last executing test programs: 17.231847722s ago: executing program 1 (id=4515): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x75db80, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000480)={{}, {}, [], {0x4, 0x1}}, 0x24, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (async) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'veth0_vlan\x00', 0x0}) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000018000000}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a802e8c6394f90424fc60100005000b000900053582c137153e37000c0280fc0b1d02f80b", 0x33fe0}], 0x1}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008009e66", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000400d000"], 0x2c}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') 15.416231079s ago: executing program 1 (id=4517): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x4) fallocate(r0, 0x0, 0x400000000000000, 0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r3, 0x107, 0xa, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000012c0)=@ipv6_newrule={0x1c, 0x20, 0x239262f87517baa9, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) recvfrom(r4, &(0x7f0000000000)=""/145, 0x91, 0x2021, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000180)={0xc}) 15.178038446s ago: executing program 1 (id=4519): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x18c, 0x65, 0x0, 0x0, 0x100, {}, [@TCA_RATE={0x6, 0x5, {0x6}}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'geneve0\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x5e, 0xaa}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xe8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xd0, 0x6, [@m_ife={0xcc, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x85, 0x6, "21b2caeba32a6f7c5900697624a17b85a9db3a31b129a4976a84cfb4f5d651fd8aa24a645c8f63c025fcca463a6b79a3d7e6c9a8b89a140805ef63939ac2e37b49004b0dc3b8446aa7038eceef52fe7bdca153fe865c65015a3b208b282c16472e451aa10a8631235c49cae271f5fc8ce5e34d9938e3d5f43ac7a0e31b0acfc731"}, {0xc}, {0xc}}}]}]}}]}, 0x18c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) 11.947002871s ago: executing program 1 (id=4524): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r1, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r1) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r3, 0x10e, 0x8, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x287d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x80000000, 0x8}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r4, 0x8010af78, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@private2, @remote, @dev, 0x0, 0x0, 0x5018}) 10.232344137s ago: executing program 1 (id=4529): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = dup2(r2, r1) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_setup(0x3c27, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x0, 0x2}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x14, &(0x7f0000001180)=[{0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) r4 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES8=0x0, @ANYBLOB="afd8d79da3baa0e38af2709ed5750e4748ac9a223dfa59632388e8d434e70671d765bcef3e0f73eebcb7a7b9e9ed135eabde08682ad3d3487e3660019d349f88598910e4512a20417a11c1af55aa2c07eda6d537b888d085a8b7865feb45a9e294f5cd0a6914af9a1fddb36905701a175f9aa5c4fb17b9f600b2731b841c9a4cfcb20b9b32dd46a99ffb34"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x10007, 0x7fe2, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r5, &(0x7f0000000000), 0x0}, 0x20) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffddf, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r4]) syz_usb_control_io(r4, 0x0, 0x0) 9.840115703s ago: executing program 1 (id=4533): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) (fail_nth: 2) r6 = dup2(r5, r4) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x420102) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r9, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x30, 0x3, 0x3, 0x2, 0x6, 0x8, 0x3, r10}, &(0x7f0000000300)=0x20) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r11) 9.121215104s ago: executing program 0 (id=4535): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) socket$inet(0x2, 0x80001, 0x84) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x9d}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x15af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) sendmmsg(r3, &(0x7f0000000f40)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="9c", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x38}}, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741c650a"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04030000000000000000"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000540)={0x24, 0x0, &(0x7f00000006c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "00d2dadd15df2c06a29a"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xb, 0x9fd, 0x84}, 0x48) syz_open_procfs(0x0, 0x0) 6.272674046s ago: executing program 0 (id=4545): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000440)='./file0\x00', 0x6a840, 0x0) fcntl$setsig(r1, 0xa, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000000080101000000000000000000004f47050003002f00000006000240000000001400f3303b2f7d55591adf66a0916c5f6a600480080001400000000008000240000000000900010073797a300000"], 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x0, r9}) r10 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000480)={0xa00000, 0x400000, 0x0, 0xffffffffffffffff, 0x0, 0x0}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000000c0)={0x4, 0x0, 0x2, r9, 0xb}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x2, r9, 0xb}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug', 0x0, 0x119) fcntl$notify(r11, 0x402, 0x80000008) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r4) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.732176296s ago: executing program 0 (id=4548): syz_emit_ethernet(0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500009c000000000021907800000000ffffffff05009078ac1414bb400000000000000000000000ac1414bbac141400070b000000000000000000000000000000000000000000000000000000000000000000000083030044240001ffffffff00000000abfd14aa000000000000000000000000ac1414bb00000000860c0000000000068e281690000200"/170], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0xffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf={0xa2, &(0x7f0000000240)="39ad121f875cddf13ebdf4cc744bdddd7dd3a8b2fe02d5719e905a66009d4ec81eb586e6aabe7b55a3f44250fc8a6c58ff7f994cbe7ab19d417db61ff11af1b5f085506e49c18960e3c28f5e4a80c6321c0b0c5a1bcf2f9c98bc3e521b182450f951b18cd1a5e0e6664e2fccbd564de05155878c16feb28558aa016fae30d6cd313759dcb4b6f54cbe7a0c3d17c714ab4a326b89b6c9b6a195335c1a8f9762f731ca"}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xfffffffb}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256c", 0xc3}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32], 0x6c}}, 0x0) 4.419691803s ago: executing program 3 (id=4553): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x4}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = dup(r1) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c) 4.260322198s ago: executing program 3 (id=4554): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000044ffffff000000000af2ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000350901000000000095000000040004002f9800000000000056080000000000008500000005000000b700000000000e0095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.205004395s ago: executing program 3 (id=4555): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = io_uring_setup(0x3964, &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0xffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x6}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000200), 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031400d3fc120000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x2, r8, 0x1, 0xff, 0x6, @multicast}, 0x14) listen(r6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.872641891s ago: executing program 3 (id=4556): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000040)=0x8, 0xffffffffffffff71) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280), 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x4, 0x0, 'queue1\x00', 0x4}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r7 = dup2(r6, r5) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x420102) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004004}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r10, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x30, 0x3, 0x3, 0x2, 0x6, 0x8, 0x3, r11}, &(0x7f0000000300)=0x20) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) 2.620884426s ago: executing program 0 (id=4558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) (async) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xb, "5390e55e4a0113ad12a9692b8eaab89b3a186c"}) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000000000"]) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, 0x0, 0x0) (async) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000000c0)="67e3850f20d86635080000000f22d8bad004b8e6f7ef360fc7b74648baf80c66b8bd9acf8b66efbafc0cb081ee66b9c30200000f32b8d8000f00d0ba2100ec0f01190f35", 0x44}], 0x1, 0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = signalfd(r5, &(0x7f00000002c0)={[0x1]}, 0x8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001600)={0xbc, 0x0, &(0x7f0000000540)=[@request_death, @enter_looper, @acquire={0x40046305, 0x2}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@fda={0x66646185, 0x6, 0x1, 0x35}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/98, 0x62, 0x0, 0xb}}, &(0x7f0000000440)={0x0, 0x20, 0x38}}}, @increfs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x1, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0x1000}}, &(0x7f0000000500)={0x0, 0x18, 0x38}}}], 0x1000, 0x0, &(0x7f0000000600)="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"}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) (async) ioctl$KVM_NMI(r4, 0xae9a) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xa0cc, 0x80c00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000200)=0x5) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.424200929s ago: executing program 2 (id=4560): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8, 0x0, {0xff03000000000000}}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @broadcast}}}, {{@arp={@local, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@random="a1dcf6784022"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 2.423749429s ago: executing program 3 (id=4561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) r3 = socket(0x2c, 0x4, 0xfffffffc) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r4, 0x1) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)={@map=0x1, 0xffffffffffffffff, 0x20, 0x0, 0xffffffffffffffff, @prog_fd}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000680)={0x9, &(0x7f0000000600)=[{0x81, 0x61, 0x7, 0x2}, {0x9, 0x0, 0x6, 0x2}, {0x38, 0x5, 0x6}, {0x5, 0xb, 0x5, 0x3ff}, {0x80, 0x2c, 0x7, 0x40000000}, {0x1041, 0xfa, 0x4, 0x6b}, {0xa, 0x4, 0x7, 0x7}, {0x1, 0x1, 0x4, 0xffffffff}, {0x182, 0x40, 0x5, 0x9}]}) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f00000002c0)=""/182, &(0x7f00000000c0)=0xb6) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f00000001c0)=""/216, &(0x7f0000000000)=0xd8) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0xac, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x9}, {0x2, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0xc4, 0x1}, {0x10}, {0x0, 0x3}, {0xf2}, {0xd}, {0xba, 0x1}], "a43c12a62b59f9c1"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x3}, {0x3, 0x2}, {0x4, 0x2}, {0x4, 0x2}, {0x6, 0x4}, {0xf0, 0x2}], "792aeb5e08630cbe"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x2}, {0xfe, 0x7}, {0x40, 0x7}, {0x6, 0x2}, {0x8, 0x4}, {0x2, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0x3, 0x4}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x1}, {0x80}, {0x10, 0x5}, {0x6, 0x2}], "89d014d63a582882"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0xe0}, {0x80, 0x4}, {0x5}, {0xfb, 0x6}, {0xd, 0x7}, {0x80, 0x1}, {0x81, 0x2}, {0x8, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0xf8, 0x3}, {0x80, 0x7}, {0x5}, {0x7, 0x7}, {0x8, 0x2}, {0x2, 0x2}], "0efdcdf9e865815e"}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x4004441) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0xc048aec8, &(0x7f0000000100)={0x1}) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)) ioctl$BLKBSZSET(r2, 0x1265, &(0x7f0000000180)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2400000001010303000000000000000000000000080003400000000008000840000000009ecd5e37e6a062e1eeabdd27caf7d0f636796d5673d85ab372ec560014b01ef6711fe9220b2f9a386b369c17a6487b3fd3cd0d9d73b3d274d793ea61e9f0dde4e93da72e565b05cc326b4d8f00d9f794a5f81d32a6d50d3cb38ab2a5e0f856fe28c8fce7f82a2e9ee2a36aed81ca18f47d967aaa29a491632c3dbe2add88aa2793136a4839fa447fff411318935aaafb0ec71454147dd227f1ad6b7984bdd5f67b118be10cc92c9e5a850c485e27c5cd6b25412e5d54b91a9679dd99ab1001097c93f19f9d86316526"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x16bf7}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private1}]}}}, @IFLA_MTU={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20811}, 0x0) 2.376390904s ago: executing program 2 (id=4562): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x6, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xc000000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x90) 2.152135587s ago: executing program 0 (id=4564): r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x10000000005, 0x7) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "e9257fb792464e730df1194699dec293ed461dfe"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121401, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r7}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r9, 0x100, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x98bd81c42858a6bc}, 0x1) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='VOLUME \'Line\' 1D'], 0x23) close_range(r1, 0xffffffffffffffff, 0x0) gettid() r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x141102) syz_usb_connect(0x0, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x0, 0x6e, 0x8f, 0x4a, 0x8, 0x4e6, 0x5591, 0x5836, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x60, 0xcc, 0x86}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r10, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x100002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000000fb91ded61005d5f523de3ef681a7c407d51ca1f391d219900c825b32433282fad9bf87075f754a7d3ff7e24d9fe3bd80da7973009c1a4fc5676740b73d00f756a4bcb5776ed1c972df77860210d69ac491c04cd6e30703a3bf30b29bb3b13035dfccf46fc18703a6b64442ec2dcf3dee1eb12b1edb5be367827d8864ea6c009a9b60e0610ce9c0a41117392c844ff3e37500f8ecc8093a48d2854b91eb3a3eec8f22d4dfb575e40c13c85dd4dbd71a8069116aa38e13143145cbcca44a7067710033357acfb3dbddd2b921d9e6581e316abf85ad1fbaee7c561b0f771b8410a630", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200e0000002"], 0x3c}}, 0x0) 2.107590154s ago: executing program 2 (id=4565): read$eventfd(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2020) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000004200)={0x0, 0x0, [0x8000, 0x0, 0x7fffffffffffffff, 0x3, 0x7]}) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000c40)={0x6, 0x1, 0x1, 0x0, 0x8}) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000380), 0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x800145, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r1 = timerfd_create(0x0, 0x800) timerfd_settime(r1, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000e00)=""/219, 0xdb}, {&(0x7f0000001fc0)=""/200, 0xc8}, {&(0x7f0000000f00)=""/131, 0x83}], 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) connect$unix(r2, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) syz_clone(0x88280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) (async) recvmsg(r3, &(0x7f0000000dc0)={&(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000000480)=""/42, 0x2a}, {&(0x7f0000000780)}, {&(0x7f0000000880)=""/180, 0xb4}, {&(0x7f0000000a00)=""/223, 0xdf}, {&(0x7f0000000940)=""/38, 0x26}, {&(0x7f0000000b00)=""/232, 0xe8}, {&(0x7f0000000c00)=""/151, 0x97}], 0x8, &(0x7f0000000d40)=""/79, 0x4f}, 0x0) (async) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 1.644238479s ago: executing program 2 (id=4567): syz_emit_ethernet(0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500009c000000000021907800000000ffffffff05009078ac1414bb400000000000000000000000ac1414bbac141400070b000000000000000000000000000000000000000000000000000000000000000000000083030044240001ffffffff00000000abfd14aa000000000000000000000000ac1414bb00000000860c0000000000068e281690000200"/170], 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/255, 0xff}], 0x1, 0xffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000340)=@buf={0xa2, &(0x7f0000000240)="39ad121f875cddf13ebdf4cc744bdddd7dd3a8b2fe02d5719e905a66009d4ec81eb586e6aabe7b55a3f44250fc8a6c58ff7f994cbe7ab19d417db61ff11af1b5f085506e49c18960e3c28f5e4a80c6321c0b0c5a1bcf2f9c98bc3e521b182450f951b18cd1a5e0e6664e2fccbd564de05155878c16feb28558aa016fae30d6cd313759dcb4b6f54cbe7a0c3d17c714ab4a326b89b6c9b6a195335c1a8f9762f731ca"}) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0xfffffffb}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, 0x0, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256c", 0xc3}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x2c}}, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000003a00)=0x7, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000003000128009000100766c616e00000000200002800c0002001c0000001f0000000600050088a80000060001000000000008000500", @ANYRES32], 0x6c}}, 0x0) 1.128031396s ago: executing program 4 (id=4568): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x38}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @empty}]}}]}, 0x3c}}, 0x0) (async) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x1c, 0x84, 0x5}], 0x10}}], 0x2, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000140)=0x17, 0x4) (async) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x9, 0x8000, 0x4, 0x7, 0xfffc, 0x9, 0x9, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x4, 0x7, 0x80, 0xff, 0x1000}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000100)={r7, 0x2, 0x1e6d, 0x4, 0xffffc2a2, 0x8ecc}, 0x14) sendmmsg(r6, &(0x7f00000002c0), 0x0, 0xc000) 880.012632ms ago: executing program 4 (id=4569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000044ffffff000000000af2ff0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000350901000000000095000000040004002f9800000000000056080000000000008500000005000000b70000000000200095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 645.200297ms ago: executing program 4 (id=4570): r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) 643.594892ms ago: executing program 2 (id=4571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x90) (async) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = syz_io_uring_setup(0xe2c, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000040)) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="bd", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = io_uring_setup(0x1895, &(0x7f00000002c0)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c000480280001800e000100696d6d65646961746500000014000280100002800c00028008000180000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a12d0b114baf28965b36f2ff4a2aa4a0158fe87a16ea5d18cc2f6dafa245632e28719c0bf0e1195ebe6005174f1832b8da088b7ad94b59263bbc730da86808d074c9fee2cbd11d591f50e45b67837eb022fa6366c64d04b56d9f12b74c2ce960c9f175bcac9ee00"], 