device number 97 [ 773.573143][ T5142] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 773.625225][ T5142] usb 2-1: device descriptor read/8, error -71 [ 773.693075][T18373] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 773.883146][T18373] usb 4-1: Using ep0 maxpacket: 8 [ 773.891530][T18373] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.911828][T18373] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.930347][T18373] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.932982][ T5142] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 773.940564][T18373] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.989816][T18373] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 774.001877][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 774.012305][T18373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.013242][ T5142] usb 2-1: device descriptor read/8, error -71 [ 774.021558][T19456] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3739'. [ 774.041777][T19456] gretap0: entered promiscuous mode [ 774.074372][T19457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3740'. [ 774.100714][T19457] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3740'. [ 774.110731][T19456] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3739'. [ 774.119825][T19456] 0ªX¹¦D: renamed from gretap0 [ 774.140046][T19456] 0ªX¹¦D: left promiscuous mode [ 774.151387][T19456] 0ªX¹¦D: entered allmulticast mode [ 774.170367][T19456] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 774.195840][ T5142] usb usb2-port1: unable to enumerate USB device [ 774.254869][T18373] usb 4-1: GET_CAPABILITIES returned 0 [ 774.261012][T18373] usbtmc 4-1:16.0: can't read capabilities [ 774.288790][T19462] netlink: 'syz.4.3736': attribute type 10 has an invalid length. [ 774.309519][T19462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3736'. [ 774.599473][ T29] audit: type=1326 audit(1720402886.667:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19469 comm="syz.0.3744" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d579 code=0x0 [ 774.703107][T18373] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 774.712758][T19474] kAFS: unparsable volume name [ 774.727186][T19474] netlink: 'syz.1.3745': attribute type 10 has an invalid length. [ 774.767744][T19474] team0: Port device netdevsim0 added [ 774.817207][ T8] usb 4-1: USB disconnect, device number 105 [ 774.886571][T18373] usb 5-1: Using ep0 maxpacket: 32 [ 774.906626][T18373] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 774.916126][T18373] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 774.924475][T18373] usb 5-1: Product: syz [ 774.928702][T18373] usb 5-1: Manufacturer: syz [ 774.933764][T18385] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 774.945025][T18373] usb 5-1: SerialNumber: syz [ 774.956504][T18373] usb 5-1: config 0 descriptor?? [ 775.012221][ T29] audit: type=1326 audit(1720402887.077:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.1.3748" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746a579 code=0x0 [ 775.136155][T18385] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 775.151009][T18385] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.161192][T18385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.181850][T18385] usb 1-1: Product: syz [ 775.187126][T18385] usb 1-1: Manufacturer: syz [ 775.200080][T18385] usb 1-1: SerialNumber: syz [ 775.333049][T18373] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 775.353238][T17754] usb 5-1: USB disconnect, device number 125 [ 775.471358][T19490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'. [ 775.534160][T18373] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 775.549584][T18373] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 775.559877][T18373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.571270][T18373] usb 2-1: Product: syz [ 775.580448][T18373] usb 2-1: Manufacturer: syz [ 775.605965][T18373] usb 2-1: SerialNumber: syz [ 775.656536][T19493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3751'. [ 775.819314][T19500] FAULT_INJECTION: forcing a failure. [ 775.819314][T19500] name failslab, interval 1, probability 0, space 0, times 0 [ 775.845014][T19500] CPU: 0 PID: 19500 Comm: syz.2.3754 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 775.855221][T19500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 775.865304][T19500] Call Trace: [ 775.868606][T19500] [ 775.871571][T19500] dump_stack_lvl+0x241/0x360 [ 775.876287][T19500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 775.881513][T19500] ? __pfx__printk+0x10/0x10 [ 775.886143][T19500] should_fail_ex+0x3b0/0x4e0 [ 775.890851][T19500] ? ___neigh_create+0x691/0x2470 [ 775.895905][T19500] should_failslab+0x9/0x20 [ 775.900475][T19500] __kmalloc_noprof+0xd8/0x400 [ 775.905270][T19500] ___neigh_create+0x691/0x2470 [ 775.910153][T19500] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 775.915998][T19500] ip6_finish_output2+0x1629/0x1670 [ 775.921227][T19500] ? ip6_finish_output2+0x712/0x1670 [ 775.926534][T19500] ? __ip6_local_out+0x7c1/0x800 [ 775.931497][T19500] ? __pfx_ip6_finish_output2+0x10/0x10 [ 775.937072][T19500] ? ip6_mtu+0x81/0x3f0 [ 775.941252][T19500] ip6_finish_output+0x41e/0x810 [ 775.946222][T19500] ip6_send_skb+0x112/0x230 [ 775.950746][T19500] udp_v6_send_skb+0xcd5/0x1900 [ 775.955640][T19500] udpv6_sendmsg+0x23b3/0x3270 [ 775.960426][T19500] ? release_sock+0x30/0x1f0 [ 775.965048][T19500] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 775.970617][T19500] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 775.975763][T19500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 775.982127][T19500] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 775.987870][T19500] ? inet_send_prepare+0x1b7/0x260 [ 775.993000][T19500] ? do_raw_spin_unlock+0x13c/0x8b0 [ 775.998238][T19500] ? inet_send_prepare+0x1b7/0x260 [ 776.003392][T19500] __sock_sendmsg+0xef/0x270 [ 776.008013][T19500] ____sys_sendmsg+0x525/0x7d0 [ 776.012812][T19500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 776.018147][T19500] __sys_sendmmsg+0x4af/0x740 [ 776.022861][T19500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 776.028082][T19500] ? __pfx_lock_acquire+0x10/0x10 [ 776.033127][T19500] ? get_pid_task+0x23/0x1f0 [ 776.037738][T19500] ? __pfx_lock_release+0x10/0x10 [ 776.042777][T19500] ? kstrtouint_from_user+0x128/0x190 [ 776.048206][T19500] ? __pfx_lock_release+0x10/0x10 [ 776.053261][T19500] ? __mutex_unlock_slowpath+0x21d/0x750 [ 776.058923][T19500] ? __fget_files+0x3f6/0x470 [ 776.063638][T19500] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 776.069641][T19500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 776.076000][T19500] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 776.081574][T19500] __do_fast_syscall_32+0xb4/0x120 [ 776.086733][T19500] ? exc_page_fault+0x590/0x8c0 [ 776.091614][T19500] do_fast_syscall_32+0x34/0x80 [ 776.096493][T19500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 776.102843][T19500] RIP: 0023:0xf7435579 [ 776.106932][T19500] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 776.126658][T19500] RSP: 002b:00000000f5d4e57c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 776.135099][T19500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020002a80 [ 776.143091][T19500] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 