0x80}}, 0x0) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000014000000090a0104000000000000000001000000200000000c0a01020000000000000000010000000900020073797a320000000014000016e5f7d5603c0acd781cdaf3ef45001000"], 0x7c}}, 0x0) 452.16918ms ago: executing program 3 (id=4572): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x90) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r6 = dup2(r5, r4) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x420102) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r9, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2, 0x6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x30, 0x3, 0x3, 0x2, 0x6, 0x8, 0x3, r10}, &(0x7f0000000340)=0x20) r11 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r11) 451.895875ms ago: executing program 4 (id=4573): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1f8, 0xe8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0xc0, 0xe8, 0x0, {0x0, 0xe8}}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @broadcast}}}, {{@arp={@local, @private, 0x0, 0x0, 0x0, 0x0, {@mac=@random="a1dcf6784022"}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) 438.682332ms ago: executing program 4 (id=4574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="360fc30ab800008e8d747423210f005b2a0fc71b60600f01c541a100b80230ef0f79a20000baf80c66b8abf5858d0f01c2bafc0cec", 0x37}], 0x0, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000006c0)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="a90500000000fd00000100338bb335529f56ed5c7a535071b312f933e594182008b348bf13f99f647c101d25", 0x2c}], 0x1}}], 0x1, 0x0) sendmsg$rds(r4, &(0x7f0000000a40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000000080)=""/95, 0x5f}], 0x2}, 0x0) 420.690433ms ago: executing program 2 (id=4575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x200000000010001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) io_setup(0x7, &(0x7f0000000240)) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}, {0x0}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x2001) syz_emit_ethernet(0x7a, &(0x7f0000002080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd609a618500442f00fe80000000000004e82af34e9291d0bbfc0100000000000000000000000000000421880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) write$sysctl(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000008c0)={"8a2596dd", 0x0, 0x0, 0x2, 0x1, 0x0, "000000000000000000000000000081", "643aa6bf", "69c7c4a9", "f7bf0700", ["87b700", "275f27336422fe2a553ae850", "5d6fd1214703bf778b51fce0", "4973dce60c23eb4573635a16"]}) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0xe1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e0001ffffa8d9f0c838070007"], 0x40}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r5) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup(r6) 215.239344ms ago: executing program 0 (id=4576): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2, 0xffffffff}, 0x10) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0/file0\x00', 0x85) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x7) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002080)=""/102373, 0x18fe5}], 0x1, 0x80, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) (async) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="020e0f00100000000000000000000000030005000000000002000000ac1eff0100000000000000000300060000200000020000000000000000000000000000000800120000000200000000000000000006000000000000000000000000000000ff020000000000000000000000000001000000000000000000000000000000004c66f21ce5f5dd6b17d95b8fe335ea4804d5cff775825e3e58b5afe0fc5a4a0be6c4de34db192c0d3377fc6512908b0169b9367f2ded1db572ab958c6dcfbc39c45cf24f97d607d74f48ada85e66252f4ac86c4a4109edfa20c113e7a93e801a252a40f85c630cf801d37fc734321aa4c060b3eaf9"], 0x80}}, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000280), 0x4) (async) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001e80), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000080)={0x1, {0x0, 0xfffffff, 0x0, 0x1}}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x8}) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="b60b00000000000000000f0200303030303a00"/35], 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES64=r2, @ANYBLOB="00001700001300001c6970768a616e00000c000280060001000000000005002700000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 4 (id=4577): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d3e457201e000000000000000001090212000100000000090441653750de44e1f8ed18940ff71db533ec14b23866ea843115172cf88dcfeb6465"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000000), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x3, 0x0, 'sh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000001a40)=ANY=[@ANYBLOB="0f539af21094aaaaaaaaaabb86dd601200b000483a0000000000000000000000000000000000ff02040000000000000000000000000103029078000000006027738200002c00fc0100000000000000000000000000002001000000000000ff000000000000012f01000000000000070822ebffff00fc0000000000000000"], 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf3140a0be219b38, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000001300)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0xb, 0x9, {@mac=@random="7241258189e5", {[0x0, 0x0, 0x0, 0x774a093a22727d9f]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x0, 0x7, 0x101, 0x3, 0x0, 'vcan0\x00', 'nicvf0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @local, @rand_addr=0x64010100, 0x4, 0x1}}}, {{@arp={@dev, @multicast2, 0xffffffff, 0x0, 0x0, 0x8, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, {[0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x9, 0x7, 0x75df, 0x0, 0x7, 0x1, 'ip6gretap0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @multicast2, @rand_addr=0x64010102, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x80}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0xfffe, 0x0, 'none\x00'}, 0x2c) kernel console output (not intermixed with test programs): Selecting channel failed [ 1653.162823][ T5237] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1653.179418][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.196035][ T5237] [drm] Initialized udl on minor 2 [ 1653.222336][ T5237] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1653.246140][ T5237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1653.254478][ T5300] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1653.283184][ T5237] usb 4-1: USB disconnect, device number 24 [ 1653.290327][ T5300] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1653.316807][ T5300] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1653.355702][T29066] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1653.387427][T29066] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1653.433291][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.610838][T28839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.726206][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.891890][T29044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.892052][T29044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.892293][T29044] bridge_slave_0: entered allmulticast mode [ 1653.894102][T29044] bridge_slave_0: entered promiscuous mode [ 1653.959946][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.985407][T29044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.985561][T29044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.017589][T29044] bridge_slave_1: entered allmulticast mode [ 1654.019229][T29044] bridge_slave_1: entered promiscuous mode [ 1654.100797][ T5285] usbhid 5-1:1.0: can't add hid device: -71 [ 1654.115653][ T5285] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1654.132539][T28839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.138999][ T5285] usb 5-1: USB disconnect, device number 24 [ 1654.189701][T29044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.201856][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.209086][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.247115][T29044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.310865][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.318169][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.333153][T28921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1654.344981][T28921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1654.364881][T29044] team0: Port device team_slave_0 added [ 1654.376045][ T5237] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1654.377625][T29044] team0: Port device team_slave_1 added [ 1654.413396][T28921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1654.517513][T28921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1654.534252][T29044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.547868][T29044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.576071][ T5237] usb 4-1: Using ep0 maxpacket: 8 [ 1654.583352][ T5237] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1654.588499][T29044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.596258][ T5237] usb 4-1: config 179 has no interface number 0 [ 1654.633120][ T5237] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1654.667744][ T5237] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1654.676424][T29044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.690312][T29044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.710959][ T5237] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1654.735051][T29044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.757239][ T5237] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1654.779523][ T5237] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1654.794967][ T63] bridge_slave_1: left allmulticast mode [ 1654.800996][ T63] bridge_slave_1: left promiscuous mode [ 1654.807180][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.818594][ T5237] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1654.828688][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.854490][T29094] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1654.869610][ T63] bridge_slave_0: left allmulticast mode [ 1654.879080][ T63] bridge_slave_0: left promiscuous mode [ 1654.884878][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.956125][T15236] Bluetooth: hci5: command tx timeout [ 1655.092592][ T5237] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input110 [ 1655.540413][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1655.748304][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1655.757715][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.768934][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1655.782804][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1655.792103][ T8] usb 5-1: New USB device strings: Mfr=0, Product=184, SerialNumber=130 [ 1655.792812][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1655.800862][ T8] usb 5-1: Product: syz [ 1655.800883][ T8] usb 5-1: SerialNumber: syz [ 1655.817693][ T8] usb 5-1: config 0 descriptor?? [ 1655.828767][T15236] Bluetooth: hci3: command 0x0406 tx timeout [ 1655.847290][ T63] bond0 (unregistering): Released all slaves [ 1656.052088][T29044] hsr_slave_0: entered promiscuous mode [ 1656.068901][T29044] hsr_slave_1: entered promiscuous mode [ 1656.084030][T29044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1656.113700][T29044] Cannot create hsr debugfs directory [ 1656.171430][ T63] tipc: Disabling bearer [ 1656.191043][ T63] tipc: Left network mode [ 1656.262637][ T5237] usb 4-1: USB disconnect, device number 25 [ 1656.262687][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1656.276206][T29111] xt_CT: No such helper "snmp_trap" [ 1656.276875][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1656.371018][ T5237] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1657.026347][ T5238] Bluetooth: hci5: command tx timeout [ 1657.039193][ T5237] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1657.262055][ T5237] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1657.283926][ T5237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.347274][ T5237] usb 4-1: Product: syz [ 1657.363069][ T5237] usb 4-1: Manufacturer: syz [ 1657.370481][ T63] hsr_slave_0: left promiscuous mode [ 1657.378611][ T5237] usb 4-1: SerialNumber: syz [ 1657.421391][ T63] hsr_slave_1: left promiscuous mode [ 1657.438440][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1657.454647][ T5237] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1657.486755][T16055] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1657.504433][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1657.571648][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1657.594389][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1657.655068][ T63] veth1_macvtap: left promiscuous mode [ 1657.661055][ T63] veth0_macvtap: left promiscuous mode [ 1657.672936][ T63] veth1_vlan: left promiscuous mode [ 1657.680228][ T63] veth0_vlan: left promiscuous mode [ 1658.093612][ T8] usbhid 5-1:0.0: can't add hid device: -71 [ 1658.117989][ T8] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1658.175432][ T8] usb 5-1: USB disconnect, device number 25 [ 1658.636057][T16055] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1658.649922][T16055] ath9k_htc: Failed to initialize the device [ 1658.723501][T16055] usb 4-1: ath9k_htc: USB layer deinitialized [ 1659.088164][ T63] team0 (unregistering): Port device team_slave_1 removed [ 1659.188063][ T63] team0 (unregistering): Port device team_slave_0 removed [ 1660.124437][ T944] usb 4-1: USB disconnect, device number 26 [ 1660.162468][T28839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1660.192268][T28921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.229427][T29142] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004' [ 1660.362987][T28921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1660.392632][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.399835][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1660.423896][T28839] veth0_vlan: entered promiscuous mode [ 1660.578109][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.585316][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1660.689208][T28839] veth1_vlan: entered promiscuous mode [ 1660.695995][ T944] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1660.917050][ T944] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1660.937393][ T944] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1660.973070][ T944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.984574][T28839] veth0_macvtap: entered promiscuous mode [ 1661.007172][ T944] usb 4-1: config 0 descriptor?? [ 1661.049809][T28839] veth1_macvtap: entered promiscuous mode [ 1661.226709][ T29] audit: type=1326 audit(1725342221.210:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa568779eb9 code=0x7ffc0000 [ 1661.259928][ T4401] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.289893][ T29] audit: type=1326 audit(1725342221.210:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa568779eb9 code=0x7ffc0000 [ 1661.327462][ T29] audit: type=1326 audit(1725342221.220:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa568779eb9 code=0x7ffc0000 [ 1661.390841][ T29] audit: type=1326 audit(1725342221.220:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa568779abb code=0x7ffc0000 [ 1661.443864][T15236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1661.457700][T15236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1661.470853][T15236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1661.474776][ T29] audit: type=1326 audit(1725342221.220:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa568779abb code=0x7ffc0000 [ 1661.512180][T15236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1661.524556][T15236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1661.539041][T15236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1661.587537][ T4401] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.610535][ T29] audit: type=1326 audit(1725342221.220:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5687abfa5 code=0x7ffc0000 [ 1661.658315][T28921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1661.669853][ T944] video4linux radio32: keene_cmd_set failed (-71) [ 1661.678664][ T944] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 1661.688143][ T944] usb 4-1: USB disconnect, device number 27 [ 1661.715955][ T29] audit: type=1326 audit(1725342221.420:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa568779eb9 code=0x7ffc0000 [ 1661.738400][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.798141][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.818428][ T29] audit: type=1326 audit(1725342221.420:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa568779abb code=0x7ffc0000 [ 1661.842179][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.861290][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.882584][ T29] audit: type=1326 audit(1725342221.420:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa568779abb code=0x7ffc0000 [ 1661.904931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.911391][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.922764][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.934722][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.944883][ T29] audit: type=1326 audit(1725342221.440:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29141 comm="syz.3.4346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa5687abfa5 code=0x7ffc0000 [ 1661.967331][ C1] vkms_vblank_simulate: vblank timer overrun [ 1661.973462][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1661.984301][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1661.998987][T28839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.049141][ T4401] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.099608][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.125495][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.135653][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.154724][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.174939][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.185565][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.195935][T28839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1662.214844][T28839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1662.237674][T28839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.298188][ T4401] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1662.359396][T29044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1662.408395][T28839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.445935][T28839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.454678][T28839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.473361][T28839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.492038][T29044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1662.518900][T29044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1662.549442][T29189] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.4349'. [ 1662.584409][T29044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1662.701724][T28921] veth0_vlan: entered promiscuous mode [ 1662.880860][ T4401] bridge_slave_1: left allmulticast mode [ 1662.896445][ T4401] bridge_slave_1: left promiscuous mode [ 1662.917017][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.948411][ T4401] bridge_slave_0: left allmulticast mode [ 1662.954114][ T4401] bridge_slave_0: left promiscuous mode [ 1662.983054][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.586880][ T5238] Bluetooth: hci4: command tx timeout [ 1663.994404][ T4401] bond0 (unregistering): left promiscuous mode [ 1664.008963][ T4401] bond_slave_0: left promiscuous mode [ 1664.014679][ T4401] bond_slave_1: left promiscuous mode [ 1664.029918][ T4401] team0: left promiscuous mode [ 1664.034857][ T4401] team_slave_0: left promiscuous mode [ 1664.044579][ T4401] team_slave_1: left promiscuous mode [ 1664.080381][ T4401] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1664.092013][ T4401] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.103651][ T4401] bond0 (unregistering): (slave team0): Releasing backup interface [ 1664.112547][ T4401] tipc: Resetting bearer [ 1664.125251][ T4401] tipc: Resetting bearer [ 1664.131306][ T4401] bond0 (unregistering): Released all slaves [ 1664.165574][T28921] veth1_vlan: entered promiscuous mode [ 1664.289793][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.320753][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.333633][ T4401] tipc: Disabling bearer [ 1664.363446][ T4401] tipc: Left network mode [ 1664.466994][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1664.474934][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.509697][T28921] veth0_macvtap: entered promiscuous mode [ 1664.585926][T22206] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1664.812158][T22206] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.829444][T28921] veth1_macvtap: entered promiscuous mode [ 1664.842934][T22206] usb 4-1: config 0 has no interfaces? [ 1664.883615][T22206] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1664.918053][T22206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.941081][T29044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.970818][T22206] usb 4-1: config 0 descriptor?? [ 1665.113782][T29163] chnl_net:caif_netlink_parms(): no params data found [ 1665.215552][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.244346][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.263784][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.335841][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.345882][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.371921][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.390289][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.411352][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.431544][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1665.450511][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.463690][T28921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.495017][T20119] usb 4-1: USB disconnect, device number 28 [ 1665.579965][ T4401] hsr_slave_0: left promiscuous mode [ 1665.594403][ T4401] hsr_slave_1: left promiscuous mode [ 1665.610168][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.621181][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.633510][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.644678][ T4401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.667660][ T4401] veth1_macvtap: left promiscuous mode [ 1665.673218][ T4401] veth0_macvtap: left promiscuous mode [ 1665.676244][ T5238] Bluetooth: hci4: command tx timeout [ 1665.678951][ T4401] veth1_vlan: left promiscuous mode [ 1665.695464][ T4401] veth0_vlan: left promiscuous mode [ 1666.188339][T29280] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1666.482741][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1666.696539][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1666.703762][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.725701][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.733541][T15236] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1666.747214][ T8] usb 2-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 1666.772985][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.793133][ T8] usb 2-1: config 0 descriptor?? [ 1666.928815][ T4401] team0 (unregistering): Port device team_slave_1 removed [ 1667.010166][ T4401] team0 (unregistering): Port device team_slave_0 removed [ 1667.056774][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 1667.069681][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1667.099763][ T8] usb 2-1: USB disconnect, device number 9 [ 1667.698758][T29044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.708582][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.726108][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.737480][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.748428][T15236] Bluetooth: hci4: command tx timeout [ 1667.755452][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.766778][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.777694][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.787977][T28921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1667.806131][T28921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1667.820515][T28921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.983012][T28921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.022837][T28921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.023747][T29301] fuse: Unknown parameter '0x0000000000000004' [ 1668.031811][T28921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.031848][T28921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.061759][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.069043][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.112384][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.119525][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.443543][T29312] xt_CT: No such helper "pptp" [ 1668.549379][T15236] Bluetooth: hci2: command tx timeout [ 1668.561741][T29163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.569365][T29163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.578989][T29163] bridge_slave_0: entered allmulticast mode [ 1668.585867][T29163] bridge_slave_0: entered promiscuous mode [ 1668.655012][T29044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1668.694339][T29163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.718806][T29163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.742396][T29163] bridge_slave_1: entered allmulticast mode [ 1668.746715][T29322] loop6: detected capacity change from 0 to 524287999 [ 1668.750133][T29163] bridge_slave_1: entered promiscuous mode [ 1668.763639][ C1] blk_print_req_error: 24 callbacks suppressed [ 1668.763655][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.778978][ C1] buffer_io_error: 24 callbacks suppressed [ 1668.778988][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.792865][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.802026][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.822213][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.831517][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.840437][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.849666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.858077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.867318][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.875646][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.884823][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.894941][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.904217][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.919197][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.928454][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.936475][T29322] ldm_validate_partition_table(): Disk read failed. [ 1668.944137][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.953384][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.971806][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1668.980999][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1669.026528][T29322] Dev loop6: unable to read RDB block 0 [ 1669.047365][T29322] loop6: unable to read partition table [ 1669.064658][T29322] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1669.119235][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.126367][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.216738][T29163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.250038][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.264568][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.319099][T29163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.385599][T29044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1669.456999][T29163] team0: Port device team_slave_0 added [ 1669.490080][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.508581][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1669.535643][T29163] team0: Port device team_slave_1 added [ 1669.643183][T29163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.668822][T29163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.697740][T29163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.711373][ T25] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1669.731603][T29044] veth0_vlan: entered promiscuous mode [ 1669.741891][T29163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.763968][T29163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.791678][T29163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.837111][T15236] Bluetooth: hci4: command tx timeout [ 1669.908940][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1669.949957][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.957643][T29044] veth1_vlan: entered promiscuous mode [ 1669.971682][T29338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1669.981049][ T25] usb 4-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1670.002197][T29163] hsr_slave_0: entered promiscuous mode [ 1670.004619][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.020484][T29338] netlink: 'syz.0.4307': attribute type 1 has an invalid length. [ 1670.034438][ T25] usb 4-1: config 0 descriptor?? [ 1670.040548][T29163] hsr_slave_1: entered promiscuous mode [ 1670.050680][T29163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1670.062683][T29163] Cannot create hsr debugfs directory [ 1670.453159][T29332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.479773][T29332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.802036][ T25] betop 0003:8380:1850.005D: unknown main item tag 0x0 [ 1670.834566][ T25] betop 0003:8380:1850.005D: hidraw0: USB HID v0.00 Device [HID 8380:1850] on usb-dummy_hcd.3-1/input0 [ 1670.879163][ T25] betop 0003:8380:1850.005D: no inputs found [ 1670.900259][T29044] veth0_macvtap: entered promiscuous mode [ 1670.949280][T29044] veth1_macvtap: entered promiscuous mode [ 1670.985879][ T5237] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1671.066562][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.096064][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.109506][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.120407][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.130416][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.152602][T29367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4374'. [ 1671.162889][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.180346][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.198867][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.208960][ T5237] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1671.218175][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1671.231452][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.243576][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.254298][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.269578][T29044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.278541][T29369] trusted_key: encrypted_key: insufficient parameters specified [ 1671.288454][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.302478][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.320075][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.334247][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.347005][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.357018][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.364785][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.375478][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.390406][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.401204][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.410158][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.420278][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.432394][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.452579][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.459759][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.474845][T29044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1671.485977][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.495116][T29044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.506958][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.524584][T29044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.532133][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.543470][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.557363][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.583437][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.595623][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.599906][T29044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.611705][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.629217][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.634849][T29044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.637443][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.658298][T29044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.669796][T29044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1671.690810][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.702293][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.753418][ T5237] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1671.762608][ T5237] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1671.783206][ T5237] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1671.795354][ T5237] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1671.807954][ T5237] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1671.837274][ T5237] usb 1-1: Product: syz [ 1671.854332][ T5237] usb 1-1: Manufacturer: syz [ 1671.874355][ T5237] usb 1-1: SerialNumber: syz [ 1671.908619][ T5237] usb 1-1: config 0 descriptor?? [ 1671.930730][ T5237] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1672.174940][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.217252][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.221130][ T5300] usb 1-1: USB disconnect, device number 53 [ 1672.271766][ T5300] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1672.369550][ T130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1672.403523][ T130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1672.414166][T29163] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1672.447146][T29163] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1672.471933][ T5237] usb 4-1: USB disconnect, device number 29 [ 1672.474863][T29163] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1672.556484][T29163] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1672.656693][T29384] loop6: detected capacity change from 0 to 524287999 [ 1672.705437][T29384] ldm_validate_partition_table(): Disk read failed. [ 1672.756788][T29384] Dev loop6: unable to read RDB block 0 [ 1672.807240][T29384] loop6: unable to read partition table [ 1672.823541][T29384] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1672.883714][ T4687] ldm_validate_partition_table(): Disk read failed. [ 1672.898560][T29163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.938127][ T4687] Dev loop6: unable to read RDB block 0 [ 1672.954068][ T4687] loop6: unable to read partition table [ 1673.017454][T29163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.069151][T22362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.076285][T22362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1673.211531][T22362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.218720][T22362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.624773][T29163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.810565][T29421] fuse: Unknown parameter 'fd6°ße' [ 1673.846550][T29427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4383'. [ 1673.864994][T29163] veth0_vlan: entered promiscuous mode [ 1673.892989][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1673.893009][ T29] audit: type=1326 audit(1725342233.890:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29416 comm="syz.3.4381" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa568779eb9 code=0x0 [ 1673.959708][T29163] veth1_vlan: entered promiscuous mode [ 1673.965312][T29430] trusted_key: encrypted_key: insufficient parameters specified [ 1674.291227][T22362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.747573][T22362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1674.908074][T29163] veth0_macvtap: entered promiscuous mode [ 1674.993143][T29163] veth1_macvtap: entered promiscuous mode [ 1675.146071][T22362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.238628][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.276176][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.317227][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.355863][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.426411][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.476003][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.506866][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.614881][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.673080][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.701267][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1675.714676][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1675.724291][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1675.731841][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.762171][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1675.765799][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1675.796076][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1675.806873][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1675.892826][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1675.944029][T29163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.081384][T22362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.311392][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.355821][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.386084][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.415856][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.442525][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.469158][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.493504][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.515438][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.547064][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.570320][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.590289][T29163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.614685][T29163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.638357][T29163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.689806][T29163] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.708437][T29163] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.725851][T29163] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.736380][T29163] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.790568][T29486] tipc: Started in network mode [ 1676.795511][T29486] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1676.826554][T29486] tipc: Enabled bearer , priority 0 [ 1677.118334][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1677.141194][T29494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.148896][T29494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.254613][T29463] chnl_net:caif_netlink_parms(): no params data found [ 1677.311983][T22362] bridge_slave_1: left allmulticast mode [ 1677.330763][T22362] bridge_slave_1: left promiscuous mode [ 1677.344605][T22362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.371391][T22362] bridge_slave_0: left allmulticast mode [ 1677.380690][T22362] bridge_slave_0: left promiscuous mode [ 1677.386677][T22362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.438023][T29502] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4396'. [ 1677.795829][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1677.906671][T15236] Bluetooth: hci0: command tx timeout [ 1677.945961][ T8] tipc: Node number set to 11578026 [ 1677.984630][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1678.000351][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.010333][ T9] usb 3-1: Product: syz [ 1678.020472][ T9] usb 3-1: Manufacturer: syz [ 1678.036776][ T9] usb 3-1: SerialNumber: syz [ 1678.049368][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1678.088593][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1678.277432][T22362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1678.321610][T22362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1678.337915][T22362] bond0 (unregistering): Released all slaves [ 1678.610737][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.659139][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.150153][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.158281][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.187406][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1679.196371][ T8] ath9k_htc: Failed to initialize the device [ 1679.236716][ T8] usb 3-1: ath9k_htc: USB layer deinitialized [ 1679.361702][T29530] loop6: detected capacity change from 0 to 524287999 [ 1679.389201][ C0] blk_print_req_error: 41 callbacks suppressed [ 1679.389224][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.404807][ C0] buffer_io_error: 41 callbacks suppressed [ 1679.404825][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.423079][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.432435][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.476404][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.485585][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.508778][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.518002][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.526262][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.535567][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.552344][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.561549][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.575943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.585127][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.595912][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.605076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.613116][T29530] ldm_validate_partition_table(): Disk read failed. [ 1679.640249][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.649584][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.670942][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1679.680152][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1679.718619][T29463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1679.727121][T29530] Dev loop6: unable to read RDB block 0 [ 1679.756640][T29530] loop6: unable to read partition table [ 1679.765042][T29463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.779964][T29530] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1679.802967][T29463] bridge_slave_0: entered allmulticast mode [ 1679.825050][T29463] bridge_slave_0: entered promiscuous mode [ 1679.877921][T29463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.922867][T29463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.955282][T29463] bridge_slave_1: entered allmulticast mode [ 1679.971297][T29463] bridge_slave_1: entered promiscuous mode [ 1679.988049][ T5238] Bluetooth: hci0: command tx timeout [ 1680.046977][T22362] hsr_slave_0: left promiscuous mode [ 1680.056146][T22362] hsr_slave_1: left promiscuous mode [ 1680.079735][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1680.100413][T22362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1680.114101][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1680.126285][T22362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1680.253215][T22362] veth1_macvtap: left promiscuous mode [ 1680.325046][T22362] veth0_macvtap: left promiscuous mode [ 1680.359269][T22362] veth1_vlan: left promiscuous mode [ 1680.387518][T22362] veth0_vlan: left promiscuous mode [ 1680.522626][ T5300] usb 3-1: USB disconnect, device number 39 [ 1680.675953][ T5285] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1680.876184][ T5285] usb 1-1: Using ep0 maxpacket: 16 [ 1680.890271][ T5285] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1680.899809][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.911626][ T5285] usb 1-1: Product: syz [ 1680.916171][ T5285] usb 1-1: Manufacturer: syz [ 1680.920794][ T5285] usb 1-1: SerialNumber: syz [ 1680.937000][ T5285] usb 1-1: config 0 descriptor?? [ 1680.976194][ T5285] as10x_usb: device has been detected [ 1680.988594][ T5285] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1681.036254][ T5285] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1681.099385][ T5285] as10x_usb: error during firmware upload part1 [ 1681.107992][ T5285] Registered device Sky IT Digital Key (green led) [ 1681.161116][T29562] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1681.199956][T29562] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4411'. [ 1681.790244][T22362] team0 (unregistering): Port device team_slave_1 removed [ 1681.925514][T22362] team0 (unregistering): Port device team_slave_0 removed [ 1682.066352][ T5238] Bluetooth: hci0: command tx timeout [ 1682.935947][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1683.084145][T29463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1683.156002][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1683.177011][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1683.233117][T29463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.233809][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1683.272832][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1683.324577][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1683.369700][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1683.393017][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.561444][ T5300] usb 1-1: USB disconnect, device number 54 [ 1683.650702][ T5300] Unregistered device Sky IT Digital Key (green led) [ 1683.652304][ T5300] as10x_usb: device has been disconnected [ 1683.654364][T29463] team0: Port device team_slave_0 added [ 1683.674424][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 1683.689293][ T8] usbtmc 5-1:16.0: can't read capabilities [ 1683.701918][T29579] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4418'. [ 1683.713317][T29578] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1683.736619][T29463] team0: Port device team_slave_1 added [ 1683.930531][T29572] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.940100][T29572] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.949503][T29572] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1683.958240][T29572] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1684.076542][T29463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1684.083519][T29463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.146014][ T5238] Bluetooth: hci0: command tx timeout [ 1684.198873][ T5237] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1684.241089][T29463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1684.291197][T29579] netlink: 'syz.0.4418': attribute type 1 has an invalid length. [ 1684.301789][T29579] netlink: 'syz.0.4418': attribute type 2 has an invalid length. [ 1684.347490][T29463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1684.354475][T29463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1684.413960][ T5237] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1684.450494][ T5237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.450594][T29463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.481567][ T5237] usb 3-1: Product: syz [ 1684.495898][ T5237] usb 3-1: Manufacturer: syz [ 1684.512083][ T5237] usb 3-1: SerialNumber: syz [ 1684.562493][ T5237] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1684.614264][ T5300] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1684.802049][T29463] hsr_slave_0: entered promiscuous mode [ 1684.872026][T29463] hsr_slave_1: entered promiscuous mode [ 1684.899120][T29463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1684.939715][T29463] Cannot create hsr debugfs directory [ 1685.231449][T15236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1685.256048][T15236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1685.267268][T15236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1685.277112][T15236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1685.286906][T15236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1685.295212][T15236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1685.315632][T22362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.545466][T22362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.670806][ T5300] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1685.688189][ T9] usb 5-1: USB disconnect, device number 26 [ 1685.694608][ T5300] ath9k_htc: Failed to initialize the device [ 1685.816790][ T5300] usb 3-1: ath9k_htc: USB layer deinitialized [ 1685.858335][T22362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.042313][T22362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.356021][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1686.628958][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1686.675934][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1686.723509][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1686.777917][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.777989][ T5300] usb 3-1: USB disconnect, device number 40 [ 1686.831880][T29617] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1686.864301][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1687.062892][T22362] bridge_slave_1: left allmulticast mode [ 1687.089173][T22362] bridge_slave_1: left promiscuous mode [ 1687.101464][T22362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.176513][T22362] bridge_slave_0: left allmulticast mode [ 1687.195893][T22362] bridge_slave_0: left promiscuous mode [ 1687.209538][T22362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.426327][ T5238] Bluetooth: hci2: command tx timeout [ 1688.914369][T20119] usb 5-1: USB disconnect, device number 27 [ 1689.024557][T29607] chnl_net:caif_netlink_parms(): no params data found [ 1689.097859][T29671] FAULT_INJECTION: forcing a failure. [ 1689.097859][T29671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.135173][T22362] hsr_slave_0: left promiscuous mode [ 1689.135365][T29671] CPU: 0 UID: 0 PID: 29671 Comm: syz.4.4434 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1689.151245][T29671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1689.161292][T29671] Call Trace: [ 1689.164577][T29671] [ 1689.167526][T29671] dump_stack_lvl+0x241/0x360 [ 1689.172219][T29671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1689.177413][T29671] ? __pfx__printk+0x10/0x10 [ 1689.181999][T29671] ? snprintf+0xda/0x120 [ 1689.186237][T29671] should_fail_ex+0x3b0/0x4e0 [ 1689.190915][T29671] _copy_to_user+0x2f/0xb0 [ 1689.195322][T29671] simple_read_from_buffer+0xca/0x150 [ 1689.200689][T29671] proc_fail_nth_read+0x1ec/0x260 [ 1689.205707][T29671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.211260][T29671] ? rw_verify_area+0x520/0x6b0 [ 1689.216185][T29671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.221719][T29671] vfs_read+0x204/0xbc0 [ 1689.225869][T29671] ? __pfx_lock_release+0x10/0x10 [ 1689.230890][T29671] ? __pfx_vfs_read+0x10/0x10 [ 1689.235561][T29671] ? __fget_files+0x29/0x470 [ 1689.240149][T29671] ? __fget_files+0x3f6/0x470 [ 1689.244824][T29671] ksys_read+0x1a0/0x2c0 [ 1689.249063][T29671] ? __pfx_ksys_read+0x10/0x10 [ 1689.253814][T29671] ? do_syscall_64+0x100/0x230 [ 1689.258579][T29671] ? do_syscall_64+0xb6/0x230 [ 1689.263251][T29671] do_syscall_64+0xf3/0x230 [ 1689.267747][T29671] ? clear_bhb_loop+0x35/0x90 [ 1689.272420][T29671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.278305][T29671] RIP: 0033:0x7f3bea3788fc [ 1689.282763][T29671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1689.302358][T29671] RSP: 002b:00007f3be9dff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1689.310763][T29671] RAX: ffffffffffffffda RBX: 00007f3bea515f80 RCX: 00007f3bea3788fc [ 1689.318740][T29671] RDX: 000000000000000f RSI: 00007f3be9dff0a0 RDI: 0000000000000004 [ 1689.326711][T29671] RBP: 00007f3be9dff090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.334678][T29671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.342650][T29671] R13: 0000000000000000 R14: 00007f3bea515f80 R15: 00007f3bea63fa28 [ 1689.350639][T29671] [ 1689.367523][T22362] hsr_slave_1: left promiscuous mode [ 1689.373889][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1689.386272][T22362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1689.394066][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1689.401606][T22362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1689.423732][T22362] veth1_macvtap: left promiscuous mode [ 1689.435993][T22362] veth0_macvtap: left promiscuous mode [ 1689.441669][T22362] veth1_vlan: left promiscuous mode [ 1689.456887][T22362] veth0_vlan: left promiscuous mode [ 1689.496248][T29673] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4435'. [ 1689.506224][ T5238] Bluetooth: hci2: command tx timeout [ 1689.876994][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1690.097140][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1690.107047][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.134736][ T9] usb 3-1: Product: syz [ 1690.139164][ T9] usb 3-1: Manufacturer: syz [ 1690.144382][ T9] usb 3-1: SerialNumber: syz [ 1690.169474][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1690.186896][T20119] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1690.841620][T22362] team0 (unregistering): Port device team_slave_1 removed [ 1690.945603][T22362] team0 (unregistering): Port device team_slave_0 removed [ 1691.266026][T20119] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1691.279951][T20119] ath9k_htc: Failed to initialize the device [ 1691.349492][T20119] usb 3-1: ath9k_htc: USB layer deinitialized [ 1691.589315][ T5238] Bluetooth: hci2: command tx timeout [ 1691.990703][T29680] tipc: Started in network mode [ 1692.000141][T29680] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1692.011052][T29680] tipc: Enabled bearer , priority 0 [ 1692.504341][ T9] usb 3-1: USB disconnect, device number 41 [ 1692.526961][T29688] fuse: Bad value for 'group_id' [ 1692.581130][T29688] fuse: Bad value for 'group_id' [ 1692.654844][T29463] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1692.707222][T29607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1692.726624][T29607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.746016][T29607] bridge_slave_0: entered allmulticast mode [ 1692.787439][T29607] bridge_slave_0: entered promiscuous mode [ 1692.823864][T29607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1692.853434][T29607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.860892][T29607] bridge_slave_1: entered allmulticast mode [ 1692.871883][T29607] bridge_slave_1: entered promiscuous mode [ 1692.897214][T29463] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1693.006415][T20119] tipc: Node number set to 11578026 [ 1693.032308][T29463] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1693.072300][T29607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1693.151963][T29607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.181599][T29463] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1693.384292][T29607] team0: Port device team_slave_0 added [ 1693.426554][T29607] team0: Port device team_slave_1 added [ 1693.610074][T29607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.620798][T29607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.660999][T29607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.672032][ T5238] Bluetooth: hci2: command tx timeout [ 1693.711279][T29607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.720068][T29607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.747592][T29607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.877264][T29607] hsr_slave_0: entered promiscuous mode [ 1693.899826][T29607] hsr_slave_1: entered promiscuous mode [ 1693.938812][T29607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1693.972249][T29607] Cannot create hsr debugfs directory [ 1693.978345][ T5238] Bluetooth: Unexpected continuation frame (len 10) [ 1693.979705][T29722] x_tables: duplicate underflow at hook 1 [ 1694.188111][T29728] xt_ipvs: protocol family 7 not supported [ 1694.283689][T29738] netlink: 528 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1694.379615][ T5285] hid-generic 0009:0000:0000.005E: unknown main item tag 0x0 [ 1694.399097][ T5285] hid-generic 0009:0000:0000.005E: unknown main item tag 0x0 [ 1694.435869][ T5285] hid-generic 0009:0000:0000.005E: unknown main item tag 0x0 [ 1694.454143][ T5285] hid-generic 0009:0000:0000.005E: unknown main item tag 0x0 [ 1694.465278][T29463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.485211][ T5285] hid-generic 0009:0000:0000.005E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1694.591439][T29463] 8021q: adding VLAN 0 to HW filter on device team0 [ 1694.672724][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 1694.679856][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1694.835987][T29757] FAULT_INJECTION: forcing a failure. [ 1694.835987][T29757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1694.890641][T29757] CPU: 1 UID: 0 PID: 29757 Comm: syz.0.4451 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1694.901453][T29757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1694.911517][T29757] Call