776.151080][T19500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.159070][T19500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 776.167063][T19500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.175069][T19500] [ 776.325639][ T5094] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 776.337894][ T5094] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 776.351359][ T5094] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 776.368669][ T5094] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 776.377997][ T5094] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 776.388434][ T5094] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 776.709993][ T6418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.860335][ T6418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.039064][ T6418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.139938][ T6418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.170505][T19508] chnl_net:caif_netlink_parms(): no params data found [ 777.223154][T17754] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 777.370472][T19508] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.397939][T19508] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.414839][T19508] bridge_slave_0: entered allmulticast mode [ 777.423404][T17754] usb 5-1: Using ep0 maxpacket: 8 [ 777.436967][T19508] bridge_slave_0: entered promiscuous mode [ 777.439496][T17754] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.455216][T17754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.465794][T17754] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.476174][T17754] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.494438][T17754] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 777.504035][T17754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.531793][T19508] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.558854][T19508] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.567695][T19508] bridge_slave_1: entered allmulticast mode [ 777.580333][T19508] bridge_slave_1: entered promiscuous mode [ 777.642454][ T6418] hsr0: left allmulticast mode [ 777.655591][ T6418] hsr_slave_0: left allmulticast mode [ 777.674805][ T6418] hsr_slave_1: left allmulticast mode [ 777.678250][T18385] cdc_ncm 1-1:1.0: bind() failure [ 777.690362][ T6418] bridge0: port 3(hsr0) entered disabled state [ 777.720914][T17754] usb 5-1: GET_CAPABILITIES returned 0 [ 777.728087][T18385] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 777.735184][T17754] usbtmc 5-1:16.0: can't read capabilities [ 777.741260][T18385] cdc_ncm 1-1:1.1: bind() failure [ 777.748006][ T6418] bridge_slave_1: left allmulticast mode [ 777.769551][ T6418] bridge_slave_1: left promiscuous mode [ 777.781524][T18385] usb 1-1: USB disconnect, device number 118 [ 777.818149][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.870194][ T6418] bridge_slave_0: left allmulticast mode [ 777.881284][ T6418] bridge_slave_0: left promiscuous mode [ 777.891515][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.104964][T18373] cdc_ncm 2-1:1.0: bind() failure [ 778.151838][T18373] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 778.182481][T18373] cdc_ncm 2-1:1.1: bind() failure [ 778.230481][T18373] usb 2-1: USB disconnect, device number 98 [ 778.473351][ T5094] Bluetooth: hci3: command tx timeout [ 778.853398][T19538] syz.0.3764 (19538): drop_caches: 1 [ 779.012202][ T6418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.032543][ T6418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.048245][ T6418] bond0 (unregistering): Released all slaves [ 779.170254][ T6418] bond2 (unregistering): Released all slaves [ 779.195742][T19536] __nla_validate_parse: 1 callbacks suppressed [ 779.195762][T19536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3763'. [ 779.217081][T19536] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3763'. [ 779.242522][T19550] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3766'. [ 779.260456][ T8] usb 5-1: USB disconnect, device number 126 [ 779.325841][T19508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.348414][T19508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.512683][T19508] team0: Port device team_slave_0 added [ 779.547310][T19508] team0: Port device team_slave_1 added [ 779.698447][ T29] audit: type=1326 audit(1720402891.767:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19569 comm="syz.1.3773" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf746a579 code=0x0 [ 779.869235][ T6418] hsr_slave_0: left promiscuous mode [ 779.887953][ T6418] hsr_slave_1: left promiscuous mode [ 779.916465][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.930678][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.944931][ T6418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.955541][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.029866][ T6418] veth1_macvtap: left promiscuous mode [ 780.043105][ T6418] veth0_macvtap: left promiscuous mode [ 780.043130][ T8] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 780.060177][ T6418] veth1_vlan: left promiscuous mode [ 780.071521][ T6418] veth0_vlan: left promiscuous mode [ 780.256496][ T8] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 780.288363][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 780.309203][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.330040][ T8] usb 2-1: Product: syz [ 780.341523][ T8] usb 2-1: Manufacturer: syz [ 780.352299][ T8] usb 2-1: SerialNumber: syz [ 780.553383][ T5094] Bluetooth: hci3: command tx timeout [ 781.259015][ T6418] team0 (unregistering): Port device team_slave_1 removed [ 781.303094][ T5142] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 781.321779][ T6418] team0 (unregistering): Port device team_slave_0 removed [ 781.513693][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 781.528065][ T5142] usb 5-1: config index 0 descriptor too short (expected 49, got 27) [ 781.538523][ T5142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.552755][ T5142] usb 5-1: config 0 has no interfaces? [ 781.562742][ T5142] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 781.572226][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 781.580752][ T5142] usb 5-1: Product: syz [ 781.585371][ T5142] usb 5-1: Manufacturer: syz [ 781.590093][ T5142] usb 5-1: SerialNumber: syz [ 781.602615][ T5142] usb 5-1: config 0 descriptor?? [ 781.912336][T19508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.925159][T19508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.954257][T19508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.968683][T19508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.983158][T19508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.022420][T19508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.044536][T19585] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3779'. [ 782.102682][T19602] netlink: 'syz.4.3778': attribute type 10 has an invalid length. [ 782.125681][T19602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3778'. [ 782.199965][ T5142] usb 5-1: USB disconnect, device number 127 [ 782.278390][T19604] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3780'. [ 782.366242][T19508] hsr_slave_0: entered promiscuous mode [ 782.384584][T19508] hsr_slave_1: entered promiscuous mode [ 782.393954][T19508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.419968][T19508] Cannot create hsr debugfs directory [ 782.633235][ T5094] Bluetooth: hci3: command tx timeout [ 782.728609][ T8] cdc_ncm 2-1:1.0: bind() failure [ 782.738209][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 782.750113][ T8] cdc_ncm 2-1:1.1: bind() failure [ 782.792801][ T8] usb 2-1: USB disconnect, device number 99 [ 783.109710][T19632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3790'. [ 783.307741][ T8] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 783.378157][T19648] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3793'. [ 783.514018][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 783.535196][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 783.559688][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 783.603050][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 783.627781][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.650567][T19508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 783.694354][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 783.716793][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.728431][T19508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 783.772120][T19508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 783.837526][T19508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 783.962198][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 783.993051][ T8] usbtmc 2-1:16.0: can't read capabilities [ 784.073770][ T29] audit: type=1326 audit(1720402896.147:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19674 comm="syz.4.3802" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7469579 code=0x0 [ 784.108428][T19508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.182407][T19508] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.228115][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.235344][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.281363][T12894] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.288593][T12894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.381040][T19681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3803'. [ 784.393109][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 784.487756][T19508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.622403][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 784.651363][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.680396][T19508] veth0_vlan: entered promiscuous mode [ 784.687577][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.701694][ T8] usb 5-1: Product: syz [ 784.710656][ T5094] Bluetooth: hci3: command tx timeout [ 784.724601][ T8] usb 5-1: Manufacturer: syz [ 784.734212][ T8] usb 5-1: SerialNumber: syz [ 784.740112][T19508] veth1_vlan: entered promiscuous mode [ 784.789945][T12894] usb 2-1: USB disconnect, device number 100 [ 784.830205][T19698] netlink: 'syz.0.3797': attribute type 10 has an invalid length. [ 784.859443][T19698] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3797'. [ 784.965821][T19508] veth0_macvtap: entered promiscuous mode [ 785.002020][T19508] veth1_macvtap: entered promiscuous mode [ 785.069146][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.096594][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.133065][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.135802][ T5176] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 785.152981][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.172993][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.192137][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.207454][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.233100][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.251535][T19508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.289549][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.310288][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.328278][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.342179][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.353364][ T5176] usb 1-1: Using ep0 maxpacket: 32 [ 785.378790][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.380199][ T5176] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 785.392029][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.414344][ T5176] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 785.435189][ T5176] usb 1-1: Product: syz [ 785.440537][T19508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.442826][ T5176] usb 1-1: Manufacturer: syz [ 785.462092][T19508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.468791][ T5176] usb 1-1: SerialNumber: syz [ 785.495618][ T5176] usb 1-1: config 0 descriptor?? [ 785.502348][T19508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.535655][T19716] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3808'. [ 785.566763][T19508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.599597][T19508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.622993][T19508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.631740][T19508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.657699][ T29] audit: type=1326 audit(1720402897.727:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19725 comm="syz.1.3810" exe="/root/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf746a579 code=0x0 [ 785.937160][T19737] netlink: 4591 bytes leftover after parsing attributes in process `syz.1.3812'. [ 785.989844][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.010640][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.130222][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.169999][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.360636][T19744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3814'. [ 786.393713][T18385] usb 1-1: USB disconnect, device number 119 [ 786.405720][T19744] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3814'. [ 786.454298][T19744] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3814'. [ 786.879878][T19769] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3819'. [ 787.016282][T19774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3820'. [ 787.026081][ T5176] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 787.180094][ T8] cdc_ncm 5-1:1.0: bind() failure [ 787.196628][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 787.223669][ T8] cdc_ncm 5-1:1.1: bind() failure [ 787.253220][ T5176] usb 3-1: Using ep0 maxpacket: 8 [ 787.256994][T19781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3822'. [ 787.260131][ T8] usb 5-1: USB disconnect, device number 2 [ 787.283671][ T5176] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 787.306769][ T5176] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 787.344819][ T5176] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 787.393071][ T5176] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.416748][ T5176] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 787.450189][ T5176] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.688894][ T5176] usb 3-1: GET_CAPABILITIES returned 0 [ 787.701334][ T5176] usbtmc 3-1:16.0: can't read capabilities [ 788.241676][T18385] usb 3-1: USB disconnect, device number 98 [ 788.358956][ T29] audit: type=1326 audit(1720402900.427:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19816 comm="syz.3.3834" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7456579 code=0x0 [ 788.654844][T19828] netlink: 'syz.1.3832': attribute type 10 has an invalid length. [ 788.665308][T19824] syz.0.3836 (19824): drop_caches: 1 [ 