Trace: [ 1694.914784][T29757] [ 1694.917698][T29757] dump_stack_lvl+0x241/0x360 [ 1694.922377][T29757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1694.927558][T29757] ? __pfx__printk+0x10/0x10 [ 1694.932129][T29757] ? __pfx_lock_release+0x10/0x10 [ 1694.937139][T29757] ? __lock_acquire+0x137a/0x2040 [ 1694.942149][T29757] should_fail_ex+0x3b0/0x4e0 [ 1694.946820][T29757] _copy_from_user+0x2f/0xe0 [ 1694.951396][T29757] kstrtouint_from_user+0xc6/0x190 [ 1694.956494][T29757] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1694.962198][T29757] ? __pfx_lock_acquire+0x10/0x10 [ 1694.967211][T29757] proc_fail_nth_write+0xaa/0x2d0 [ 1694.972216][T29757] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1694.978111][T29757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1694.983744][T29757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1694.989466][T29757] vfs_write+0x2a2/0xc90 [ 1694.993703][T29757] ? __pfx_vfs_write+0x10/0x10 [ 1694.998461][T29757] ? __fget_files+0x29/0x470 [ 1695.003038][T29757] ? __fget_files+0x3f6/0x470 [ 1695.007706][T29757] ksys_write+0x1a0/0x2c0 [ 1695.012032][T29757] ? __pfx_ksys_write+0x10/0x10 [ 1695.016884][T29757] ? do_syscall_64+0x100/0x230 [ 1695.021627][T29757] ? do_syscall_64+0xb6/0x230 [ 1695.026284][T29757] do_syscall_64+0xf3/0x230 [ 1695.030770][T29757] ? clear_bhb_loop+0x35/0x90 [ 1695.035433][T29757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.041312][T29757] RIP: 0033:0x7fef4437899f [ 1695.045710][T29757] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1695.065315][T29757] RSP: 002b:00007fef45229030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1695.073715][T29757] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fef4437899f [ 1695.081669][T29757] RDX: 0000000000000001 RSI: 00007fef452290a0 RDI: 0000000000000007 [ 1695.089623][T29757] RBP: 00007fef45229090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.097606][T29757] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1695.105618][T29757] R13: 0000000000000000 R14: 00007fef44515f80 R15: 00007fef4463fa28 [ 1695.113582][T29757] [ 1695.162711][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.169855][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1695.539912][T29463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1695.829010][T29463] veth0_vlan: entered promiscuous mode [ 1695.992461][T29463] veth1_vlan: entered promiscuous mode [ 1696.013643][T29607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1696.047123][T29607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1696.097552][T29607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1696.127506][T29607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1696.208522][T29463] veth0_macvtap: entered promiscuous mode [ 1696.283190][T29463] veth1_macvtap: entered promiscuous mode [ 1696.403185][T29789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4458'. [ 1696.420458][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.436664][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.450104][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.476250][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.495342][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.523515][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.540462][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.552197][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.567783][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1696.579459][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.591696][T29463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1696.637933][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.653230][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.663874][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.679755][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.692153][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.710052][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.724985][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.744031][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.754650][T29463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1696.771530][T29463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1696.788970][T29463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1696.843578][T29463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.854291][T29463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.864084][T29463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.876311][T29463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1696.899823][T29607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.065623][T29607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.107822][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.114946][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.208112][T22362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.214666][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.223150][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.241416][T22362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.372902][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1697.395362][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1697.525229][T29607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1697.669127][T29812] netlink: 'syz.4.4464': attribute type 2 has an invalid length. [ 1697.694920][T29809] tipc: Enabling of bearer rejected, already enabled [ 1697.706434][T29607] veth0_vlan: entered promiscuous mode [ 1697.736099][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.741006][T29607] veth1_vlan: entered promiscuous mode [ 1697.785097][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.824716][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.839323][T29607] veth0_macvtap: entered promiscuous mode [ 1697.853898][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.870475][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.883897][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.898655][T29607] veth1_macvtap: entered promiscuous mode [ 1697.902687][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.947485][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.959333][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1697.971016][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.971034][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.971124][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.971134][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1697.995871][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.011478][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.019581][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.027437][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.033534][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.035822][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.064459][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.083625][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.085980][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.107672][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.119552][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.149924][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.186852][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1698.197009][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.204694][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.306445][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.312613][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.335677][T29834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4469'. [ 1698.352882][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1698.373031][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.378037][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.399322][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.412499][ T9] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1698.413521][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.431698][T29607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1698.462027][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.477718][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.496358][ T9] usb 1-1: Product: syz [ 1698.514435][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.515765][ T9] usb 1-1: Manufacturer: syz [ 1698.526046][T29816] binder: BINDER_SET_CONTEXT_MGR already set [ 1698.536289][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.543854][ T9] usb 1-1: SerialNumber: syz [ 1698.573896][T29816] binder: 29815:29816 ioctl 4018620d 20000100 returned -16 [ 1698.586568][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.607870][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.615284][ T9] usb 1-1: config 0 descriptor?? [ 1698.633294][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.658148][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.700831][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.750522][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.824713][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.847557][T29607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1698.893844][T29607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1698.944820][ T9] usb 1-1: USB disconnect, device number 55 [ 1698.954022][T29607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.014807][T29837] netlink: 528 bytes leftover after parsing attributes in process `syz.2.4470'. [ 1699.038118][T29607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.066135][T29607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.084525][T29607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.095069][T29607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.185446][ T5237] hid-generic 0009:0000:0000.005F: unknown main item tag 0x0 [ 1699.264636][ T5237] hid-generic 0009:0000:0000.005F: unknown main item tag 0x0 [ 1699.277332][ T5237] hid-generic 0009:0000:0000.005F: unknown main item tag 0x0 [ 1699.284803][ T5237] hid-generic 0009:0000:0000.005F: unknown main item tag 0x0 [ 1699.315634][ T5237] hid-generic 0009:0000:0000.005F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1699.358116][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.370888][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.427985][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1699.436519][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1699.652425][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.683559][ T130] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.959020][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1699.984109][ T130] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.155523][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.198144][ T130] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.310615][T15236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1700.326179][T15236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1700.327681][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.346659][T15236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1700.362647][T15236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1700.372953][T15236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1700.373397][ T130] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.394088][T15236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1700.842121][T29857] chnl_net:caif_netlink_parms(): no params data found [ 1700.896060][T29863] loop6: detected capacity change from 0 to 524287999 [ 1700.920689][ C0] blk_print_req_error: 7 callbacks suppressed [ 1700.920707][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.935989][ C0] buffer_io_error: 7 callbacks suppressed [ 1700.936005][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1700.950031][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.959320][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1700.970569][ T130] bridge_slave_1: left allmulticast mode [ 1700.980991][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.990297][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1700.998354][ T130] bridge_slave_1: left promiscuous mode [ 1701.005607][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.014882][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.030320][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.056258][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.065453][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.080976][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.090202][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.100418][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.109744][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.121133][ T130] bridge_slave_0: left allmulticast mode [ 1701.127931][ T130] bridge_slave_0: left promiscuous mode [ 1701.134499][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.143714][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.151823][T29863] ldm_validate_partition_table(): Disk read failed. [ 1701.164930][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.165677][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.174177][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.194206][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.203447][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1701.223834][T29868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1701.225830][T29863] Dev loop6: unable to read RDB block 0 [ 1701.288541][T29863] loop6: unable to read partition table [ 1701.298104][T29863] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1702.186423][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1702.216717][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.250045][ T130] bond0 (unregistering): Released all slaves [ 1702.369169][T29874] vxlan0: entered promiscuous mode [ 1702.468716][T15236] Bluetooth: hci4: command tx timeout [ 1702.521491][ T130] tipc: Disabling bearer [ 1702.534620][ T130] tipc: Left network mode [ 1703.065467][T29857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.084478][T29857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.116080][T29857] bridge_slave_0: entered allmulticast mode [ 1703.143446][T29857] bridge_slave_0: entered promiscuous mode [ 1703.170492][T29857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.189026][T29857] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.205930][T29857] bridge_slave_1: entered allmulticast mode [ 1703.213259][T29857] bridge_slave_1: entered promiscuous mode [ 1703.417364][T29857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.483900][T29857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.613308][T29908] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1703.655867][ T130] hsr_slave_0: left promiscuous mode [ 1703.672683][ T130] hsr_slave_1: left promiscuous mode [ 1703.701927][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1703.722577][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.731087][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1703.743260][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.789342][ T130] veth1_macvtap: left promiscuous mode [ 1703.795234][ T130] veth0_macvtap: left promiscuous mode [ 1703.803015][ T130] veth1_vlan: left promiscuous mode [ 1703.808925][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1703.827961][ T130] veth0_vlan: left promiscuous mode [ 1703.965329][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1703.979943][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1703.990776][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1704.019691][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1704.020307][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1704.039305][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1704.041093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.064274][ T9] usb 2-1: Product: syz [ 1704.067656][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1704.069006][ T9] usb 2-1: Manufacturer: syz [ 1704.101779][ T9] usb 2-1: SerialNumber: syz [ 1704.146787][ T9] usb 2-1: config 0 descriptor?? [ 1704.547027][T15236] Bluetooth: hci4: command tx timeout [ 1704.575459][T29909] syz.1.4490(29909): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1704.784263][ T130] team0 (unregistering): Port device team_slave_1 removed [ 1704.854836][ T130] team0 (unregistering): Port device team_slave_0 removed [ 1705.439088][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 1705.461935][ T9] usb 2-1: Please update to version 0.2 or newer [ 1705.817626][T29914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4491'. [ 1706.022132][ T5300] usb 2-1: USB disconnect, device number 10 [ 1706.058551][T29857] team0: Port device team_slave_0 added [ 1706.071169][T29935] netlink: 'syz.2.4495': attribute type 3 has an invalid length. [ 1706.091817][T29857] team0: Port device team_slave_1 added [ 1706.101339][T29935] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1706.173576][T15236] Bluetooth: hci2: command tx timeout [ 1706.372825][T29857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.401699][T29857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.438340][T29857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.509420][T29857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.537793][T16055] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1706.585444][T29857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.642308][T15236] Bluetooth: hci4: command tx timeout [ 1706.675407][T29951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4497'. [ 1706.745234][T29857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.756071][T16055] usb 3-1: Using ep0 maxpacket: 8 [ 1706.779360][T16055] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=58.36 [ 1706.814031][T16055] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.846051][T16055] usb 3-1: Product: syz [ 1706.868270][T16055] usb 3-1: Manufacturer: syz [ 1706.908358][T16055] usb 3-1: SerialNumber: syz [ 1706.939527][T29962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4498'. [ 1706.952613][T16055] usb 3-1: config 0 descriptor?? [ 1706.996287][T16055] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1707.097959][T29857] hsr_slave_0: entered promiscuous mode [ 1707.143386][T29857] hsr_slave_1: entered promiscuous mode [ 1707.170568][T29857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.199913][T29857] Cannot create hsr debugfs directory [ 1707.269095][T29935] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1707.313943][ T9] usb 3-1: USB disconnect, device number 42 [ 1707.676800][T15236] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1707.687131][T15236] Bluetooth: hci1: Injecting HCI hardware error event [ 1707.696989][ T5238] Bluetooth: hci1: hardware error 0x00 [ 1707.883023][T29918] chnl_net:caif_netlink_parms(): no params data found [ 1708.090715][ T130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.137638][T29990] loop6: detected capacity change from 0 to 524287999 [ 1708.170689][ C1] blk_print_req_error: 7 callbacks suppressed [ 1708.170704][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.185993][ C1] buffer_io_error: 7 callbacks suppressed [ 1708.186014][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.202809][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.212089][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.229006][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.231121][T15236] Bluetooth: hci2: command tx timeout [ 1708.238200][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.255421][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.264646][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.275896][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.285128][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.293396][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.302708][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.315590][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.324797][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.334158][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.343424][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.351323][T29990] ldm_validate_partition_table(): Disk read failed. [ 1708.361423][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.370629][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.383878][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1708.393046][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1708.402905][T29990] Dev loop6: unable to read RDB block 0 [ 1708.415150][T29990] loop6: unable to read partition table [ 1708.421607][T29990] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1708.461003][ T130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.719387][T15236] Bluetooth: hci4: command tx timeout [ 1708.775687][ T130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.041849][T30013] xt_ipvs: protocol family 7 not supported [ 1709.062543][ T130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.151034][T29918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.165969][T29918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.192350][T29918] bridge_slave_0: entered allmulticast mode [ 1709.198551][T16055] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1709.218610][T29918] bridge_slave_0: entered promiscuous mode [ 1709.390195][T29918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.401349][T16055] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1709.423635][T29918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.424518][T16055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.446316][T16055] usb 2-1: Product: syz [ 1709.450836][T16055] usb 2-1: Manufacturer: syz [ 1709.455586][T16055] usb 2-1: SerialNumber: syz [ 1709.470300][T30031] fuse: Bad value for 'user_id' [ 1709.475507][T29918] bridge_slave_1: entered allmulticast mode [ 1709.476846][T16055] usb 2-1: config 0 descriptor?? [ 1709.495559][T30031] fuse: Bad value for 'user_id' [ 1709.504575][T29918] bridge_slave_1: entered promiscuous mode [ 1709.621219][T30034] netlink: 'syz.0.4509': attribute type 3 has an invalid length. [ 1709.638090][T30034] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4509'. [ 1709.668100][T29918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.704749][T29918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.746382][ T5238] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1709.824985][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1709.830644][ T130] bridge_slave_1: left allmulticast mode [ 1709.845676][ T130] bridge_slave_1: left promiscuous mode [ 1709.856392][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.866078][ T130] bridge_slave_0: left allmulticast mode [ 1709.871774][ T130] bridge_slave_0: left promiscuous mode [ 1709.878134][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.027641][ T5300] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1710.035938][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1710.067162][ T9] usb 3-1: config 0 has an invalid interface number: 70 but max is 0 [ 1710.075321][ T9] usb 3-1: config 0 has no interface number 0 [ 1710.084588][ T9] usb 3-1: config 0 interface 70 has no altsetting 0 [ 1710.091670][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1710.106168][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.116914][ T9] usb 3-1: config 0 descriptor?? [ 1710.156825][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1710.246010][ T5300] usb 1-1: Using ep0 maxpacket: 8 [ 1710.284114][ T5300] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=58.36 [ 1710.300827][ T5300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.312106][ T5238] Bluetooth: hci2: command tx timeout [ 1710.321317][ T5300] usb 1-1: Product: syz [ 1710.347578][ T5300] usb 1-1: Manufacturer: syz [ 1710.364616][ T5300] usb 1-1: SerialNumber: syz [ 1710.400278][ T5300] usb 1-1: config 0 descriptor?? [ 1710.420463][ T5300] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1710.824571][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1710.891021][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1710.916441][ T130] bond0 (unregistering): Released all slaves [ 1710.950122][T29918] team0: Port device team_slave_0 added [ 1711.023327][T29918] team0: Port device team_slave_1 added [ 1711.285477][T29857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1711.318735][T29918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.326697][T29918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.368552][T29918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.391551][T29918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.398848][T29918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1711.457097][T29918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.460298][ T9] usb 1-1: USB disconnect, device number 56 [ 1711.530995][T29857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1711.588292][T29857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1711.650620][T30048] input: syz0 as /devices/virtual/input/input111 [ 1711.698195][T30031] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4508'. [ 1711.782400][T25679] udevd[25679]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1711.869272][T29857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1711.877295][ T5286] usb 3-1: USB disconnect, device number 43 [ 1711.954530][T16055] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1711.973508][T16055] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1711.991254][T30054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1712.017008][T16055] f81604 2-1:0.0: probe with driver f81604 failed with error -71 [ 1712.052609][T16055] usb 2-1: USB disconnect, device number 11 [ 1712.062115][T30054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1712.157599][ T130] hsr_slave_0: left promiscuous mode [ 1712.203678][ T130] hsr_slave_1: left promiscuous mode [ 1712.298643][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1712.345092][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1712.364853][T30070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4512'. [ 1712.393580][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1712.402401][ T5238] Bluetooth: hci2: command tx timeout [ 1712.439577][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1712.540749][ T130] veth1_macvtap: left promiscuous mode [ 1712.550131][ T130] veth0_macvtap: left promiscuous mode [ 1712.557538][ T130] veth1_vlan: left promiscuous mode [ 1712.562934][ T130] veth0_vlan: left promiscuous mode [ 1712.885832][ T944] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1713.131989][ T944] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1713.153974][ T944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.205246][ T944] usb 3-1: config 0 descriptor?? [ 1713.692854][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 1713.792385][ T130] team0 (unregistering): Port device team_slave_1 removed [ 1713.937554][ T130] team0 (unregistering): Port device team_slave_0 removed [ 1714.655705][T29918] hsr_slave_0: entered promiscuous mode [ 1714.679462][T29918] hsr_slave_1: entered promiscuous mode [ 1714.695439][T29918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1714.703239][T29918] Cannot create hsr debugfs directory [ 1714.828455][ T944] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1714.845487][ T944] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1714.900182][ T944] [drm:udl_init] *ERROR* Selecting channel failed [ 1714.937841][ T944] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1714.945082][ T944] [drm] Initialized udl on minor 2 [ 1714.951792][ T944] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1714.965070][ T944] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1714.993057][ T5286] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1715.019288][T30094] netlink: 'syz.0.4518': attribute type 3 has an invalid length. [ 1715.049935][ T5286] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1715.057600][T30094] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1715.059259][ T944] usb 3-1: USB disconnect, device number 44 [ 1715.536279][ T5286] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1715.639821][ T5237] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1715.770089][T29857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.772692][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 1715.814335][T29857] 8021q: adding VLAN 0 to HW filter on device team0 [ 1715.829271][ T5286] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=58.36 [ 1715.848732][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.867992][ T5237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1715.889893][T30113] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4520'. [ 1715.902144][ T5286] usb 1-1: Product: syz [ 1715.915496][ T5286] usb 1-1: Manufacturer: syz [ 1715.926348][ T5286] usb 1-1: SerialNumber: syz [ 1715.935576][ T130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.942756][ T130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1715.951304][ T5237] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1715.977629][ T5286] usb 1-1: config 0 descriptor?? [ 1715.978194][ T5237] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1715.999814][ T5286] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1716.033352][ T5237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.077760][ T5237] usb 2-1: Product: syz [ 1716.115179][ T5237] usb 2-1: Manufacturer: syz [ 1716.144982][ T5237] usb 2-1: SerialNumber: syz [ 1716.151262][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.158459][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.168452][ T5237] usb 2-1: config 0 descriptor?? [ 1716.175157][T30100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1716.184642][T30100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1716.274998][T30094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1716.310523][T20119] usb 1-1: USB disconnect, device number 58 [ 1716.544992][T30100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1716.553254][T30100] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1716.644243][T29857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.681054][T29918] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1716.698301][T29918] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1716.713526][T29918] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1716.732810][T29918] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1716.814916][T29857] veth0_vlan: entered promiscuous mode [ 1716.853333][T29857] veth1_vlan: entered promiscuous mode [ 1716.876160][ T5286] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1717.028024][T29857] veth0_macvtap: entered promiscuous mode [ 1717.066036][ T5286] usb 3-1: Using ep0 maxpacket: 32 [ 1717.073200][T29857] veth1_macvtap: entered promiscuous mode [ 1717.073725][ T5286] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1717.120002][ T5286] usb 3-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice=be.0d [ 1717.143072][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1717.166500][ T5286] usb 3-1: Product: syz [ 1717.171100][ T5286] usb 3-1: Manufacturer: syz [ 1717.193509][ T5286] usb 3-1: SerialNumber: syz [ 1717.224305][ T5286] usb 3-1: config 0 descriptor?? [ 1717.231622][T29918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.248750][ T5286] usb 3-1: active config #0 != 1 ?? [ 1717.271946][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.299119][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.341035][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.363688][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.399733][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.429363][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.450980][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.473144][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.502819][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1717.537440][ T944] usb 3-1: USB disconnect, device number 45 [ 1717.540777][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.580427][T29857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1717.648516][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.677753][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.707807][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.730882][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.742680][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.754269][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.768894][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.780642][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.793968][T29857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1717.802139][ T5286] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1717.811443][T29857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1717.844761][T29857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1717.891419][T29857] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.907959][T29857] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.918304][T29857] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.927333][T29857] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.963143][T29918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.016093][ T5286] usb 1-1: Using ep0 maxpacket: 32 [ 1718.035690][ T5286] usb 1-1: config 0 has no interfaces? [ 1718.041418][ T5286] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1718.056281][ T1823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.063496][ T1823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.080147][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.171743][ T5286] usb 1-1: config 0 descriptor?? [ 1718.219169][ T1823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.226401][ T1823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1718.290470][ T5237] Error reading MAC address [ 1718.354662][ T5237] usb 2-1: USB disconnect, device number 12 [ 1718.419193][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.464582][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.475269][T30152] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1718.516730][T30143] usb 1-1: USB disconnect, device number 59 [ 1718.598755][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.632443][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.688254][T29918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.796485][T29918] veth0_vlan: entered promiscuous mode [ 1718.816976][T30158] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33524742, 8, 0, 0, 0) [ 1718.870619][T29918] veth1_vlan: entered promiscuous mode [ 1718.996875][T29918] veth0_macvtap: entered promiscuous mode [ 1719.019523][T29918] veth1_macvtap: entered promiscuous mode [ 1719.065585][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.086750][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.121546][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.151606][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.192095][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.233302][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.272201][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.303780][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.320176][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.340082][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.368192][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1719.402135][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.429095][T29918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1719.496811][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.537335][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.577712][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.616525][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.637184][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.657891][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.681892][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.693854][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.704266][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.719360][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.735857][T29918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1719.754361][T29918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1719.804979][T29918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1719.867842][T29918] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.905287][T29918] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.936574][T29918] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.979915][T29918] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.250338][T30196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4531'. [ 1720.663025][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.706413][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.815325][T22362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.053007][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.082477][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.191648][T22362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.547868][ T8] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1721.598432][T22362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.789359][T22362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1721.813309][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1721.863741][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1721.881365][T30228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4488'. [ 1721.884788][ T8] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1721.933751][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.993008][ T8] usb 1-1: config 0 descriptor?? [ 1722.120987][T15236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1722.149968][T15236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1722.167220][T15236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1722.178436][T15236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1722.201198][T15236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1722.209638][T15236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1722.311827][T30239] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1722.383741][T30237] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1722.490476][T22362] bridge_slave_1: left allmulticast mode [ 1722.526535][T22362] bridge_slave_1: left promiscuous mode [ 1722.540837][T22362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.597503][T22362] bridge_slave_0: left