788.683189][T18383] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 788.878756][T18383] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 788.894964][T18383] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.905307][T18383] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.922108][T18383] usb 4-1: Product: syz [ 788.927354][T18383] usb 4-1: Manufacturer: syz [ 788.932405][T18383] usb 4-1: SerialNumber: syz [ 788.973295][ T8] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 789.153067][T19846] netlink: 'syz.0.3843': attribute type 3 has an invalid length. [ 789.160935][T19846] netlink: 'syz.0.3843': attribute type 3 has an invalid length. [ 789.169200][T19846] netlink: 'syz.0.3843': attribute type 5 has an invalid length. [ 789.185946][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 789.209268][ T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 789.229888][ T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 789.257586][ T8] usb 2-1: Product: syz [ 789.270948][ T8] usb 2-1: Manufacturer: syz [ 789.279400][ T8] usb 2-1: SerialNumber: syz [ 789.300448][ T8] usb 2-1: config 0 descriptor?? [ 789.337979][ T29] audit: type=1326 audit(1720402901.407:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19853 comm="syz.2.3846" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7435579 code=0x0 [ 789.663764][T17754] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 789.681828][ T8] usb 2-1: USB disconnect, device number 101 [ 789.782106][T19858] trusted_key: encrypted_key: master key parameter is missing [ 789.857850][T17754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 789.871380][T17754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.882022][T17754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.890628][T17754] usb 3-1: Product: syz [ 789.895946][T17754] usb 3-1: Manufacturer: syz [ 789.905623][T17754] usb 3-1: SerialNumber: syz [ 790.173304][T18385] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 790.373415][T18385] usb 5-1: Using ep0 maxpacket: 8 [ 790.391257][T18385] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.413401][T18385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.429463][T18385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 790.441096][T18385] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.459634][T18385] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 790.489877][T18385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.516917][T19867] netlink: 'syz.0.3849': attribute type 10 has an invalid length. [ 790.529757][T19867] __nla_validate_parse: 10 callbacks suppressed [ 790.529778][T19867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3849'. [ 790.716284][T18385] usb 5-1: GET_CAPABILITIES returned 0 [ 790.722119][T18385] usbtmc 5-1:16.0: can't read capabilities [ 790.865213][ T5138] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 790.978832][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'. [ 791.013856][T19874] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 791.064190][ T5138] usb 1-1: Using ep0 maxpacket: 32 [ 791.082544][ T5138] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 791.106413][ T5138] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 791.140049][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 791.161323][ T5138] usb 1-1: Product: syz [ 791.171000][ T5138] usb 1-1: Manufacturer: syz [ 791.180296][ T5138] usb 1-1: SerialNumber: syz [ 791.189689][ T5138] usb 1-1: config 0 descriptor?? [ 791.252015][ T5138] usb 5-1: USB disconnect, device number 3 [ 791.279177][ T29] audit: type=1326 audit(1720402903.347:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.340065][ T29] audit: type=1326 audit(1720402903.377:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.363557][ T29] audit: type=1326 audit(1720402903.377:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.392476][ T29] audit: type=1326 audit(1720402903.377:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.422519][ T29] audit: type=1326 audit(1720402903.377:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.446764][ T29] audit: type=1326 audit(1720402903.377:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.487445][ T29] audit: type=1326 audit(1720402903.377:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.516688][ T29] audit: type=1326 audit(1720402903.377:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.539365][ T29] audit: type=1326 audit(1720402903.377:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.567245][ T29] audit: type=1326 audit(1720402903.377:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19877 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746a579 code=0x7ffc0000 [ 791.579616][T18383] cdc_ncm 4-1:1.0: bind() failure [ 791.606452][T18385] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 791.640104][T18383] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 791.648951][T18383] cdc_ncm 4-1:1.1: bind() failure [ 791.663867][T18383] usb 4-1: USB disconnect, device number 106 [ 791.731617][ T5138] usb 1-1: USB disconnect, device number 120 [ 791.811003][T19882] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3855'. [ 791.820290][T18385] usb 2-1: Using ep0 maxpacket: 8 [ 791.821217][T19882] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3855'. [ 791.843390][T18385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.852808][T19882] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3855'. [ 791.858946][T18385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 791.898806][T18385] usb 2-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 791.922826][T18385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.936474][T19885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3856'. [ 791.938778][T18385] usb 2-1: Product: syz [ 791.953104][T19885] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3856'. [ 791.964438][T18385] usb 2-1: Manufacturer: syz [ 791.978311][T18385] usb 2-1: SerialNumber: syz [ 791.999751][T18385] usb 2-1: config 0 descriptor?? [ 792.258308][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3859'. [ 792.353648][T17754] cdc_ncm 3-1:1.0: bind() failure [ 792.379168][T17754] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 792.404360][T17754] cdc_ncm 3-1:1.1: bind() failure [ 792.423941][T17754] usb 3-1: USB disconnect, device number 99 [ 793.087455][T19921] netlink: 'syz.2.3860': attribute type 10 has an invalid length. [ 793.096881][T19921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3860'. [ 793.283354][ T5138] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 793.291162][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 793.433435][T18385] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 793.493154][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 793.504441][ T5138] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.519620][ T5138] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.530877][ T5138] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 793.541519][ T5138] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.556072][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 793.566154][ T5138] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 793.575410][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.588946][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.599808][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.607915][ T8] usb 5-1: Product: syz [ 793.612131][ T8] usb 5-1: Manufacturer: syz [ 793.613101][T18385] usb 3-1: Using ep0 maxpacket: 32 [ 793.616805][ T8] usb 5-1: SerialNumber: syz [ 793.637213][T18385] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 793.649481][T18385] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 793.660896][T18385] usb 3-1: Product: syz [ 793.663057][ T5176] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 793.671003][T18385] usb 3-1: Manufacturer: syz [ 793.684299][T18385] usb 3-1: SerialNumber: syz [ 793.691098][T18385] usb 3-1: config 0 descriptor?? [ 793.802460][ T5138] usb 1-1: GET_CAPABILITIES returned 0 [ 793.811643][ T5138] usbtmc 1-1:16.0: can't read capabilities [ 793.859143][ T5176] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 793.871993][ T5176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 793.882268][ T5176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.890547][ T5176] usb 4-1: Product: syz [ 793.896246][ T5176] usb 4-1: Manufacturer: syz [ 793.901066][ T5176] usb 4-1: SerialNumber: syz [ 794.062358][T18385] usb 3-1: USB disconnect, device number 100 [ 794.250779][ T5142] usb 2-1: USB disconnect, device number 102 [ 794.265100][T18383] usb 1-1: USB disconnect, device number 121 [ 794.783100][ T5142] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 794.821079][T19937] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 794.983049][ T5142] usb 2-1: Using ep0 maxpacket: 32 [ 794.997434][ T5142] usb 2-1: config 0 has no interfaces? [ 795.006974][ T5142] usb 2-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05 [ 795.016535][ T5142] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.025160][ T5142] usb 2-1: Product: syz [ 795.030314][ T5142] usb 2-1: Manufacturer: syz [ 795.035123][ T5142] usb 2-1: SerialNumber: syz [ 795.066823][ T5142] usb 2-1: config 0 descriptor?? [ 795.208573][T19944] FAULT_INJECTION: forcing a failure. [ 795.208573][T19944] name failslab, interval 1, probability 0, space 0, times 0 [ 795.226570][T19944] CPU: 0 PID: 19944 Comm: syz.0.3875 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 795.236742][T19944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 795.246904][T19944] Call Trace: [ 795.250180][T19944] [ 795.253120][T19944] dump_stack_lvl+0x241/0x360 [ 795.257797][T19944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.263007][T19944] ? __pfx__printk+0x10/0x10 [ 795.267628][T19944] should_fail_ex+0x3b0/0x4e0 [ 795.272323][T19944] ? hci_chan_create+0xc8/0x310 [ 795.277177][T19944] should_failslab+0x9/0x20 [ 795.281676][T19944] kmalloc_trace_noprof+0x6c/0x2c0 [ 795.286788][T19944] hci_chan_create+0xc8/0x310 [ 795.291548][T19944] l2cap_conn_add+0x69/0x8e0 [ 795.296132][T19944] l2cap_chan_connect+0x623/0xeb0 [ 795.301178][T19944] ? __pfx_l2cap_chan_connect+0x10/0x10 [ 795.306752][T19944] ? init_timer_key+0x197/0x310 [ 795.311604][T19944] lowpan_control_write+0x568/0x850 [ 795.316802][T19944] ? __pfx_lowpan_control_write+0x10/0x10 [ 795.322559][T19944] ? debugfs_file_get+0x4cc/0x630 [ 795.327600][T19944] ? rcu_read_lock_any_held+0xb7/0x160 [ 795.333055][T19944] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 795.338966][T19944] full_proxy_write+0x119/0x1d0 [ 795.343847][T19944] ? __pfx_full_proxy_write+0x10/0x10 [ 795.349235][T19944] vfs_write+0x2a2/0xc90 [ 795.353493][T19944] ? __pfx_vfs_write+0x10/0x10 [ 795.358270][T19944] ? __fget_files+0x29/0x470 [ 795.362893][T19944] ? __fget_files+0x3f6/0x470 [ 795.367593][T19944] ksys_write+0x1a0/0x2c0 [ 795.371921][T19944] ? __pfx_ksys_write+0x10/0x10 [ 795.376893][T19944] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 795.383492][T19944] ? lockdep_hardirqs_on+0x99/0x150 [ 795.388790][T19944] __do_fast_syscall_32+0xb4/0x120 [ 795.393898][T19944] ? exc_page_fault+0x590/0x8c0 [ 795.398745][T19944] do_fast_syscall_32+0x34/0x80 [ 795.403603][T19944] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 795.409935][T19944] RIP: 0023:0xf742d579 [ 795.413990][T19944] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 795.433601][T19944] RSP: 002b:00000000f5d4657c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 795.442031][T19944] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 795.449999][T19944] RDX: 000000000000001b RSI: 0000000000000000 RDI: 0000000000000000 [ 795.457994][T19944] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 795.465964][T19944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 795.473935][T19944] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 795.481924][T19944] [ 795.620138][T18383] usb 2-1: USB disconnect, device number 103 [ 795.724247][T19951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 796.045543][ T8] cdc_ncm 5-1:1.0: bind() failure [ 796.076077][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 796.093298][ T8] cdc_ncm 5-1:1.1: bind() failure [ 796.117849][ T8] usb 5-1: USB disconnect, device number 4 [ 796.391009][ T5176] cdc_ncm 4-1:1.0: bind() failure [ 796.420309][ T5176] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 796.436225][ T5176] cdc_ncm 4-1:1.1: bind() failure [ 796.474868][ T5176] usb 4-1: USB disconnect, device number 107 [ 796.617658][T19969] GUP no longer grows the stack in syz.4.3880 (19969): 20004000-20005000 (20001000) [ 796.628123][T19972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3886'. [ 796.653157][T19969] CPU: 1 PID: 19969 Comm: syz.4.3880 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 796.663361][T19969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 796.673429][T19969] Call Trace: [ 796.676705][T19969] [ 796.679646][T19969] dump_stack_lvl+0x241/0x360 [ 796.684323][T19969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.689509][T19969] ? __pfx__printk+0x10/0x10 [ 796.694089][T19969] ? find_vma+0xf9/0x170 [ 796.698337][T19969] __get_user_pages+0x10e3/0x1590 [ 796.703367][T19969] ? get_user_pages_unlocked+0x14f/0x9d0 [ 796.709037][T19969] ? __pfx___get_user_pages+0x10/0x10 [ 796.714418][T19969] ? is_valid_gup_args+0x124/0x200 [ 796.719525][T19969] get_user_pages_unlocked+0x2a8/0x9d0 [ 796.724980][T19969] ? __pfx_get_user_pages_unlocked+0x10/0x10 [ 796.730974][T19969] hva_to_pfn+0x277/0xe70 [ 796.735345][T19969] ? xas_load+0x58d/0x5c0 [ 796.739670][T19969] ? __pfx_hva_to_pfn+0x10/0x10 [ 796.744517][T19969] ? xa_load+0x2dd/0x350 [ 796.748748][T19969] ? xa_load+0x147/0x350 [ 796.752982][T19969] ? __pfx_xa_load+0x10/0x10 [ 796.757566][T19969] ? __gfn_to_pfn_memslot+0x1a4/0x360 [ 796.762941][T19969] kvm_faultin_pfn+0x750/0x1c00 [ 796.767816][T19969] ? __pfx_kvm_faultin_pfn+0x10/0x10 [ 796.773096][T19969] ? rcu_qs+0xf1/0x190 [ 796.777150][T19969] ? __pfx_rcu_qs+0x10/0x10 [ 796.781637][T19969] ? __pfx_fast_page_fault+0x10/0x10 [ 796.787003][T19969] ? __kvm_mmu_topup_memory_cache+0x37e/0x6b0 [ 796.793155][T19969] kvm_tdp_page_fault+0x465/0x580 [ 796.798197][T19969] kvm_mmu_do_page_fault+0x57b/0xbe0 [ 796.803490][T19969] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 796.809384][T19969] kvm_mmu_page_fault+0x29b/0x840 [ 796.814421][T19969] ? __pfx_kvm_mmu_page_fault+0x10/0x10 [ 796.819978][T19969] ? rcu_is_watching+0x15/0xb0 [ 796.824757][T19969] ? handle_ept_violation+0x2c8/0x5e0 [ 796.830133][T19969] ? __pfx_handle_ept_violation+0x10/0x10 [ 796.835845][T19969] vmx_handle_exit+0x11f1/0x1f80 [ 796.840797][T19969] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 796.846783][T19969] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 796.853102][T19969] vcpu_run+0x6ad0/0x87f0 [ 796.857434][T19969] ? vcpu_run+0x5595/0x87f0 [ 796.861967][T19969] ? vmx_vcpu_pi_load+0x13b/0x8c0 [ 796.867036][T19969] ? __pfx_vcpu_run+0x10/0x10 [ 796.871710][T19969] ? __local_bh_enable_ip+0x168/0x200 [ 796.877083][T19969] ? lockdep_hardirqs_on+0x99/0x150 [ 796.882304][T19969] ? __pfx_lock_acquire+0x10/0x10 [ 796.887337][T19969] ? fpu_swap_kvm_fpstate+0x82/0x460 [ 796.892619][T19969] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 796.898326][T19969] ? xfd_validate_state+0x6e/0x150 [ 796.903435][T19969] ? rcu_is_watching+0x15/0xb0 [ 796.908207][T19969] ? rcu_is_watching+0x15/0xb0 [ 796.913053][T19969] kvm_arch_vcpu_ioctl_run+0xa7e/0x1920 [ 796.918593][T19969] ? finish_wait+0xd4/0x1e0 [ 796.923084][T19969] ? synchronize_rcu_expedited+0x6a9/0x830 [ 796.928880][T19969] ? kvm_arch_vcpu_ioctl_run+0x1c9/0x1920 [ 796.934592][T19969] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 796.940661][T19969] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 796.946399][T19969] ? __pfx___might_resched+0x10/0x10 [ 796.951858][T19969] ? __pfx_autoremove_wake_function+0x10/0x10 [ 796.957995][T19969] ? __pfx_lock_acquire+0x10/0x10 [ 796.963014][T19969] ? synchronize_rcu+0x11b/0x360 [ 796.967950][T19969] ? __pfx_synchronize_rcu+0x10/0x10 [ 796.973328][T19969] kvm_vcpu_ioctl+0x7f5/0xd00 [ 796.978022][T19969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 796.984008][T19969] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 796.989309][T19969] kvm_vcpu_compat_ioctl+0x242/0x450 [ 796.994610][T19969] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 797.000425][T19969] ? __fget_files+0x3f6/0x470 [ 797.005110][T19969] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 797.010650][T19969] ? security_file_ioctl_compat+0x87/0xb0 [ 797.016374][T19969] __se_compat_sys_ioctl+0x51c/0xca0 [ 797.021655][T19969] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 797.027457][T19969] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 797.033424][T19969] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 797.039742][T19969] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 797.046320][T19969] ? lockdep_hardirqs_on+0x99/0x150 [ 797.051509][T19969] __do_fast_syscall_32+0xb4/0x120 [ 797.056613][T19969] ? ret_from_fork_asm+0x1a/0x30 [ 797.061564][T19969] ? lockdep_hardirqs_on+0x99/0x150 [ 797.066756][T19969] do_fast_syscall_32+0x34/0x80 [ 797.071596][T19969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 797.077929][T19969] RIP: 0023:0xf7469579 [ 797.081980][T19969] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 797.101573][T19969] RSP: 002b:00000000f5d6157c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 797.109987][T19969] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000ae80 [ 797.117956][T19969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 797.125913][T19969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 797.133874][T19969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 797.141827][T19969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 797.149795][T19969] [ 797.222057][T19976] hsr0: entered promiscuous mode [ 797.440867][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 797.440885][ T29] audit: type=1326 audit(1720402909.507:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.0.3890" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d579 code=0x0 [ 797.484472][T19957] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3880'. [ 797.724169][ T5095] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 797.800026][T19998] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3896'. [ 797.833086][ T58] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 797.891310][ T5095] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 798.067434][ T58] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 798.120270][T20012] random: crng reseeded on system resumption [ 798.137654][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.162639][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.188039][ T58] usb 1-1: Product: syz [ 798.192255][ T58] usb 1-1: Manufacturer: syz [ 798.197449][ T58] usb 1-1: SerialNumber: syz [ 798.556983][T20024] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3903'. [ 798.623251][T18385] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 798.631102][T18383] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 798.645810][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 798.815030][T18385] usb 2-1: Using ep0 maxpacket: 8 [ 798.838970][T18383] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 798.853105][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 798.858457][T18383] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 798.859459][T18385] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 798.867674][ T8] usb 5-1: config 0 has no interfaces? [ 798.888439][T18385] usb 2-1: can't read configurations, error -61 [ 798.893417][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=0928, bcdDevice=26.52 [ 798.894962][T18383] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 798.917545][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.919464][T18383] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.935955][ T8] usb 5-1: Product: syz [ 798.946056][ T8] usb 5-1: Manufacturer: syz [ 798.952192][T20020] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 798.959514][ T8] usb 5-1: SerialNumber: syz [ 798.974341][ T8] usb 5-1: config 0 descriptor?? [ 799.063181][T18385] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 799.114023][T20031] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3906'. [ 799.241314][T18383] usb 3-1: USB disconnect, device number 101 [ 799.254544][T18385] usb 2-1: Using ep0 maxpacket: 8 [ 799.280272][T18385] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 799.288661][T18385] usb 2-1: can't read configurations, error -61 [ 799.304720][T18385] usb usb2-port1: attempt power cycle [ 799.663064][ T8] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 799.723100][T18385] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 799.753803][T18385] usb 2-1: Using ep0 maxpacket: 8 [ 799.761856][T18385] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 799.772339][T18385] usb 2-1: can't read configurations, error -61 [ 799.865310][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 799.876486][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 799.889309][ T8] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=cd.cc [ 799.899103][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.908014][ T8] usb 4-1: Product: syz [ 799.912413][ T8] usb 4-1: Manufacturer: syz [ 799.917448][ T8] usb 4-1: SerialNumber: syz [ 799.924692][ T8] usb 4-1: config 0 descriptor?? [ 799.927275][T18385] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 799.932855][ T8] cyberjack 4-1:0.0: Reiner SCT Cyberjack USB card reader converter detected [ 799.950002][ T8] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 799.958371][ T8] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 799.974991][T18385] usb 2-1: Using ep0 maxpacket: 8 [ 799.985635][T18385] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 799.997846][T18385] usb 2-1: can't read configurations, error -61 [ 800.005077][T18385] usb usb2-port1: unable to enumerate USB device [ 800.421985][T18383] usb 4-1: USB disconnect, device number 108 [ 800.442192][T20045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3911'. [ 800.452280][T18383] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 