allmulticast mode [ 1722.603259][T22362] bridge_slave_0: left promiscuous mode [ 1722.616728][T30252] binder: BINDER_SET_CONTEXT_MGR already set [ 1722.623092][T30252] binder: 30250:30252 ioctl 4018620d 20000040 returned -16 [ 1722.655964][T22362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.667297][ T8] usb 1-1: language id specifier not provided by device, defaulting to English [ 1723.205946][ T5286] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1723.307783][T30216] input: syz1 as /devices/virtual/input/input112 [ 1723.402500][ T8] uclogic 0003:256C:006D.0060: failed retrieving string descriptor #100: -71 [ 1723.420233][ T5286] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1723.430188][ T8] uclogic 0003:256C:006D.0060: failed retrieving pen parameters: -71 [ 1723.467362][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.475496][ T8] uclogic 0003:256C:006D.0060: failed probing pen v1 parameters: -71 [ 1723.496875][ T5286] usb 4-1: config 0 descriptor?? [ 1723.502664][ T8] uclogic 0003:256C:006D.0060: failed probing parameters: -71 [ 1723.518418][ T8] uclogic 0003:256C:006D.0060: probe with driver uclogic failed with error -71 [ 1723.557473][ T8] usb 1-1: USB disconnect, device number 60 [ 1724.002301][T22362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1724.029763][T22362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1724.058979][T22362] bond0 (unregistering): Released all slaves [ 1724.099967][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4545'. [ 1724.150514][T30279] geneve2: entered promiscuous mode [ 1724.186863][T30279] geneve2: entered allmulticast mode [ 1724.317402][ T5238] Bluetooth: hci0: command tx timeout [ 1724.321108][T30288] ip6tnl1: entered promiscuous mode [ 1724.338712][T30288] ip6tnl1: entered allmulticast mode [ 1724.580662][ T5300] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1724.659653][ T5286] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1724.694580][ T5286] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1724.734744][ T5286] [drm:udl_init] *ERROR* Selecting channel failed [ 1724.777341][ T5300] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.793220][ T5286] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1724.797947][ T5300] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1724.809449][ T5300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.820313][ T5300] usb 3-1: Product: syz [ 1724.824480][ T5300] usb 3-1: Manufacturer: syz [ 1724.830108][ T5300] usb 3-1: SerialNumber: syz [ 1724.841645][ T5300] usb 3-1: bad CDC descriptors [ 1724.882457][ T5286] [drm] Initialized udl on minor 2 [ 1724.939926][T22362] hsr_slave_0: left promiscuous mode [ 1724.944785][ T5286] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1724.964426][T22362] hsr_slave_1: left promiscuous mode [ 1724.974187][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1725.006943][ T5286] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1725.011189][T22362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1725.044076][T30299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1725.072149][ T5286] usb 4-1: USB disconnect, device number 30 [ 1725.078336][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1725.102703][T30299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1725.103580][T22362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.123157][T30318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4550'. [ 1725.138386][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1725.174915][T22362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.212390][ T5300] usb 3-1: USB disconnect, device number 46 [ 1725.348855][T22362] veth1_macvtap: left promiscuous mode [ 1725.365199][T22362] veth0_macvtap: left promiscuous mode [ 1725.390904][T22362] veth1_vlan: left promiscuous mode [ 1725.420235][T22362] veth0_vlan: left promiscuous mode [ 1725.667634][T30344] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1725.893064][T30349] input: syz0 as /devices/virtual/input/input113 [ 1726.392488][ T5238] Bluetooth: hci0: command tx timeout [ 1726.617394][T22362] team0 (unregistering): Port device team_slave_1 removed [ 1726.704305][T22362] team0 (unregistering): Port device team_slave_0 removed [ 1727.522412][T30305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4548'. [ 1727.557303][T30333] netlink: 'syz.2.4551': attribute type 29 has an invalid length. [ 1728.053833][T30244] chnl_net:caif_netlink_parms(): no params data found [ 1728.234073][T30384] netlink: 'syz.0.4564': attribute type 3 has an invalid length. [ 1728.260103][ T5237] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1728.280413][T30384] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1728.366123][T30244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.391821][T30244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.401411][T30244] bridge_slave_0: entered allmulticast mode [ 1728.414731][T30244] bridge_slave_0: entered promiscuous mode [ 1728.427506][T30244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.434753][T30244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.445024][T30244] bridge_slave_1: entered allmulticast mode [ 1728.466744][T30244] bridge_slave_1: entered promiscuous mode [ 1728.466768][ T5238] Bluetooth: hci0: command tx timeout [ 1728.478266][ T5237] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1728.478298][ T5237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.480478][ T5237] usb 4-1: config 0 descriptor?? [ 1728.576569][ T8] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1728.629904][T30402] loop6: detected capacity change from 0 to 524287999 [ 1728.665320][T30244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.685018][ C1] blk_print_req_error: 7 callbacks suppressed [ 1728.685039][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.700950][ C1] buffer_io_error: 7 callbacks suppressed [ 1728.700967][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.720998][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.730336][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.741702][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.751002][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.764838][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.774066][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.786409][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.795648][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.799913][T30244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1728.807470][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.821689][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.830953][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.840141][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.848395][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1728.855012][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.864296][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.874064][T30402] ldm_validate_partition_table(): Disk read failed. [ 1728.888032][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.897354][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.905593][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1728.914831][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1728.924069][T30402] Dev loop6: unable to read RDB block 0 [ 1728.931702][T30402] loop6: unable to read partition table [ 1728.946062][T30402] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1728.959036][ T8] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=58.36 [ 1728.976197][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.994757][ T8] usb 1-1: Product: syz [ 1728.995640][ T4687] ldm_validate_partition_table(): Disk read failed. [ 1729.004918][ T8] usb 1-1: Manufacturer: syz [ 1729.018048][ T4687] Dev loop6: unable to read RDB block 0 [ 1729.024767][ T4687] loop6: unable to read partition table [ 1729.025128][ T8] usb 1-1: SerialNumber: syz [ 1729.148434][ T8] usb 1-1: config 0 descriptor?? [ 1729.169800][ T8] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1729.179510][ T5237] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1729.189051][T30413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1729.225314][ T5237] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1729.256552][ T5237] [drm:udl_init] *ERROR* Selecting channel failed [ 1729.286083][T30244] team0: Port device team_slave_0 added [ 1729.314815][T30244] team0: Port device team_slave_1 added [ 1729.357099][ T5237] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1729.383762][ T5237] [drm] Initialized udl on minor 2 [ 1729.407456][ T5237] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1729.428862][T30384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4564'. [ 1729.447446][ T5237] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1729.447950][ T5286] usb 1-1: USB disconnect, device number 61 [ 1729.462913][T30244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.469038][ T5300] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1729.483205][ T5237] usb 4-1: USB disconnect, device number 31 [ 1729.486107][T30244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.508687][ T5300] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1729.555683][T30244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.620446][T30244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.636866][T30244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.663374][T30244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1729.890797][T30244] hsr_slave_0: entered promiscuous mode [ 1729.922422][T30244] hsr_slave_1: entered promiscuous mode [ 1729.976203][T30244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1730.016907][T30244] Cannot create hsr debugfs directory [ 1730.137773][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4575'. [ 1730.154851][T30447] PKCS8: Unsupported PKCS#8 version [ 1730.213361][T30447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4575'. [ 1730.548384][ T5238] Bluetooth: hci0: command tx timeout [ 1730.554204][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.564030][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.572279][ T30] INFO: task syz.2.4091:27917 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1730.606020][ T5286] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1730.669030][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1730.710410][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1730.796067][ T30] task:syz.2.4091 state:D stack:25632 pid:27917 tgid:27917 ppid:27008 flags:0x00000004 [ 1730.825953][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 1730.851839][ T30] Call Trace: [ 1730.855198][ T30] [ 1730.876374][ T30] __schedule+0x1800/0x4a60 [ 1730.881015][ T30] ? __pfx___schedule+0x10/0x10 [ 1730.905981][ T30] ? __pfx_lock_release+0x10/0x10 [ 1730.911128][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1730.948652][ T30] ? schedule+0x90/0x320 [ 1730.953023][ T30] schedule+0x14b/0x320 [ 1730.965792][ T30] schedule_preempt_disabled+0x13/0x30 [ 1730.971336][ T30] __mutex_lock+0x6a4/0xd70 [ 1730.978184][ T30] ? __mutex_lock+0x527/0xd70 [ 1730.982928][ T30] ? hugetlb_fault+0x56f/0x3770 [ 1730.988489][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1730.993587][ T30] ? __lock_acquire+0x137a/0x2040 [ 1730.999763][ T30] hugetlb_fault+0x56f/0x3770 [ 1731.004540][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1731.010367][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1731.015994][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 1731.021293][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1731.027233][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1731.032243][ T30] ? mtree_range_walk+0x6fd/0x8e0 [ 1731.039554][ T30] ? __pfx_lock_release+0x10/0x10 [ 1731.044673][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 1731.049960][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1731.055291][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 1731.060710][ T30] ? lock_vma_under_rcu+0x18a/0x6e0 [ 1731.067091][ T30] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1731.072672][ T30] ? exc_page_fault+0x113/0x8c0 [ 1731.077745][ T30] exc_page_fault+0x459/0x8c0 [ 1731.082501][ T30] asm_exc_page_fault+0x26/0x30 [ 1731.087422][ T30] RIP: 0033:0x7f4f5cb4193c [ 1731.091938][ T30] RSP: 002b:00007f4f5ce3fb88 EFLAGS: 00010246 [ 1731.098246][ T30] RAX: 0000000020000d00 RBX: 0000000000000004 RCX: 8000000000000010 [ 1731.107645][ T30] RDX: 0000000000000010 RSI: 00007f4f5c6005d7 RDI: 0000000020000d00 [ 1731.115641][ T30] RBP: 00007f4f5cd17a80 R08: 00007f4f5ca00000 R09: 0000000000000001 [ 1731.123876][ T30] R10: 0000000000000001 R11: 0000000000000009 R12: 000000000018357c [ 1731.135873][ T30] R13: 00007f4f5ce3fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 1731.151353][ T30] [ 1731.154763][ T30] INFO: task syz.2.4091:27918 blocked for more than 143 seconds. [ 1731.162578][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1731.170679][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1731.179517][ T30] task:syz.2.4091 state:D stack:25616 pid:27918 tgid:27917 ppid:27008 flags:0x00004004 [ 1731.193545][ T30] Call Trace: [ 1731.196974][ T30] [ 1731.199955][ T30] __schedule+0x1800/0x4a60 [ 1731.204517][ T30] ? __pfx___schedule+0x10/0x10 [ 1731.209473][ T30] ? __pfx_lock_release+0x10/0x10 [ 1731.214523][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1731.221989][ T30] ? schedule+0x90/0x320 [ 1731.226405][ T30] schedule+0x14b/0x320 [ 1731.230593][ T30] schedule_preempt_disabled+0x13/0x30 [ 1731.236139][ T30] __mutex_lock+0x6a4/0xd70 [ 1731.242233][ T30] ? __lock_acquire+0x137a/0x2040 [ 1731.247381][ T30] ? __mutex_lock+0x527/0xd70 [ 1731.252131][ T30] ? hugetlb_fault+0x56f/0x3770 [ 1731.257088][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1731.262136][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1731.268617][ T30] hugetlb_fault+0x56f/0x3770 [ 1731.273412][ T30] ? irqentry_exit+0x63/0x90 [ 1731.278153][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1731.283315][ T30] ? mt_find+0x226/0x850 [ 1731.287835][ T30] ? __pfx_lock_release+0x10/0x10 [ 1731.292900][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1731.298047][ T30] ? mt_find+0x62d/0x850 [ 1731.302310][ T30] ? mt_find+0x226/0x850 [ 1731.306701][ T30] ? __pfx_mt_find+0x10/0x10 [ 1731.311395][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1731.316810][ T30] ? find_vma+0xf9/0x170 [ 1731.321079][ T30] ? __pfx_find_vma+0x10/0x10 [ 1731.327367][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1731.333859][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1731.339282][ T30] exc_page_fault+0x2b9/0x8c0 [ 1731.346051][ T30] asm_exc_page_fault+0x26/0x30 [ 1731.350950][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1731.356937][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1731.376785][ T30] RSP: 0018:ffffc9000963fad0 EFLAGS: 00050246 [ 1731.382870][ T30] RAX: ffffffff84b28901 RBX: 000000002003af00 RCX: 0000000000000040 [ 1731.391092][ T30] RDX: 0000000000000000 RSI: ffffc9000963fb60 RDI: 000000002003aec0 [ 1731.399170][ T30] RBP: ffffc9000963fc10 R08: ffffc9000963fb9f R09: 1ffff920012c7f73 [ 1731.407355][ T30] R10: dffffc0000000000 R11: fffff520012c7f74 R12: 0000000000000040 [ 1731.415437][ T30] R13: 0000000000007440 R14: 000000002003aec0 R15: ffffc9000963fb60 [ 1731.423516][ T30] ? _copy_to_user+0x51/0xb0 [ 1731.428745][ T30] _copy_to_user+0x86/0xb0 [ 1731.433220][ T30] rng_dev_read+0x3be/0x6d0 [ 1731.438425][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1731.443571][ T30] ? security_file_permission+0x7f/0xa0 [ 1731.450953][ T30] ? rw_verify_area+0x52a/0x6b0 [ 1731.455933][ T30] vfs_readv+0x6c2/0xa90 [ 1731.460211][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1731.465264][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 1731.470117][ T30] ? __fget_files+0x29/0x470 [ 1731.474729][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 1731.479686][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1731.485081][ T30] ? do_syscall_64+0x100/0x230 [ 1731.489960][ T30] ? do_syscall_64+0xb6/0x230 [ 1731.494663][ T30] do_syscall_64+0xf3/0x230 [ 1731.499352][ T30] ? clear_bhb_loop+0x35/0x90 [ 1731.504059][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.510368][ T30] RIP: 0033:0x7f4f5cb79eb9 [ 1731.514897][ T30] RSP: 002b:00007f4f5d915038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1731.523470][ T30] RAX: ffffffffffffffda RBX: 00007f4f5cd15f80 RCX: 00007f4f5cb79eb9 [ 1731.531539][ T30] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 1731.539610][ T30] RBP: 00007f4f5cbe793e R08: 0000000000000000 R09: 0000000000000000 [ 1731.551197][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1731.559292][ T30] R13: 0000000000000000 R14: 00007f4f5cd15f80 R15: 00007f4f5ce3fa28 [ 1731.567348][ T30] [ 1731.570415][ T30] INFO: task syz.2.4091:27920 blocked for more than 144 seconds. [ 1731.626033][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1731.687683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1731.735890][ T30] task:syz.2.4091 state:D stack:25552 pid:27920 tgid:27917 ppid:27008 flags:0x00004006 [ 1731.805836][ T30] Call Trace: [ 1731.809261][ T30] [ 1731.812207][ T30] __schedule+0x1800/0x4a60 [ 1731.895868][ T30] ? __pfx___schedule+0x10/0x10 [ 1731.900800][ T30] ? __pfx_lock_release+0x10/0x10 [ 1731.965891][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1731.971428][ T30] ? schedule+0x90/0x320 [ 1731.975693][ T30] schedule+0x14b/0x320 [ 1732.055555][ T30] schedule_preempt_disabled+0x13/0x30 [ 1732.097786][ T30] __mutex_lock+0x6a4/0xd70 [ 1732.102360][ T30] ? __mutex_lock+0x527/0xd70 [ 1732.145950][ T30] ? hugetlb_wp+0x104d/0x3a90 [ 1732.150691][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1732.165842][ T30] ? __pfx_up_write+0x10/0x10 [ 1732.170579][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1732.176332][ T30] ? vma_interval_tree_iter_next+0x193/0x340 [ 1732.182355][ T30] hugetlb_wp+0x104d/0x3a90 [ 1732.187416][ T30] ? mark_lock+0x9a/0x350 [ 1732.195855][ T30] ? __pfx_hugetlb_wp+0x10/0x10 [ 1732.200761][ T30] ? __pfx___might_resched+0x10/0x10 [ 1732.206723][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1732.212052][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1732.217658][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1732.223072][ T30] ? __filemap_get_folio+0x769/0xc10 [ 1732.229253][ T30] hugetlb_fault+0x27b2/0x3770 [ 1732.234073][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1732.241615][ T30] ? mt_find+0x226/0x850 [ 1732.246151][ T30] ? __pfx_lock_release+0x10/0x10 [ 1732.251278][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1732.266485][ T30] ? mt_find+0x62d/0x850 [ 1732.270803][ T30] ? mt_find+0x226/0x850 [ 1732.275103][ T30] ? __pfx_mt_find+0x10/0x10 [ 1732.282891][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1732.288565][ T30] ? find_vma+0xf9/0x170 [ 1732.293337][ T30] ? __pfx_find_vma+0x10/0x10 [ 1732.304811][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1732.312201][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1732.325767][ T30] exc_page_fault+0x2b9/0x8c0 [ 1732.330559][ T30] asm_exc_page_fault+0x26/0x30 [ 1732.335557][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1732.350998][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1732.385678][ T30] RSP: 0018:ffffc900046d7ad0 EFLAGS: 00050246 [ 1732.392454][ T30] RAX: ffffffff84b28901 RBX: 0000000020005880 RCX: 0000000000000040 [ 1732.412447][ T30] RDX: 0000000000000000 RSI: ffffc900046d7b60 RDI: 0000000020005840 [ 1732.423607][ T30] RBP: ffffc900046d7c10 R08: ffffc900046d7b9f R09: 1ffff920008daf73 [ 1732.436289][ T30] R10: dffffc0000000000 R11: fffff520008daf74 R12: 0000000000000040 [ 1732.444348][ T30] R13: 0000000000005200 R14: 0000000020005840 R15: ffffc900046d7b60 [ 1732.461052][ T30] ? _copy_to_user+0x51/0xb0 [ 1732.473278][ T30] _copy_to_user+0x86/0xb0 [ 1732.481003][ T30] rng_dev_read+0x3be/0x6d0 [ 1732.485607][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1732.491426][ T30] ? security_file_permission+0x7f/0xa0 [ 1732.497446][ T30] ? rw_verify_area+0x52a/0x6b0 [ 1732.502352][ T30] vfs_readv+0x6c2/0xa90 [ 1732.507326][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 1732.512421][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 1732.517908][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1732.523986][ T30] ? irqentry_exit+0x63/0x90 [ 1732.529365][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1732.534649][ T30] ? __x64_sys_preadv+0x1ad/0x2d0 [ 1732.540571][ T30] __x64_sys_preadv+0x1c7/0x2d0 [ 1732.545494][ T30] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1732.551646][ T30] ? do_syscall_64+0x100/0x230 [ 1732.556967][ T30] ? do_syscall_64+0xb6/0x230 [ 1732.561715][ T30] do_syscall_64+0xf3/0x230 [ 1732.566994][ T30] ? clear_bhb_loop+0x35/0x90 [ 1732.573571][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.580221][ T30] RIP: 0033:0x7f4f5cb79eb9 [ 1732.584706][ T30] RSP: 002b:00007f4f5d8f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1732.593915][ T30] RAX: ffffffffffffffda RBX: 00007f4f5cd16058 RCX: 00007f4f5cb79eb9 [ 1732.603101][ T30] RDX: 0000000000000002 RSI: 0000000020000580 RDI: 0000000000000005 [ 1732.611282][ T30] RBP: 00007f4f5cbe793e R08: 0000000000000000 R09: 0000000000000000 [ 1732.619438][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1732.627769][ T30] R13: 0000000000000000 R14: 00007f4f5cd16058 R15: 00007f4f5ce3fa28 [ 1732.635947][ T30] [ 1732.639094][ T30] INFO: task syz.2.4091:27923 blocked for more than 145 seconds. [ 1732.648728][ T30] Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1732.656870][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1732.665580][ T30] task:syz.2.4091 state:D stack:22800 pid:27923 tgid:27917 ppid:27008 flags:0x00004006 [ 1732.677841][ T30] Call Trace: [ 1732.681171][ T30] [ 1732.684150][ T30] __schedule+0x1800/0x4a60 [ 1732.688796][ T30] ? __pfx___schedule+0x10/0x10 [ 1732.693705][ T30] ? __pfx_lock_release+0x10/0x10 [ 1732.699617][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1732.705672][ T30] ? schedule+0x90/0x320 [ 1732.710409][ T30] schedule+0x14b/0x320 [ 1732.714606][ T30] io_schedule+0x8d/0x110 [ 1732.719625][ T30] folio_wait_bit_common+0x882/0x12b0 [ 1732.725043][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1732.730952][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 1732.736654][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1732.741528][ T30] ? __vma_reservation_common+0x498/0x7d0 [ 1732.747447][ T30] __filemap_get_folio+0xb7/0xc10 [ 1732.752500][ T30] hugetlb_fault+0x1b72/0x3770 [ 1732.757413][ T30] ? __pfx_hugetlb_fault+0x10/0x10 [ 1732.762584][ T30] ? mt_find+0x226/0x850 [ 1732.766921][ T30] ? __pfx_lock_release+0x10/0x10 [ 1732.771975][ T30] handle_mm_fault+0x1901/0x1bc0 [ 1732.778631][ T30] ? mt_find+0x62d/0x850 [ 1732.782952][ T30] ? mt_find+0x226/0x850 [ 1732.787843][ T30] ? __pfx_mt_find+0x10/0x10 [ 1732.792533][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1732.797981][ T30] ? find_vma+0xf9/0x170 [ 1732.802253][ T30] ? __pfx_find_vma+0x10/0x10 [ 1732.807013][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1732.813373][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 1732.818786][ T30] exc_page_fault+0x2b9/0x8c0 [ 1732.823494][ T30] asm_exc_page_fault+0x26/0x30 [ 1732.834945][ T30] RIP: 0010:__put_user_8+0x11/0x20 [ 1732.840253][ T30] Code: 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 1732.860314][ T30] RSP: 0018:ffffc9000512f778 EFLAGS: 00050202 [ 1732.866501][ T30] RAX: 0000000000800000 RBX: 0000000000000000 RCX: 0000000020000020 [ 1732.874501][ T30] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608d40 [ 1732.884966][ T30] RBP: ffffc9000512fec8 R08: ffffffff90186f2f R09: 1ffffffff2030de5 [ 1732.893041][ T30] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: 1ffff92000a25f7d [ 1732.901699][ T30] R13: 1ffff92000a25f08 R14: 0000000020800000 R15: 0000000000800000 [ 1732.911557][ T30] userfaultfd_ioctl+0x28e7/0x70a0 [ 1732.916831][ T30] ? stack_trace_save+0x118/0x1d0 [ 1732.921889][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1732.927479][ T30] ? stack_depot_save_flags+0x29/0x830 [ 1732.932974][ T30] ? kasan_save_track+0x51/0x80 [ 1732.937937][ T30] ? kasan_save_track+0x3f/0x80 [ 1732.942890][ T30] ? kasan_save_free_info+0x40/0x50 [ 1732.948384][ T30] ? poison_slab_object+0xe0/0x150 [ 1732.953523][ T30] ? __kasan_slab_free+0x37/0x60 [ 1732.958627][ T30] ? kfree+0x149/0x360 [ 1732.962716][ T30] ? tomoyo_path_number_perm+0x68d/0x880 [ 1732.968543][ T30] ? security_file_ioctl+0x75/0xb0 [ 1732.973694][ T30] ? __se_sys_ioctl+0x47/0x170 [ 1732.978540][ T30] ? do_syscall_64+0xf3/0x230 [ 1732.984137][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.990870][ T30] ? do_vfs_ioctl+0xf0e/0x2e50 [ 1732.995688][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1733.000900][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1733.007480][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1733.013150][ T30] ? __pfx_lock_release+0x10/0x10 [ 1733.020211][ T30] ? kfree+0x149/0x360 [ 1733.024327][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 1733.030687][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1733.036829][ T30] ? __fget_files+0x29/0x470 [ 1733.041614][ T30] ? __fget_files+0x3f6/0x470 [ 1733.046361][ T30] ? __fget_files+0x29/0x470 [ 1733.050967][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1733.056018][ T30] ? security_file_ioctl+0x87/0xb0 [ 1733.061156][ T30] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 1733.066713][ T30] __se_sys_ioctl+0xfc/0x170 [ 1733.071307][ T30] do_syscall_64+0xf3/0x230 [ 1733.075894][ T30] ? clear_bhb_loop+0x35/0x90 [ 1733.080597][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.089380][ T30] RIP: 0033:0x7f4f5cb79eb9 [ 1733.093953][ T30] RSP: 002b:00007f4f5d8d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.102694][ T30] RAX: ffffffffffffffda RBX: 00007f4f5cd16130 RCX: 00007f4f5cb79eb9 [ 1733.114608][ T30] RDX: 0000000020000000 RSI: 00000000c028aa03 RDI: 0000000000000009 [ 1733.122869][ T30] RBP: 00007f4f5cbe793e R08: 0000000000000000 R09: 0000000000000000 [ 1733.132393][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1733.140474][ T30] R13: 0000000000000000 R14: 00007f4f5cd16130 R15: 00007f4f5ce3fa28 [ 1733.148502][ T30] [ 1733.151556][ T30] [ 1733.151556][ T30] Showing all locks held in the system: [ 1733.171471][ T30] 4 locks held by rcu_exp_gp_kthr/19: [ 1733.177046][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 1733.190859][ T30] #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 1733.209904][ T30] #2: ffff8880b882c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 1733.220971][ T30] #3: ffffffff8e952048 (tk_core.seq.seqcount){----}-{0:0}, at: timekeeping_get_ns+0x5c/0x420 [ 1733.231852][ T30] 1 lock held by khungtaskd/30: [ 1733.238784][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1733.248991][ T30] 3 locks held by kworker/u8:3/53: [ 1733.254147][ T30] #0: ffff88802f9a2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1733.265958][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1733.279763][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1733.291828][ T30] 1 lock held by dhcpcd/4901: [ 1733.296596][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 1733.306591][ T30] 2 locks held by getty/4983: [ 1733.311373][ T30] #0: ffff88803002c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1733.321281][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 1733.331672][ T30] 5 locks held by kworker/0:7/5286: [ 1733.337198][ T30] #0: ffff8880212ccd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1733.350557][ T30] #1: ffffc90003fefd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1733.362719][ T30] #2: ffff888029408190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1733.371774][ T30] #3: ffff88802940a518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1733.381883][ T30] #4: ffff888028c3f768 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1733.393169][ T30] 3 locks held by kworker/u8:7/22362: [ 1733.398648][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1733.410500][ T30] #1: ffffc90003267d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1733.421562][ T30] #2: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1733.430820][ T30] 2 locks held by syz.2.4091/27917: [ 1733.436068][ T30] #0: ffff888030505658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 1733.446467][ T30] #1: ffff888020eec068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1733.459233][ T30] 2 locks held by syz.2.4091/27918: [ 1733.464452][ T30] #0: ffff888034eaa798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1733.474671][ T30] #1: ffff888020eec068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1733.485580][ T30] 2 locks held by syz.2.4091/27920: [ 1733.490885][ T30] #0: ffff888034eaa798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1733.502611][ T30] #1: ffff888020eec068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_wp+0x104d/0x3a90 [ 1733.513898][ T30] 3 locks held by syz.2.4091/27923: [ 1733.519158][ T30] #0: ffff888034eaa798 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 1733.529460][ T30] #1: ffff888020eec068 (&hugetlb_fault_mutex_table[i]){+.+.}-{3:3}, at: hugetlb_fault+0x56f/0x3770 [ 1733.540313][ T30] #2: ffff88806f4040e8 (&resv_map->rw_sema){++++}-{3:3}, at: hugetlb_fault+0x675/0x3770 [ 1733.550266][ T30] 3 locks held by syz-executor/29044: [ 1733.555792][ T30] #0: ffff888011f2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1733.566214][ T30] #1: ffff888011f2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1733.577515][ T30] #2: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1733.587799][ T30] 7 locks held by syz-executor/30244: [ 1733.593192][ T30] #0: ffff888045cc2420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 1733.605075][ T30] #1: ffff888060b05088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 1733.615073][ T30] #2: ffff888028a6bf08 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 1733.625370][ T30] #3: ffffffff8f526348 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1733.635917][ T30] #4: ffff8880311b50e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1733.646578][ T30] #5: ffff888040904250 (&devlink->lock_key#178){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1733.656997][ T30] #6: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1733.666292][ T30] 2 locks held by syz.3.4572/30436: [ 1733.671529][ T30] #0: ffff888048f94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1733.682030][ T30] #1: ffff888048f94078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1733.692178][ T30] 2 locks held by syz.0.4576/30453: [ 1733.697505][ T30] #0: ffffffff8fc8bd48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 1733.707549][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 1733.719611][ T30] 3 locks held by syz.4.4577/30458: [ 1733.724847][ T30] #0: ffff8880259a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1733.734898][ T30] #1: ffff8880259a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1733.744692][ T30] #2: ffffffff8fdf7828 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1733.756192][ T30] [ 1733.766870][ T30] ============================================= [ 1733.766870][ T30] [ 1733.775366][ T30] NMI backtrace for cpu 1 [ 1733.779795][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1733.790305][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1733.800373][ T30] Call Trace: [ 1733.803667][ T30] [ 1733.806590][ T30] dump_stack_lvl+0x241/0x360 [ 1733.811279][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1733.816488][ T30] ? __pfx__printk+0x10/0x10 [ 1733.821080][ T30] ? vprintk_emit+0x667/0x7c0 [ 1733.825767][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1733.830802][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1733.835765][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1733.841236][ T30] ? _printk+0xd5/0x120 [ 1733.845425][ T30] ? __pfx__printk+0x10/0x10 [ 1733.850018][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1733.854936][ T30] ? __pfx__printk+0x10/0x10 [ 1733.859542][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1733.864584][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1733.870593][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1733.876594][ T30] watchdog+0xff4/0x1040 [ 1733.880833][ T30] ? watchdog+0x1ea/0x1040 [ 1733.885263][ T30] ? __pfx_watchdog+0x10/0x10 [ 1733.889951][ T30] kthread+0x2f0/0x390 [ 1733.894030][ T30] ? __pfx_watchdog+0x10/0x10 [ 1733.898717][ T30] ? __pfx_kthread+0x10/0x10 [ 1733.903330][ T30] ret_from_fork+0x4b/0x80 [ 1733.907765][ T30] ? __pfx_kthread+0x10/0x10 [ 1733.912371][ T30] ret_from_fork_asm+0x1a/0x30 [ 1733.917157][ T30] [ 1733.921405][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1733.927615][ C0] NMI backtrace for cpu 0 [ 1733.927629][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1733.927649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1733.927659][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 1733.927685][ C0] Code: 8b 3d 6c 76 96 0c 48 89 de 5b e9 83 9d 5b 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d7 03 00 65 8b 15 40 4a 70 7e 81 e2 00 01 ff 00 [ 1733.927698][ C0] RSP: 0018:ffffc90000007ed8 EFLAGS: 00000046 [ 1733.927713][ C0] RAX: ffffffff818122aa RBX: 0000000000000000 RCX: ffffffff8e694680 [ 1733.927726][ C0] RDX: ffffffff8e694680 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.927737][ C0] RBP: 000000000004e3b2 R08: ffffffff8181229e R09: 1ffffffff2030de5 [ 1733.927749][ C0] R10: dffffc0000000000 R11: fffffbfff2030de6 R12: dffffc0000000000 [ 1733.927761][ C0] R13: 1ffff92000000fe4 R14: 1ffff11017105a31 R15: ffff8880b882d188 [ 1733.927773][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1733.927787][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1733.927799][ C0] CR2: 00007f39fb8ea5a0 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1733.927814][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1733.927825][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1733.927836][ C0] Call Trace: [ 1733.927842][ C0] [ 1733.927850][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1733.927870][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1733.927897][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1733.927916][ C0] ? nmi_handle+0x2a/0x5a0 [ 1733.927940][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1733.927958][ C0] ? nmi_handle+0x14f/0x5a0 [ 1733.927974][ C0] ? nmi_handle+0x2a/0x5a0 [ 1733.927990][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1733.928009][ C0] ? default_do_nmi+0x63/0x160 [ 1733.928027][ C0] ? exc_nmi+0x123/0x1f0 [ 1733.928046][ C0] ? end_repeat_nmi+0xf/0x53 [ 1733.928067][ C0] ? ktime_get+0x4e/0xb0 [ 1733.928083][ C0] ? ktime_get+0x5a/0xb0 [ 1733.928101][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1733.928120][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1733.928140][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 1733.928159][ C0] [ 1733.928165][ C0] [ 1733.928171][ C0] ktime_get+0x5a/0xb0 [ 1733.928189][ C0] tick_irq_enter+0x100/0x310 [ 1733.928207][ C0] ? tick_nohz_start_idle+0x1c4/0x290 [ 1733.928224][ C0] ? __irq_exit_rcu+0x136/0x1c0 [ 1733.928242][ C0] ? __pfx_tick_irq_enter+0x10/0x10 [ 1733.928261][ C0] ? __irq_exit_rcu+0x136/0x1c0 [ 1733.928278][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1733.928300][ C0] irq_enter_rcu+0x9f/0xe0 [ 1733.928318][ C0] sysvec_apic_timer_interrupt+0x99/0xc0 [ 1733.928339][ C0] [ 1733.928352][ C0] [ 1733.928358][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1733.928381][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1733.928398][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 71 b0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1733.928410][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 1733.928424][ C0] RAX: ffffffff8e694680 RBX: ffff888021aa9064 RCX: 00000000009b67c1 [ 1733.928436][ C0] RDX: 0000000000000001 RSI: ffff888021aa9000 RDI: ffff888021aa9064 [ 1733.928448][ C0] RBP: 000000000003a678 R08: ffff8880b8837c7b R09: 1ffff11017106f8f [ 1733.928459][ C0] R10: dffffc0000000000 R11: ffffffff8bb9ccf0 R12: ffff88801cff5800 [ 1733.928472][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0e4120 [ 1733.928485][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1733.928519][ C0] acpi_idle_enter+0xe4/0x140 [ 1733.928538][ C0] cpuidle_enter_state+0x112/0x480 [ 1733.928555][ C0] ? __pfx_menu_select+0x10/0x10 [ 1733.928576][ C0] cpuidle_enter+0x5d/0xa0 [ 1733.928594][ C0] do_idle+0x375/0x5d0 [ 1733.928615][ C0] ? __pfx_do_idle+0x10/0x10 [ 1733.928632][ C0] ? poll_idle+0x80/0xb0 [ 1733.928655][ C0] ? rest_init+0x31/0x300 [ 1733.928672][ C0] cpu_startup_entry+0x42/0x60 [ 1733.928689][ C0] rest_init+0x2dc/0x300 [ 1733.928706][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1733.928727][ C0] start_kernel+0x47a/0x500 [ 1733.928746][ C0] x86_64_start_reservations+0x2a/0x30 [ 1733.928766][ C0] x86_64_start_kernel+0x9f/0xa0 [ 1733.928785][ C0] common_startup_64+0x13e/0x147 [ 1733.928810][ C0] [ 1734.379523][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1734.386408][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00019-g67784a74e258 #0 [ 1734.396919][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1734.406986][ T30] Call Trace: [ 1734.410271][ T30] [ 1734.413193][ T30] dump_stack_lvl+0x241/0x360 [ 1734.417869][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.423080][ T30] ? __pfx__printk+0x10/0x10 [ 1734.427694][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1734.433690][ T30] ? vscnprintf+0x5d/0x90 [ 1734.438031][ T30] panic+0x349/0x860 [ 1734.441929][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1734.448087][ T30] ? __pfx_panic+0x10/0x10 [ 1734.452486][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1734.457857][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1734.463393][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1734.468898][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1734.475055][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1734.481305][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1734.487478][ T30] watchdog+0x1033/0x1040 [ 1734.491832][ T30] ? watchdog+0x1ea/0x1040 [ 1734.496250][ T30] ? __pfx_watchdog+0x10/0x10 [ 1734.500934][ T30] kthread+0x2f0/0x390 [ 1734.505008][ T30] ? __pfx_watchdog+0x10/0x10 [ 1734.509711][ T30] ? __pfx_kthread+0x10/0x10 [ 1734.514300][ T30] ret_from_fork+0x4b/0x80 [ 1734.518735][ T30] ? __pfx_kthread+0x10/0x10 [ 1734.523415][ T30] ret_from_fork_asm+0x1a/0x30 [ 1734.528201][ T30] [ 1734.531317][ T30] Kernel Offset: disabled [ 1734.535631][ T30] Rebooting in 86400 seconds..