800.467645][T18383] cyberjack 4-1:0.0: device disconnected [ 800.497578][ T58] cdc_ncm 1-1:1.0: bind() failure [ 800.530994][ T58] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 800.549158][ T58] cdc_ncm 1-1:1.1: bind() failure [ 800.574993][T17754] usb 5-1: USB disconnect, device number 5 [ 800.581192][ T58] usb 1-1: USB disconnect, device number 122 [ 801.047495][T20063] netlink: 'syz.0.3917': attribute type 11 has an invalid length. [ 801.256188][T20066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3918'. [ 801.567414][ T2816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.588077][T20076] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3923'. [ 801.648981][ T2816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.703111][T18383] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 801.713901][ T2816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.743182][ T5094] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 801.751937][ T5094] Bluetooth: hci3: Injecting HCI hardware error event [ 801.774867][ T2816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.886943][T18383] usb 3-1: Using ep0 maxpacket: 8 [ 801.909102][T18383] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 801.925305][T18383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.934176][T18383] usb 3-1: Product: syz [ 801.938484][T18383] usb 3-1: Manufacturer: syz [ 801.939107][ T2816] bridge_slave_1: left allmulticast mode [ 801.949182][T18383] usb 3-1: SerialNumber: syz [ 801.953853][ T2816] bridge_slave_1: left promiscuous mode [ 801.954052][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.971478][T18383] usb 3-1: config 0 descriptor?? [ 801.984775][T18383] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 801.995215][ T2816] bridge_slave_0: left allmulticast mode [ 802.000912][ T2816] bridge_slave_0: left promiscuous mode [ 802.010855][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.370228][T18383] gspca_m5602: Failed to find a sensor [ 802.378249][T18383] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 802.409946][T18383] usb 3-1: USB disconnect, device number 102 [ 802.619870][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.633640][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.646506][ T2816] bond0 (unregistering): Released all slaves [ 803.071766][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.079351][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.088469][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.096026][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.117522][ T2816] veth1_macvtap: left promiscuous mode [ 803.123941][ T2816] veth0_macvtap: left promiscuous mode [ 803.129512][ T2816] veth1_vlan: left promiscuous mode [ 803.136543][ T2816] veth0_vlan: left promiscuous mode [ 803.581371][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 803.630589][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 809.027224][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.034260][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 838.466298][ T5095] Bluetooth: hci3: hardware error 0x00 [ 838.502055][ T5095] [ 838.504423][ T5095] ============================================ [ 838.510576][ T5095] WARNING: possible recursive locking detected [ 838.516732][ T5095] 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 Not tainted [ 838.523849][ T5095] -------------------------------------------- [ 838.530007][ T5095] kworker/u9:5/5095 is trying to acquire lock: [ 838.536164][ T5095] ffff88807af9b948 ((wq_completion)hci3){+.+.}-{0:0}, at: __flush_workqueue+0x1b0/0x1710 [ 838.546034][ T5095] [ 838.546034][ T5095] but task is already holding lock: [ 838.553414][ T5095] ffff88807af9b948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 838.563796][ T5095] [ 838.563796][ T5095] other info that might help us debug this: [ 838.571948][ T5095] Possible unsafe locking scenario: [ 838.571948][ T5095] [ 838.579404][ T5095] CPU0 [ 838.582845][ T5095] ---- [ 838.586123][ T5095] lock((wq_completion)hci3); [ 838.591161][ T5095] lock((wq_completion)hci3); [ 838.595929][ T5095] [ 838.595929][ T5095] *** DEADLOCK *** [ 838.595929][ T5095] [ 838.604057][ T5095] May be due to missing lock nesting notation [ 838.604057][ T5095] [ 838.612360][ T5095] 2 locks held by kworker/u9:5/5095: [ 838.617640][ T5095] #0: ffff88807af9b948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 838.628422][ T5095] #1: ffffc90003b1fd00 ((work_completion)(&hdev->error_reset)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 838.640767][ T5095] [ 838.640767][ T5095] stack backtrace: [ 838.646639][ T5095] CPU: 0 PID: 5095 Comm: kworker/u9:5 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 838.656952][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 838.667079][ T5095] Workqueue: hci3 hci_error_reset [ 838.672107][ T5095] Call Trace: [ 838.675372][ T5095] [ 838.678299][ T5095] dump_stack_lvl+0x241/0x360 [ 838.682979][ T5095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.688183][ T5095] ? print_deadlock_bug+0x479/0x620 [ 838.693375][ T5095] validate_chain+0x15d3/0x5900 [ 838.698224][ T5095] ? __pfx_validate_chain+0x10/0x10 [ 838.703410][ T5095] ? __pfx_validate_chain+0x10/0x10 [ 838.708595][ T5095] ? __pfx_validate_chain+0x10/0x10 [ 838.713785][ T5095] ? __lock_acquire+0x1346/0x1fd0 [ 838.718796][ T5095] ? __pfx_validate_chain+0x10/0x10 [ 838.724021][ T5095] ? mark_lock+0x9a/0x350 [ 838.728346][ T5095] __lock_acquire+0x1346/0x1fd0 [ 838.733188][ T5095] lock_acquire+0x1ed/0x550 [ 838.737676][ T5095] ? __flush_workqueue+0x1b0/0x1710 [ 838.742867][ T5095] ? __pfx_lock_acquire+0x10/0x10 [ 838.747884][ T5095] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 838.753680][ T5095] ? __init_swait_queue_head+0xae/0x150 [ 838.759217][ T5095] ? __flush_workqueue+0x1b0/0x1710 [ 838.764405][ T5095] __flush_workqueue+0x1c9/0x1710 [ 838.769415][ T5095] ? __flush_workqueue+0x1b0/0x1710 [ 838.774623][ T5095] ? rcu_is_watching+0x15/0xb0 [ 838.779390][ T5095] ? trace_contention_end+0x3c/0x120 [ 838.784695][ T5095] ? __pfx___flush_workqueue+0x10/0x10 [ 838.790166][ T5095] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 838.796144][ T5095] ? rcu_read_unlock_special+0x470/0x550 [ 838.801788][ T5095] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 838.807851][ T5095] drain_workqueue+0xc9/0x3a0 [ 838.812520][ T5095] destroy_workqueue+0xba/0xc40 [ 838.817362][ T5095] ? __rcu_read_unlock+0xa1/0x110 [ 838.822376][ T5095] hci_release_dev+0x169/0x16b0 [ 838.827218][ T5095] ? devres_release_all+0x1eb/0x250 [ 838.832410][ T5095] ? __pfx_hci_release_dev+0x10/0x10 [ 838.837687][ T5095] ? rcu_is_watching+0x15/0xb0 [ 838.842526][ T5095] ? device_release+0x66/0x1c0 [ 838.847278][ T5095] bt_host_release+0x83/0x90 [ 838.851857][ T5095] ? __pfx_bt_host_release+0x10/0x10 [ 838.857127][ T5095] device_release+0x99/0x1c0 [ 838.861704][ T5095] kobject_put+0x22f/0x480 [ 838.866122][ T5095] ? process_scheduled_works+0x945/0x1830 [ 838.871834][ T5095] process_scheduled_works+0xa2c/0x1830 [ 838.877376][ T5095] ? __pfx_process_scheduled_works+0x10/0x10 [ 838.883347][ T5095] ? assign_work+0x364/0x3d0 [ 838.887929][ T5095] worker_thread+0x86d/0xd50 [ 838.892511][ T5095] ? __kthread_parkme+0x169/0x1d0 [ 838.897528][ T5095] ? __pfx_worker_thread+0x10/0x10 [ 838.902634][ T5095] kthread+0x2f0/0x390 [ 838.906692][ T5095] ? __pfx_worker_thread+0x10/0x10 [ 838.911787][ T5095] ? __pfx_kthread+0x10/0x10 [ 838.916365][ T5095] ret_from_fork+0x4b/0x80 [ 838.920775][ T5095] ? __pfx_kthread+0x10/0x10 [ 838.925352][ T5095] ret_from_fork_asm+0x1a/0x30 [ 838.930110][ T5095] SYZFAIL: failed to send rpc fd=3 want=488 sent=0 n=-1 (errno 32: Broken pipe) [ 839.609339][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.648595][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.718168][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.749227][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.823450][ T62] hsr0: left allmulticast mode [ 839.828609][ T62] hsr_slave_0: left allmulticast mode [ 839.834109][ T62] hsr_slave_1: left allmulticast mode [ 839.839608][ T62] bridge0: port 3(hsr0) entered disabled state [ 839.848125][ T62] bridge_slave_1: left allmulticast mode [ 839.854027][ T62] bridge_slave_1: left promiscuous mode [ 839.859665][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.868346][ T62] bridge_slave_0: left allmulticast mode [ 839.874207][ T62] bridge_slave_0: left promiscuous mode [ 839.879858][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.019525][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.029620][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.039470][ T62] bond0 (unregistering): Released all slaves [ 840.248129][ T62] veth0_to_team: left promiscuous mode [ 840.257231][ T62] batadv_slave_0: left promiscuous mode [ 840.266522][ T62] hsr_slave_0: left promiscuous mode [ 840.272393][ T62] hsr_slave_1: left promiscuous mode [ 840.280025][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.290316][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.305443][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.314469][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.323975][ T62] veth1_macvtap: left promiscuous mode [ 840.329462][ T62] veth0_macvtap: left promiscuous mode [ 840.335349][ T62] veth1_vlan: left promiscuous mode [ 840.340606][ T62] veth0_vlan: left promiscuous mode [ 840.499112][ T62] team0 (unregistering): Port device team_slave_1 removed [ 840.525351][ T62] team0 (unregistering): Port device team_slave_0 removed [ 840.934275][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.967755][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.031370][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.087133][ T62] team0: Port device netdevsim0 removed [ 841.095466][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.188462][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.240904][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.309952][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.388935][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.491498][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.570803][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.648169][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.708502][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.798498][ T62] hsr0: left allmulticast mode [ 841.811233][ T62] hsr_slave_0: left allmulticast mode [ 841.819396][ T62] hsr_slave_1: left allmulticast mode [ 841.825653][ T62] bridge0: port 3(hsr0) entered disabled state [ 841.835482][ T62] bridge_slave_1: left allmulticast mode [ 841.841146][ T62] bridge_slave_1: left promiscuous mode [ 841.847238][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.859683][ T62] bridge_slave_0: left allmulticast mode [ 841.865610][ T62] bridge_slave_0: left promiscuous mode [ 841.871316][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.884182][ T62] hsr0: left allmulticast mode [ 841.888984][ T62] hsr_slave_0: left allmulticast mode [ 841.895793][ T62] hsr_slave_1: left allmulticast mode [ 841.901340][ T62] bridge0: port 3(hsr0) entered disabled state [ 841.911432][ T62] bridge_slave_1: left allmulticast mode [ 841.918178][ T62] bridge_slave_1: left promiscuous mode [ 841.924035][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.932306][ T62] bridge_slave_0: left allmulticast mode [ 841.938935][ T62] bridge_slave_0: left promiscuous mode [ 841.945633][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.955199][ T62] hsr0: left allmulticast mode [ 841.960320][ T62] hsr_slave_0: left allmulticast mode [ 841.965928][ T62] hsr_slave_1: left allmulticast mode [ 841.971399][ T62] bridge0: port 3(hsr0) entered disabled state [ 841.978885][ T62] bridge_slave_1: left allmulticast mode [ 841.984553][ T62] bridge_slave_1: left promiscuous mode [ 841.990179][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.999435][ T62] bridge_slave_0: left allmulticast mode [ 842.005241][ T62] bridge_slave_0: left promiscuous mode [ 842.010873][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.408685][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.419162][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.429749][ T62] bond0 (unregistering): Released all slaves [ 842.442652][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.452694][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.462395][ T62] bond0 (unregistering): Released all slaves [ 842.478718][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.490503][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.501294][ T62] bond0 (unregistering): Released all slaves [ 843.132596][ T62] hsr_slave_0: left promiscuous mode [ 843.141102][ T62] hsr_slave_1: left promiscuous mode [ 843.147922][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.155587][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.167581][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.175096][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.186874][ T62] hsr_slave_0: left promiscuous mode [ 843.192754][ T62] hsr_slave_1: left promiscuous mode [ 843.198700][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.207198][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.215028][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.222435][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.235756][ T62] hsr_slave_0: left promiscuous mode [ 843.241645][ T62] hsr_slave_1: left promiscuous mode [ 843.248748][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.256237][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.265583][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.273271][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.284578][ T62] veth1_macvtap: left promiscuous mode [ 843.290094][ T62] veth0_macvtap: left promiscuous mode [ 843.295944][ T62] veth1_vlan: left promiscuous mode [ 843.301204][ T62] veth0_vlan: left promiscuous mode [ 843.307415][ T62] veth1_macvtap: left promiscuous mode [ 843.313048][ T62] veth0_macvtap: left promiscuous mode [ 843.318583][ T62] veth1_vlan: left promiscuous mode [ 843.324021][ T62] veth0_vlan: left promiscuous mode [ 843.330058][ T62] veth1_macvtap: left promiscuous mode [ 843.335621][ T62] veth0_macvtap: left promiscuous mode [ 843.341176][ T62] veth1_vlan: left promiscuous mode [ 843.346668][ T62] veth0_vlan: left promiscuous mode [ 843.598223][ T62] team0 (unregistering): Port device team_slave_1 removed [ 843.620800][ T62] team0 (unregistering): Port device team_slave_0 removed [ 843.821410][ T62] team0 (unregistering): Port device team_slave_1 removed [ 843.849961][ T62] team0 (unregistering): Port device team_slave_0 removed [ 844.053072][ T62] team0 (unregistering): Port device team_slave_1 removed [ 844.077680][ T62] team0 (unregistering): Port device team_slave_0 removed